Friday's security updates

Debian has updated libgcrypt20 (key leak) and nginx (three vulnerabilities).

Debian-LTS has updated eglibc (regression in previous security update).

Fedora has updated nodejs-is-my-json-valid (F22: denial of service) and python-pymongo (F23; F22: two vulnerabilities).

openSUSE has updated cacti (42.1; 13.2; 13.1: multiple vulnerabilities), cacti-spine (13.1: unspecified), and openssl (13.1: cipher downgrade).

Slackware has updated mozilla (14.1: unspecified).

Ubuntu has updated firefox (15.10, 14.04, 12.04: same-origin restriction bypass) and postgresql-9.1, postgresql-9.3, postgresql-9.4 (15.10, 14.04, 12.04: two vulnerabilities).

Comments (none posted)