[A] means this GLSA was already applied,
[U] means the system is not affected and
[N] indicates that the system might be affected.

200310-03 [U] Apache: multiple buffer overflows ( www-servers/apache )
200310-04 [U] Apache: buffer overflows and a possible information disclosure ( www-servers/apache )
200311-01 [U] kdebase: KDM vulnerabilities ( kde-base/kdebase )
200311-02 [U] Opera: buffer overflows in 7.11 and 7.20 ( www-client/opera )
200311-03 [U] HylaFAX: Remote code exploit in hylafax ( net-misc/hylafax )
200311-04 [U] FreeRADIUS: heap exploit and NULL pointer dereference vulnerability ( net-dialup/freeradius )
200311-05 [U] Ethereal: security problems in ethereal 0.9.15 ( net-analyzer/ethereal )
200311-06 [U] glibc: getgrouplist buffer overflow vulnerability ( sys-libs/glibc )
200311-07 [U] phpSysInfo: arbitrary code execution and directory traversal ( www-apps/phpsysinfo )
200311-08 [U] Libnids: remote code execution vulnerability ( net-libs/libnids )
200312-01 [U] rsync.gentoo.org: rotation server compromised ()
200312-03 [U] rsync: exploitable heap overflow ( net-misc/rsync )
200312-04 [U] CVS: malformed module request vulnerability ( dev-util/cvs )
200312-05 [U] GnuPG: ElGamal signing keys compromised and format string vulnerability ( app-crypt/gnupg )
200312-06 [U] XChat: malformed dcc send request denial of service ( net-irc/xchat )
200312-07 [U] Two buffer overflows in lftp ( net-ftp/lftp )
200312-08 [U] CVS: possible root compromise when using CVS pserver ( dev-util/cvs )
200401-01 [U] Linux kernel do_mremap() local privilege escalation vulnerability ( sys-kernel/alpha-sources  sys-kernel/ck-sources  sys-kernel/hppa-sources ... )
200401-02 [U] Honeyd remote detection vulnerability via a probe packet ( net-analyzer/honeyd )
200401-03 [U] Apache mod_python Denial of Service vulnerability ( www-apache/mod_python )
200401-04 [U] GAIM 0.75 Remote overflows ( net-im/gaim )
200402-01 [U] PHP setting leaks from .htaccess files on virtual hosts ( dev-php/mod_php )
200402-02 [U] XFree86 Font Information File Buffer Overflow ( x11-base/xfree )
200402-03 [U] Monkeyd Denial of Service vulnerability ( www-servers/monkeyd )
200402-04 [U] Gallery 1.4.1 and below remote exploit vulnerability ( www-apps/gallery )
200402-05 [U] phpMyAdmin < 2.5.6-rc1: possible attack against export.php ( dev-db/phpmyadmin )
200402-06 [U] Updated kernel packages fix the AMD64 ptrace vulnerability ( sys-kernel/gentoo-test-sources  sys-kernel/gs-sources  sys-kernel/gentoo-sources ... )
200402-07 [U] Clam Antivirus DoS vulnerability ( app-antivirus/clamav )
200403-01 [U] Libxml2 URI Parsing Buffer Overflow Vulnerabilities ( dev-libs/libxml2 )
200403-02 [U] Linux kernel do_mremap local privilege escalation vulnerability ( sys-kernel/alpha-sources  sys-kernel/ck-sources  sys-kernel/hppa-sources ... )
200403-03 [U] Multiple OpenSSL Vulnerabilities ( dev-libs/openssl )
200403-04 [U] Multiple security vulnerabilities in Apache 2 ( www-servers/apache )
200403-05 [U] UUDeview MIME Buffer Overflow ( app-text/uudeview )
200403-06 [U] Multiple remote buffer overflow vulnerabilities in Courier ( net-mail/courier-imap  mail-mta/courier )
200403-07 [U] Multiple remote overflows and vulnerabilities in Ethereal ( net-analyzer/ethereal )
200403-08 [U] oftpd DoS vulnerability ( net-ftp/oftpd )
200403-09 [U] Buffer overflow in Midnight Commander ( app-misc/mc )
200403-10 [U] Fetchmail 6.2.5 fixes a remote DoS ( net-mail/fetchmail )
200403-11 [U] Squid ACL [url_regex] bypass vulnerability ( net-proxy/squid )
200403-12 [U] OpenLDAP DoS Vulnerability ( net-nds/openldap )
200403-13 [U] Remote buffer overflow in MPlayer ( media-video/mplayer )
200403-14 [U] Multiple Security Vulnerabilities in Monit ( app-admin/monit )
200404-01 [U] Insecure sandbox temporary lockfile vulnerabilities in Portage ( sys-apps/portage )
200404-02 [U] KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability ( kde-base/kde )
