Friday's security updates

[Posted October 23, 2015 by n8willis]

[Security] Posted Oct 23, 2015 16:43 UTC (Fri) by n8willis

Arch Linux has updated jdk7-openjdk (multiple vulnerabilities), jdk8-openjdk (multiple vulnerabilities), jre7-openjdk (multiple vulnerabilities), jre7-openjdk-headless (multiple vulnerabilities), jre8-openjdk (multiple vulnerabilities), and jre8-openjdk-headless (multiple vulnerabilities).

CentOS has updated kvm (C5: code execution) and qemu-kvm (C6: code execution).

Debian-LTS has updated cakephp (denial of service), optipng (use after free), and polarssl (code execution).

openSUSE has updated python-Django (13.2: multiple vulnerabilities).

Oracle has updated kvm (O5: code execution) and qemu-kvm (O6: code execution).

Red Hat has updated java-1.6.0-sun (RHEL 5, 6, 7: multiple vulnerabilities), java-1.7.0-oracle (RHEL 5, 6, 7: multiple vulnerabilities), java-1.8.0-oracle (RHEL 6, 7: multiple vulnerabilities), kvm (RHEL 5: code execution), openstack-ironic-discoverd (RHEL OSP 7: command execution), and qemu-kvm (RHEL 6: code execution).

Scientific Linux has updated kvm (SL5: code execution) and qemu-kvm (SL6: code execution).

Ubuntu has updated miniupnpc (15.10: code execution) and oxide-qt (15.10: multiple vulnerabilities).