Security advisories for Wednesday

Arch Linux has updated mercurial (multiple vulnerabilities).

CentOS has updated graphite2 (C7: multiple vulnerabilities), nspr (C6: two vulnerabilities), nss (C6: two vulnerabilities), and nss-util (C6: two vulnerabilities).

Debian has updated oar (privilege escalation).

Mageia has updated file (buffer over-write), java (sandbox bypass), php (multiple vulnerabilities), and squid (two vulnerabilities).

openSUSE has updated git (Leap42.1: code execution).

Oracle has updated graphite2 (OL7: multiple vulnerabilities) and nss, nss-util, and nspr (OL6: code execution).

Red Hat has updated bind (RHEL6.2: two vulnerabilities) and graphite2 (RHEL7: multiple vulnerabilities).

Scientific Linux has updated graphite2 (SL7: multiple vulnerabilities) and nss, nss-util, nspr (SL6: two vulnerabilities).

Slackware has updated subversion (code execution).

SUSE has updated java-1_7_0-openjdk (SLE12-SP1; SLE11-SP4: sandbox bypass) and java-1_8_0-openjdk (SLE12-SP1: sandbox bypass).

Ubuntu has updated kernel (15.10; 14.04: multiple vulnerabilities), linux-lts-trusty (12.04: multiple vulnerabilities), linux-lts-utopic (14.04: multiple vulnerabilities), linux-lts-vivid (14.04: multiple vulnerabilities), linux-lts-wily (14.04: multiple vulnerabilities), and linux-raspi2 (15.10: multiple vulnerabilities).