200404-03 [U] Tcpdump Vulnerabilities in ISAKMP Parsing ( net-libs/libpcap  net-analyzer/tcpdump )
200404-04 [U] Multiple vulnerabilities in sysstat ( app-admin/sysstat )
200404-05 [U] ipsec-tools contains an X.509 certificates vulnerability. ( net-firewall/ipsec-tools )
200404-06 [U] Util-linux login may leak sensitive data ( sys-apps/util-linux )
200404-07 [U] ClamAV RAR Archive Remote Denial Of Service Vulnerability ( app-antivirus/clamav )
200404-08 [U] GNU Automake symbolic link vulnerability ( sys-devel/automake )
200404-09 [U] Cross-realm trust vulnerability in Heimdal ( app-crypt/heimdal )
200404-10 [U] iproute local Denial of Service vulnerability ( sys-apps/iproute )
200404-11 [U] Multiple Vulnerabilities in pwlib ( dev-libs/pwlib )
200404-12 [U] Scorched 3D server chat box format string vulnerability ( games-strategy/scorched3d )
200404-13 [U] CVS Server and Client Vulnerabilities ( dev-util/cvs )
200404-14 [U] Multiple format string vulnerabilities in cadaver ( net-misc/cadaver )
200404-15 [U] XChat 2.0.x SOCKS5 Vulnerability ( net-irc/xchat )
200404-16 [U] Multiple new security vulnerabilities in monit ( app-admin/monit )
200404-17 [U] ipsec-tools and iputils contain a remote DoS vulnerability ( net-misc/iputils  net-firewall/ipsec-tools )
200404-18 [U] Multiple Vulnerabilities in ssmtp ( mail-mta/ssmtp )
200404-19 [U] Buffer overflows and format string vulnerabilities in LCDproc ( app-misc/lcdproc )
200404-20 [U] Multiple vulnerabilities in xine ( media-video/xine-ui  media-libs/xine-lib )
200404-21 [U] Multiple Vulnerabilities in Samba ( net-fs/samba )
200405-01 [U] Multiple format string vulnerabilities in neon 0.24.4 and earlier ( net-misc/neon )
200405-02 [U] Multiple vulnerabilities in LHa ( app-arch/lha )
200405-03 [U] ClamAV VirusEvent parameter vulnerability ( app-antivirus/clamav )
200405-04 [U] OpenOffice.org vulnerability when using DAV servers ( app-office/openoffice  app-office/openoffice-ximian  app-office/openoffice-bin ... )
200405-05 [U] Utempter symlink vulnerability ( sys-apps/utempter )
200405-06 [U] libpng denial of service vulnerability ( media-libs/libpng )
200405-07 [U] Exim verify=header_syntax buffer overflow ( mail-mta/exim )
200405-08 [U] Pound format string vulnerability ( www-servers/pound )
200405-09 [U] ProFTPD Access Control List bypass vulnerability ( net-ftp/proftpd )
200405-10 [U] Icecast denial of service vulnerability ( net-misc/icecast )
200405-11 [U] KDE URI Handler Vulnerabilities ( kde-base/kdelibs )
200405-12 [U] CVS heap overflow vulnerability ( dev-util/cvs )
200405-13 [U] neon heap-based buffer overflow ( net-misc/neon )
200405-14 [U] Buffer overflow in Subversion ( dev-util/subversion )
200405-15 [U] cadaver heap-based buffer overflow ( net-misc/cadaver )
200405-16 [U] Multiple XSS Vulnerabilities in SquirrelMail ( mail-client/squirrelmail )
200405-17 [U] Multiple vulnerabilities in metamail ( net-mail/metamail )
200405-18 [U] Buffer Overflow in Firebird ( dev-db/firebird )
200405-19 [U] Opera telnet URI handler file creation/truncation vulnerability ( www-client/opera )
200405-20 [U] Insecure Temporary File Creation In MySQL ( dev-db/mysql )
200405-21 [U] Midnight Commander: Multiple vulnerabilities ( app-misc/mc )
200405-22 [U] Apache 1.3: Multiple vulnerabilities ( www-servers/apache )
200405-23 [U] Heimdal: Kerberos 4 buffer overflow in kadmin ( app-crypt/heimdal )
200405-24 [U] MPlayer, xine-lib: vulnerabilities in RTSP stream handling ( media-video/mplayer  media-libs/xine-lib )
200405-25 [U] tla: Multiple vulnerabilities in included libneon ( dev-util/tla )
200406-01 [U] Ethereal: Multiple security problems ( net-analyzer/ethereal )
200406-02 [U] tripwire: Format string vulnerability ( app-admin/tripwire )
200406-03 [U] sitecopy: Multiple vulnerabilities in included libneon ( net-misc/sitecopy )
