[bcfg2 password disclosure]

[udev: creates aacraid devices that are rw by group floppy]

[udev wrong permissions on raid devices]

[mt-daapd remote access & default password]

[znc file access security hole]

[hinfo code injection]

[dsniff urlsnarf missing output sanitization]

[insecure rpath in libflash-mozplugin]

[yacas insecure rpath]

[obexpushd arbitrary command execution]

[motion insecure tempfile creation]

[zabbix format string vulnerabilities]

[zabbix buffer overflows]

[logrotate race condition could lead to file disclosure]

[realtime-lsm-source: wrong permissions might lead to local root]

[diffmon information leakage]

[double-free vulnerability in the Real Media demuxer]

[courier-authdaemon: wrong socket permissions may lead to password disclosure]

[Buffer overflow in XML::Parser::Expat triggered by deep nesting]

[Buffer overflow in XML::Parser::Expat triggered by utf8]