[amavids-new uses contrib/non-free packers without security support in default config]

[dokuwiki conf directory accessible by web users]

[kaya buffer overflow, cross-site scripting and data leak]

[python-django flup/FastCGI/debugging issue]

[netpbm heap corruption]

[wordpress unregister_globals workaround from 2.0.7]

[various crashes and infinite loops in ffmpeg]

[libjabber DoS]

[bcfg2 password disclosure]

[udev: creates aacraid devices that are rw by group floppy]

[udev wrong permissions on raid devices]

[mt-daapd remote access & default password]

[znc file access security hole]

[hinfo code injection]

[dsniff urlsnarf missing output sanitization]

[insecure rpath in libflash-mozplugin]

[yacas insecure rpath]

[obexpushd arbitrary command execution]

[motion insecure tempfile creation]

[zabbix format string vulnerabilities]