200406-04 [U] Mailman: Member password disclosure vulnerability ( net-mail/mailman )
200406-05 [U] Apache: Buffer overflow in mod_ssl ( www-servers/apache  net-www/mod_ssl )
200406-06 [U] CVS: additional DoS and arbitrary code execution vulnerabilities ( dev-util/cvs )
200406-07 [U] Subversion: Remote heap overflow ( dev-util/subversion )
200406-08 [U] Squirrelmail: Another XSS vulnerability ( mail-client/squirrelmail )
200406-09 [U] Horde-Chora: Remote code execution ( www-apps/horde-chora )
200406-10 [U] Gallery: Privilege escalation vulnerability ( www-apps/gallery )
200406-11 [U] Horde-IMP: Input validation vulnerability ( www-apps/horde-imp )
200406-12 [U] Webmin: Multiple vulnerabilities ( app-admin/webmin )
200406-13 [U] Squid: NTLM authentication helper buffer overflow ( net-proxy/squid )
200406-14 [U] aspell: Buffer overflow in word-list-compress ( app-text/aspell )
200406-15 [U] Usermin: Multiple vulnerabilities ( app-admin/usermin )
200406-16 [U] Apache 1.3: Buffer overflow in mod_proxy ( www-servers/apache )
200406-17 [U] IPsec-Tools: authentication bug in racoon ( net-firewall/ipsec-tools )
200406-18 [U] gzip: Insecure creation of temporary files ( app-arch/gzip )
200406-19 [U] giFT-FastTrack: remote denial of service attack ( net-p2p/gift-fasttrack )
200406-20 [U] FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling ( net-misc/openswan  net-misc/strongswan  net-misc/freeswan ... )
200406-21 [U] mit-krb5: Multiple buffer overflows in krb5_aname_to_localname ( app-crypt/mit-krb5 )
200406-22 [U] Pavuk: Remote buffer overflow ( net-misc/pavuk )
200407-01 [U] Esearch: Insecure temp file handling ( app-portage/esearch )
200407-02 [U] Linux Kernel: Multiple vulnerabilities ( sys-kernel/rsbac-dev-sources  sys-kernel/alpha-sources  sys-kernel/ck-sources ... )
200407-03 [U] Apache 2: Remote denial of service attack ( www-servers/apache )
200407-04 [U] Pure-FTPd: Potential DoS when maximum connections is reached ( net-ftp/pure-ftpd )
200407-05 [U] XFree86, X.org: XDM ignores requestPort setting ( x11-base/xorg-x11  x11-base/xfree )
200407-06 [U] libpng: Buffer overflow on row buffers ( media-libs/libpng )
200407-07 [U] Shorewall : Insecure temp file handling ( net-firewall/shorewall )
200407-08 [U] Ethereal: Multiple security problems ( net-analyzer/ethereal )
200407-09 [U] MoinMoin: Group ACL bypass ( www-apps/moinmoin )
200407-10 [U] rsync: Directory traversal in rsync daemon ( net-misc/rsync )
200407-11 [U] wv: Buffer overflow vulnerability ( app-text/wv )
200407-12 [U] Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling ( sys-kernel/rsbac-dev-sources  sys-kernel/pegasos-dev-sources  sys-kernel/hppa-dev-sources ... )
200407-13 [U] PHP: Multiple security vulnerabilities ( dev-php/mod_php  dev-php/php  dev-php/php-cgi )
200407-14 [U] Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries ( games-fps/ut2004  games-server/ut2003-ded  games-fps/ut2003 ... )
200407-15 [U] Opera: Multiple spoofing vulnerabilities ( www-client/opera )
200407-16 [U] Linux Kernel: Multiple DoS and permission vulnerabilities ( sys-kernel/rsbac-dev-sources  sys-kernel/alpha-sources  sys-kernel/ck-sources ... )
200407-17 [U] l2tpd: Buffer overflow ( net-dialup/l2tpd )
200407-18 [U] mod_ssl: Format string vulnerability ( net-www/mod_ssl )
200407-19 [U] Pavuk: Digest authentication helper buffer overflow ( net-misc/pavuk )
200407-20 [U] Subversion: Vulnerability in mod_authz_svn ( dev-util/subversion )
200407-21 [U] Samba: Multiple buffer overflows ( net-fs/samba )
200407-22 [U] phpMyAdmin: Multiple vulnerabilities ( dev-db/phpmyadmin )
200407-23 [U] SoX: Multiple buffer overflows ( media-sound/sox )
200408-01 [U] MPlayer: GUI filename handling overflow ( media-video/mplayer )
200408-02 [U] Courier: Cross-site scripting vulnerability in SqWebMail ( mail-mta/courier )
200408-03 [U] libpng: Numerous vulnerabilities ( media-libs/libpng )
