Security updates for Thursday OpenSSL has updates released today, with two vulnerabilities of
"High" severity, as described in its advisory. One of
the High vulnerabilities is a reclassification of the FREAK vulnerability due to the prevalence of
servers with RSA export ciphers available, the other is a denial of service
in OpenSSL 1.0.2.
CentOS has updated freetype (C6:
multiple vulnerabilities) and unzip (C6:
multiple vulnerabilities).
Debian has updated file (denial
of service).
Debian-LTS has updated mono
(three SSL/TLS vulnerabilities).
Gentoo has updated python
(multiple vulnerabilities, two from 2013).
Mageia has updated moodle
(multiple vulnerabilities).
openSUSE has updated gdm (13.2:
screen lock bypass), glusterfs (13.2:
denial of service), and libssh2_org (13.2,
13.1: information leak).
Oracle has updated unzip (OL7; OL6:
multiple vulnerabilities).
Red Hat has updated postgresql92-postgresql (RHSC1: multiple
vulnerabilities) and unzip (RHEL6&7:
multiple vulnerabilities).
SUSE has updated kernel (SLE12:
multiple vulnerabilities).