Slackware Security Advisory - New libvorbis packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.
319e8cb18319e94e18b23a827f3a536cf699a213d5337f597618cc27dd026992
Debian Linux Security Advisory 4144-1 - Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, execution of arbitrary code, incorrect LDAP/GSS authentication, insecure use of cryptography or bypass of deserialisation restrictions.
2d5384afbd0e90976390bc413c367bc0957397bf968c6767eda699136dbe59b4
Debian Linux Security Advisory 4143-1 - Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code.
ae578097448b181069464aaacea1cd098476dd78446feaa86438e6cee725f8df
Debian Linux Security Advisory 4142-1 - Marios Nicolaides discovered that the PHP plugin in uWSGI, a fast, self-healing application container server, does not properly handle a DOCUMENT_ROOT check during use of the --php-docroot option, allowing a remote attacker to mount a directory traversal attack and gain unauthorized read access to sensitive files located outside of the web root directory.
969cfa20e880d889e8ea8efc67b9304caf58b0e6d52c234897c6d7c7569b4f9c
Easy Chat Server version 3.1 remote buffer overflow exploit.
735f5be79d8b5f679d32655f49ccd1a765948fdea0b9209de8b28fa32505a10c