200408-04 [U] PuTTY: Pre-authentication arbitrary code execution ( net-misc/putty )
200408-05 [U] Opera: Multiple new vulnerabilities ( www-client/opera )
200408-06 [U] SpamAssassin: Denial of Service vulnerability ( mail-filter/spamassassin )
200408-07 [U] Horde-IMP: Input validation vulnerability for Internet Explorer users ( www-apps/horde-imp )
200408-08 [U] Cfengine: RSA Authentication Heap Corruption ( net-misc/cfengine )
200408-09 [U] Roundup: Filesystem access vulnerability ( www-apps/roundup )
200408-10 [U] gv: Exploitable Buffer Overflow ( app-text/gv )
200408-11 [U] Nessus: "adduser" race condition vulnerability ( net-analyzer/nessus )
200408-12 [U] Gaim: MSN protocol parsing function buffer overflow ( net-im/gaim )
200408-13 [U] kdebase, kdelibs: Multiple security issues ( kde-base/kdelibs  kde-base/kdebase )
200408-14 [U] acroread: UUDecode filename buffer overflow ( app-text/acroread )
200408-15 [U] Tomcat: Insecure installation ( www-servers/tomcat )
200408-16 [U] glibc: Information leak with LD_DEBUG ( sys-libs/glibc )
200408-17 [U] rsync: Potential information leakage ( net-misc/rsync )
200408-18 [U] xine-lib: VCD MRL buffer overflow ( media-libs/xine-lib )
200408-19 [U] courier-imap: Remote Format String Vulnerability ( net-mail/courier-imap )
200408-20 [U] Qt: Image loader overflows ( x11-libs/qt )
200408-21 [U] Cacti: SQL injection vulnerability ( net-analyzer/cacti )
200408-22 [U] Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities ( mail-client/mozilla-thunderbird-bin  www-client/mozilla  www-client/epiphany ... )
200408-23 [U] kdelibs: Cross-domain cookie injection vulnerability ( kde-base/kdelibs )
200408-24 [U] Linux Kernel: Multiple information leaks ( sys-kernel/rsbac-dev-sources  sys-kernel/alpha-sources  sys-kernel/ck-sources ... )
200408-25 [U] MoinMoin: Group ACL bypass ( www-apps/moinmoin )
200408-26 [U] zlib: Denial of service vulnerability ( sys-libs/zlib )
200408-27 [U] Gaim: New vulnerabilities ( net-im/gaim )
200409-01 [U] vpopmail: Multiple vulnerabilities ( net-mail/vpopmail )
200409-02 [U] MySQL: Insecure temporary file creation in mysqlhotcopy ( dev-db/mysql )
200409-03 [U] Python 2.2: Buffer overflow in getaddrinfo() ( dev-lang/python )
200409-04 [U] Squid: Denial of service when using NTLM authentication ( net-proxy/squid )
200409-05 [U] Gallery: Arbitrary command execution ( www-apps/gallery )
200409-06 [U] eGroupWare: Multiple XSS vulnerabilities ( www-apps/egroupware )
200409-07 [U] xv: Buffer overflows in image handling ( media-gfx/xv )
200409-08 [U] Ruby: CGI::Session creates files insecurely ( dev-lang/ruby )
200409-09 [U] MIT krb5: Multiple vulnerabilities ( app-crypt/mit-krb5 )
200409-10 [U] multi-gnome-terminal: Information leak ( x11-terms/multi-gnome-terminal )
200409-11 [U] star: Suid root vulnerability ( app-arch/star )
200409-12 [U] ImageMagick, imlib, imlib2: BMP decoding buffer overflows ( media-gfx/imagemagick  media-libs/imlib2  media-libs/imlib )
200409-13 [U] LHa: Multiple vulnerabilities ( app-arch/lha )
200409-14 [U] Samba: Remote printing non-vulnerability ()
200409-15 [U] Webmin, Usermin: Multiple vulnerabilities in Usermin ( app-admin/webmin  app-admin/usermin )
200409-16 [U] Samba: Denial of Service vulnerabilities ( net-fs/samba )
200409-17 [U] SUS: Local root vulnerability ( app-admin/sus )
200409-18 [U] cdrtools: Local root vulnerability in cdrecord if set SUID root ( app-cdr/cdrtools )
200409-19 [U] Heimdal: ftpd root escalation ( app-crypt/heimdal )
200409-20 [U] mpg123: Buffer overflow vulnerability ( media-sound/mpg123 )
200409-21 [U] Apache 2, mod_dav: Multiple vulnerabilities ( www-servers/apache  net-www/mod_dav )
200409-22 [U] phpGroupWare: XSS vulnerability in wiki module ( www-apps/phpgroupware )
200409-23 [U] SnipSnap: HTTP response splitting ( dev-java/snipsnap-bin )
200409-24 [U] Foomatic: Arbitrary command execution in foomatic-rip filter ( net-print/foomatic-filters  net-print/foomatic )
