Post Syndicated from jake original http://lwn.net/Articles/695088/rss
Arch Linux has updated bind
(denial of service).
CentOS has updated java-1.8.0-openjdk (C7; C6: multiple vulnerabilities).
Debian-LTS has updated libarchive
(multiple vulnerabilities, most from 2015).
Fedora has updated openssh (F24:
user enumeration via timing side-channel) and p7zip (F24: two code execution flaws).
openSUSE has updated dhcp (42.1:
denial of service).
Oracle has updated java-1.8.0-openjdk (OL7; OL6: multiple vulnerabilities).
Red Hat has updated java-1.6.0-sun (multiple vulnerabilities), java-1.7.0-oracle (multiple vulnerabilities), java-1.8.0-oracle (RHEL6&7: multiple vulnerabilities), and
openstack-neutron (RHOSP8; RHOSP7: three vulnerabilities, one from 2015).
Scientific Linux has updated java-1.8.0-openjdk (SL6&7: multiple vulnerabilities).
SUSE has updated obs-service-source_validator (SLE12: code execution).