Friday's security updates Arch Linux has updated botan (multiple vulnerabilities) and expat (code execution).
CentOS has updated java-1.7.0-openjdk (C6; C5; C7: sandbox bypass) and java-1.8.0-openjdk (C6; C7: sandbox bypass).
Fedora has updated php-pecl-http (F23: multiple vulnerabilities) and torbrowser-launcher (F23: signature
verification bypass).
Mageia has updated filezilla
(M5: code execution), git (M5: code execution), iceape (M5: multiple vulnerabilities), krb5 (M5: null pointer dereference), libotr (M5: code execution), moodle (M5: multiple vulnerabilities), openafs (M5: multiple vulnerabilities), pidgin-otr (M5: code execution), webkit (M5: multiple vulnerabilities), and webkit2 (M5: multiple vulnerabilities).
openSUSE has updated quagga
(Leap 42.1: code execution).
Oracle has updated java-1.7.0-openjdk (O7; O6; O5: sandbox bypass) and java-1.8.0-openjdk (O7; O6: sandbox bypass).
Red Hat has updated java-1.7.0-openjdk (RHEL6; RHEL7:
sandbox bypass), java-1.7.0-oracle (RHEL7: sandbox bypass), java-1.8.0-openjdk (RHEL6, RHEL7: sandbox bypass), and java-1.8.0-oracle (RHEL7: sandbox bypass).
Scientific Linux has updated java-1.7.0-openjdk (SL6; SL7:
sandbox bypass)
and java-1.8.0-openjdk (SL6; SL7: sandbox bypass).
Ubuntu has updated openjdk-7
(14.04, 15.10: sandbox bypass).