200409-25 [U] CUPS: Denial of service vulnerability ( net-print/cups )
200409-26 [U] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities ( mail-client/mozilla-thunderbird-bin  www-client/mozilla  www-client/epiphany ... )
200409-27 [U] glFTPd: Local buffer overflow vulnerability ( net-ftp/glftpd )
200409-28 [U] GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities ( x11-libs/gtk+  media-libs/gdk-pixbuf )
200409-29 [U] FreeRADIUS: Multiple Denial of Service vulnerabilities ( net-dialup/freeradius )
200409-30 [U] xine-lib: Multiple vulnerabilities ( media-libs/xine-lib )
200409-31 [U] jabberd 1.x: Denial of Service vulnerability ( net-im/jabberd )
200409-32 [U] getmail: Filesystem overwrite vulnerability ( net-mail/getmail )
200409-33 [U] Apache: Exposure of protected directories ( www-servers/apache )
200409-34 [U] X.org, XFree86: Integer and stack overflows in libXpm ( x11-base/xorg-x11  x11-base/xfree )
200409-35 [U] Subversion: Metadata information leak ( dev-util/subversion )
200410-01 [U] sharutils: Buffer overflows in shar.c and unshar.c ( app-arch/sharutils )
200410-02 [U] Netpbm: Multiple temporary file issues ( media-libs/netpbm )
200410-03 [U] NetKit-telnetd: buffer overflows in telnet and telnetd ( net-misc/netkit-telnetd )
200410-04 [U] PHP: Memory disclosure and arbitrary location file upload ( dev-php/mod_php  dev-php/php  dev-php/php-cgi )
200410-05 [U] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities ( dev-libs/cyrus-sasl )
200410-06 [U] CUPS: Leakage of sensitive information ( net-print/cups )
200410-07 [U] ed: Insecure temporary file handling ( sys-apps/ed )
200410-08 [U] ncompress: Buffer overflow ( app-arch/ncompress )
200410-09 [U] LessTif: Integer and stack overflows in libXpm ( x11-libs/lesstif )
200410-10 [U] gettext: Insecure temporary file handling ( sys-devel/gettext )
200410-11 [U] tiff: Buffer overflows in image decoding ( media-libs/tiff  media-gfx/xv )
200410-12 [U] WordPress: HTTP response splitting and XSS vulnerabilities ( www-apps/wordpress )
200410-13 [U] BNC: Input validation flaw ( net-irc/bnc )
200410-14 [U] phpMyAdmin: Vulnerability in MIME-based transformation system ( dev-db/phpmyadmin )
200410-15 [U] Squid: Remote DoS vulnerability ( net-proxy/squid )
200410-16 [U] PostgreSQL: Insecure temporary file use in make_oidjoins_check ( dev-db/postgresql )
200410-17 [U] OpenOffice.org: Temporary files disclosure ( app-office/openoffice  app-office/openoffice-bin  app-office/openoffice-ximian )
200410-18 [U] Ghostscript: Insecure temporary file use in multiple scripts ( app-text/ghostscript-esp )
200410-19 [U] glibc: Insecure tempfile handling in catchsegv script ( sys-libs/glibc )
200410-20 [U] Xpdf, CUPS: Multiple integer overflows ( app-text/xpdf  net-print/cups )
200410-21 [U] Apache 2, mod_ssl: Bypass of SSLCipherSuite directive ( www-servers/apache  net-www/mod_ssl )
200410-22 [U] MySQL: Multiple vulnerabilities ( dev-db/mysql )
200410-23 [U] Gaim: Multiple vulnerabilities ( net-im/gaim )
200410-24 [U] MIT krb5: Insecure temporary file use in send-pr.sh ( app-crypt/mit-krb5 )
200410-25 [U] Netatalk: Insecure tempfile handling in etc2ps.sh ( net-fs/netatalk )
200410-26 [U] socat: Format string vulnerability ( net-misc/socat )
200410-27 [U] mpg123: Buffer overflow vulnerabilities ( media-sound/mpg123 )
200410-28 [U] rssh: Format string vulnerability ( app-shells/rssh )
200410-29 [U] PuTTY: Pre-authentication buffer overflow ( net-misc/putty )
200410-30 [U] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf ( app-text/gpdf  kde-base/kdegraphics  app-office/koffice )
200410-31 [U] Archive::Zip: Virus detection evasion ( dev-perl/Archive-Zip )
200411-01 [U] ppp: No denial of service vulnerability ()
200411-02 [U] Cherokee: Format string vulnerability ( www-servers/cherokee )
200411-03 [U] Apache 1.3: Buffer overflow vulnerability in mod_include ( www-servers/apache )
