[Secure-testing-team] Bug#780751: mono: CVE-2015-2318 CVE-2015-2319 CVE-2015-2320

[Salvatore Bonaccorso]

Source: mono
Version: 3.2.8+dfsg-9
Severity: grave
Tags: security upstream fixed-upstream

the following vulnerabilities were published for mono.

CVE-2015-2318[0]:
SKIP-TLS issue

CVE-2015-2319[1]:
FREAK issue

CVE-2015-2320[2]:
Remove the client-side SSLv2 fallback

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2015-2318
[1] https://security-tracker.debian.org/tracker/CVE-2015-2319
[2] https://security-tracker.debian.org/tracker/CVE-2015-2320

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore