asterisk allows calls on prohibited networks

liboping 1.3.2 allows users reading arbitrary files upon the local system.

gri before 2.12.18 generates temporary files in an insecure way.

clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.

viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.

There is a possible heap overflow in libclamav/fsg.c before 0.100.0.

archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.

coreutils: tty hijacking possible in "su" via TIOCSTI ioctl

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

mutt: denial of service via a series of requests to temporary files

Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.

ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).