200411-04 [U] Speedtouch USB driver: Privilege escalation vulnerability ( net-dialup/speedtouch )
200411-05 [U] libxml2: Remotely exploitable buffer overflow ( dev-libs/libxml2 )
200411-06 [U] MIME-tools: Virus detection evasion ( dev-perl/MIME-tools )
200411-07 [U] Proxytunnel: Format string vulnerability ( net-misc/proxytunnel )
200411-08 [U] GD: Integer overflow ( media-libs/gd )
200411-09 [U] shadow: Unauthorized modification of account information ( sys-apps/shadow )
200411-10 [U] Gallery: Cross-site scripting vulnerability ( www-apps/gallery )
200411-11 [U] ImageMagick: EXIF buffer overflow ( media-gfx/imagemagick )
200411-12 [U] zgv: Multiple buffer overflows ( media-gfx/zgv )
200411-13 [U] Portage, Gentoolkit: Temporary file vulnerabilities ( app-portage/gentoolkit  sys-apps/portage )
200411-14 [U] Kaffeine, gxine: Remotely exploitable buffer overflow ( media-video/kaffeine  media-video/gxine )
200411-15 [U] OpenSSL, Groff: Insecure tempfile handling ( sys-apps/groff  dev-libs/openssl )
200411-16 [U] zip: Path name buffer overflow ( app-arch/zip )
200411-17 [U] mtink: Insecure tempfile handling ( net-print/mtink )
200411-18 [U] Apache 2.0: Denial of Service by memory consumption ( www-servers/apache )
200411-19 [U] Pavuk: Multiple buffer overflows ( net-misc/pavuk )
200411-20 [U] ez-ipupdate: Format string vulnerability ( net-dns/ez-ipupdate )
200411-21 [U] Samba: Multiple vulnerabilities ( net-fs/samba )
200411-22 [U] Davfs2, lvm-user: Insecure tempfile handling ( sys-fs/lvm-user  net-fs/davfs2 )
200411-23 [U] Ruby: Denial of Service issue ( dev-lang/ruby )
200411-24 [U] BNC: Buffer overflow vulnerability ( net-irc/bnc )
200411-25 [U] SquirrelMail: Encoded text XSS vulnerability ( mail-client/squirrelmail )
200411-26 [U] GIMPS, SETI@home, ChessBrain: Insecure installation ( sci-misc/setiathome  sci-misc/chessbrain  sci-misc/gimps )
200411-27 [U] Fcron: Multiple vulnerabilities ( sys-process/fcron )
200411-28 [U] X.Org, XFree86: libXpm vulnerabilities ( x11-base/xorg-x11  x11-base/xfree )
200411-29 [U] unarj: Long filenames buffer overflow and a path traversal vulnerability ( app-arch/unarj )
200411-30 [U] pdftohtml: Vulnerabilities in included Xpdf ( app-text/pdftohtml )
200411-31 [U] ProZilla: Multiple vulnerabilities ( www-client/prozilla )
200411-32 [U] phpBB: Remote command execution ( www-apps/phpbb )
200411-33 [U] TWiki: Arbitrary command execution ( www-apps/twiki )
200411-34 [U] Cyrus IMAP Server: Multiple remote vulnerabilities ( net-mail/cyrus-imapd )
200411-35 [U] phpWebSite: HTTP response splitting vulnerability ( www-apps/phpwebsite )
200411-36 [U] phpMyAdmin: Multiple XSS vulnerabilities ( dev-db/phpmyadmin )
200411-37 [U] Open DC Hub: Remote code execution ( net-p2p/opendchub )
200411-38 [U] Sun and Blackdown Java: Applet privilege escalation ( dev-java/sun-jre-bin  dev-java/blackdown-jre  dev-java/blackdown-jdk ... )
200412-01 [U] rssh, scponly: Unrestricted command execution ( net-misc/scponly  app-shells/rssh )
200412-02 [U] PDFlib: Multiple overflows in the included TIFF library ( media-libs/pdflib )
200412-03 [U] imlib: Buffer overflows in image decoding ( media-libs/imlib )
200412-04 [U] Perl: Insecure temporary file creation ( dev-lang/perl )
200412-05 [U] mirrorselect: Insecure temporary file creation ( app-portage/mirrorselect )
200412-06 [U] PHProjekt: setup.php vulnerability ( www-apps/phprojekt )
200412-07 [U] file: Arbitrary code execution ( sys-apps/file )
200412-08 [U] nfs-utils: Multiple remote vulnerabilities ( net-fs/nfs-utils )
200412-09 [U] ncpfs: Buffer overflow in ncplogin and ncpmap ( net-fs/ncpfs )
200412-10 [U] Vim, gVim: Vulnerable options in modelines ( app-editors/vim  app-editors/gvim )
200412-11 [U] Cscope: Insecure creation of temporary files ( dev-util/cscope )
200412-12 [U] Adobe Acrobat Reader: Buffer overflow vulnerability ( app-text/acroread )
