[Heap overflow in libosip URI parsing]

[Missing input validation in xtradius]

[coreutils ignores umask when using -m in mkdir, mkfifo and mknod]

[hdup inproperly preserves permissions on directories]

[trackballs: Follows symlinks as gid games]

[Should include "UNRESTRICTED access to your computer" warning somewhere]

[downloads.ini writable by group users, world-readable]

[Multiple security issues when using distcc without ssh auth]

[nvi: init.d recover file security bugs]

[libnet-ssleay-perl: /tmp/entropy insecure]

[Insecure temp files in lilo]

[xshisen follows symlinks for shared gid games files]

[gs-esp: Insecure usage of /tmp in source code]

[Inconsistent escaping of user supplied data in dbauthpgsql.c]

[Does not do escaping in mysql version - both a worrying flaw and stops adduser working]

[tar's rmt command may have undesired side effects]

[Insecure temp files in linux-wlan-ng]

[microcode.ctl downloads microcode w/o user confirmation]

[phpwiki shares a cookie for all wikis on a host]

[Format string bug in sysklogd's syslog_tst sources]