200412-13 [U] Samba: Integer overflow ( net-fs/samba )
200412-14 [U] PHP: Multiple vulnerabilities ( dev-php/mod_php  dev-php/php  dev-php/php-cgi )
200412-15 [U] Ethereal: Multiple vulnerabilities ( net-analyzer/ethereal )
200412-16 [U] kdelibs, kdebase: Multiple vulnerabilities ( kde-base/kdelibs  kde-base/kdebase )
200412-17 [U] kfax: Multiple overflows in the included TIFF library ( kde-base/kdegraphics )
200412-18 [U] abcm2ps: Buffer overflow vulnerability ( media-sound/abcm2ps )
200412-19 [U] phpMyAdmin: Multiple vulnerabilities ( dev-db/phpmyadmin )
200412-20 [U] NASM: Buffer overflow vulnerability ( dev-lang/nasm )
200412-21 [U] MPlayer: Multiple overflows ( media-video/mplayer )
200412-22 [U] mpg123: Playlist buffer overflow ( media-sound/mpg123 )
200412-23 [U] Zwiki: XSS vulnerability ( net-zope/zwiki )
200412-24 [U] Xpdf, GPdf: New integer overflows ( app-text/gpdf  app-text/xpdf )
200412-25 [U] CUPS: Multiple vulnerabilities ( net-print/cups )
200412-26 [U] ViewCVS: Information leak and XSS vulnerabilities ( www-apps/viewcvs )
200412-27 [U] PHProjekt: Remote code execution vulnerability ( www-apps/phprojekt )
200501-01 [U] LinPopUp: Buffer overflow in message reply ( net-im/linpopup )
200501-02 [U] a2ps: Multiple vulnerabilities ( app-text/a2ps )
200501-03 [U] Mozilla, Firefox, Thunderbird: Various vulnerabilities ( mail-client/mozilla-thunderbird-bin  www-client/mozilla  mail-client/mozilla-thunderbird ... )
200501-04 [U] Shoutcast Server: Remote code execution ( media-sound/shoutcast-server-bin )
200501-05 [U] mit-krb5: Heap overflow in libkadm5srv ( app-crypt/mit-krb5 )
200501-06 [U] tiff: New overflows in image decoding ( media-libs/tiff )
200501-07 [U] xine-lib: Multiple overflows ( media-libs/xine-lib )
200501-08 [U] phpGroupWare: Various vulnerabilities ( www-apps/phpgroupware )
200501-09 [U] xzgv: Multiple overflows ( media-gfx/xzgv )
200501-10 [U] Vilistextum: Buffer overflow vulnerability ( app-text/vilistextum )
200501-11 [U] Dillo: Format string vulnerability ( www-client/dillo )
200501-12 [U] TikiWiki: Arbitrary command execution ( www-apps/tikiwiki )
200501-13 [U] pdftohtml: Vulnerabilities in included Xpdf ( app-text/pdftohtml )
200501-14 [U] mpg123: Buffer overflow ( media-sound/mpg123 )
200501-15 [U] UnRTF: Buffer overflow ( app-text/unrtf )
200501-16 [U] Konqueror: Java sandbox vulnerabilities ( kde-base/kdelibs )
200501-17 [U] KPdf, KOffice: More vulnerabilities in included Xpdf ( kde-base/kdegraphics  app-office/koffice )
200501-18 [U] KDE FTP KIOslave: Command injection ( kde-base/kdelibs )
200501-19 [U] imlib2: Buffer overflows in image decoding ( media-libs/imlib2 )
200501-20 [U] o3read: Buffer overflow during file conversion ( app-text/o3read )
200501-21 [U] HylaFAX: hfaxd unauthorized login vulnerability ( net-misc/hylafax )
200501-22 [U] poppassd_pam: Unauthorized password changing ( net-mail/poppassd_pam  net-mail/poppassd_ceti )
200501-23 [U] Exim: Two buffer overflows ( mail-mta/exim )
200501-24 [U] tnftp: Arbitrary file overwriting ( net-ftp/tnftp )
200501-25 [U] Squid: Multiple vulnerabilities ( net-proxy/squid )
200501-26 [U] ImageMagick: PSD decoding heap overflow ( media-gfx/imagemagick )
200501-27 [U] Ethereal: Multiple vulnerabilities ( net-analyzer/ethereal )
200501-28 [U] Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2 ( app-text/gpdf  app-text/xpdf )
200501-29 [U] Mailman: Cross-site scripting vulnerability ( net-mail/mailman )
200501-30 [U] CUPS: Stack overflow in included Xpdf code ( net-print/cups )
200501-31 [U] teTeX, pTeX, CSTeX: Multiple vulnerabilities ( app-text/cstetex  app-text/ptex  app-text/tetex )
200501-32 [U] KPdf, KOffice: Stack overflow in included Xpdf code ( kde-base/kdegraphics  app-office/koffice )
200501-33 [U] MySQL: Insecure temporary file creation ( dev-db/mysql )
200501-34 [U] Konversation: Various vulnerabilities ( net-irc/konversation )
200501-35 [U] Evolution: Integer overflow in camel-lock-helper ( mail-client/evolution )
200501-36 [U] AWStats: Remote code execution ( www-misc/awstats )
200501-37 [U] GraphicsMagick: PSD decoding heap overflow ( media-gfx/graphicsmagick )
200501-38 [U] Perl: rmtree and DBI tmpfile vulnerabilities ( dev-perl/DBI  dev-lang/perl )
200501-39 [U] SquirrelMail: Multiple vulnerabilities ( mail-client/squirrelmail )
200501-40 [U] ngIRCd: Buffer overflow ( net-irc/ngircd )
200501-41 [U] TikiWiki: Arbitrary command execution ( www-apps/tikiwiki )
200501-42 [U] VDR: Arbitrary file overwriting issue ( media-video/vdr )
200501-43 [U] f2c: Insecure temporary file creation ( dev-lang/f2c )
200501-44 [U] ncpfs: Multiple vulnerabilities ( net-fs/ncpfs )
200501-45 [U] Gallery: Cross-site scripting vulnerability ( www-apps/gallery )
200501-46 [U] ClamAV: Multiple issues ( app-antivirus/clamav )
200502-01 [U] FireHOL: Insecure temporary file creation ( net-firewall/firehol )
200502-02 [U] UW IMAP: CRAM-MD5 authentication bypass ( net-mail/uw-imap )
200502-03 [U] enscript: Multiple vulnerabilities ( app-text/enscript )
200502-04 [U] Squid: Multiple vulnerabilities ( net-proxy/squid )
200502-05 [U] Newspost: Buffer overflow vulnerability ( net-nntp/newspost )
200502-06 [U] LessTif: Multiple vulnerabilities in libXpm ( x11-libs/lesstif )
200502-07 [U] OpenMotif: Multiple vulnerabilities in libXpm ( x11-libs/openmotif )
200502-08 [U] PostgreSQL: Multiple vulnerabilities ( dev-db/postgresql )
200502-09 [U] Python: Arbitrary code execution through SimpleXMLRPCServer ( dev-lang/python )
200502-10 [U] pdftohtml: Vulnerabilities in included Xpdf ( app-text/pdftohtml )
200502-11 [U] Mailman: Directory traversal vulnerability ( net-mail/mailman )
200502-12 [U] Webmin: Information leak in Gentoo binary package ( app-admin/webmin )
200502-13 [U] Perl: Vulnerabilities in perl-suid wrapper ( dev-lang/perl )
200502-14 [U] mod_python: Publisher Handler vulnerability ( www-apache/mod_python )
200502-15 [U] PowerDNS: Denial of Service vulnerability ( net-dns/pdns )
200502-16 [U] ht://Dig: Cross-site scripting vulnerability ( www-misc/htdig )
200502-17 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200502-18 [U] VMware Workstation: Untrusted library search path ( app-emulation/vmware-workstation )
200502-19 [U] PostgreSQL: Buffer overflows in PL/PgSQL parser ( dev-db/postgresql )
200502-20 [U] Emacs, XEmacs: Format string vulnerabilities in movemail ( app-editors/xemacs  app-editors/emacs )
200502-21 [U] lighttpd: Script source disclosure ( www-servers/lighttpd )
200502-22 [U] wpa_supplicant: Buffer overflow vulnerability ( net-wireless/wpa_supplicant )
200502-23 [U] KStars: Buffer overflow in fliccd ( kde-base/kdeedu )
200502-24 [U] Midnight Commander: Multiple vulnerabilities ( app-misc/mc )
200502-25 [U] Squid: Denial of Service through DNS responses ( net-proxy/squid )
200502-26 [U] GProFTPD: gprostats format string vulnerability ( net-ftp/gproftpd )
200502-27 [U] gFTP: Directory traversal vulnerability ( net-ftp/gftp )
200502-28 [U] PuTTY: Remote code execution ( net-misc/putty )
200502-29 [U] Cyrus IMAP Server: Multiple overflow vulnerabilities ( net-mail/cyrus-imapd )
200502-30 [U] cmd5checkpw: Local password leak vulnerability ( net-mail/cmd5checkpw )
200502-31 [U] uim: Privilege escalation vulnerability ( app-i18n/uim )
200502-32 [U] UnAce: Buffer overflow and directory traversal vulnerabilities ( app-arch/unace )
200502-33 [U] MediaWiki: Multiple vulnerabilities ( www-apps/mediawiki )
200503-01 [U] Qt: Untrusted library search path ( x11-libs/qt )
200503-02 [U] phpBB: Multiple vulnerabilities ( www-apps/phpBB )
200503-03 [U] Gaim: Multiple Denial of Service issues ( net-im/gaim )
200503-04 [U] phpWebSite: Arbitrary PHP execution and path disclosure ( www-apps/phpwebsite )
200503-05 [U] xli, xloadimage: Multiple vulnerabilities ( media-gfx/xloadimage  media-gfx/xli )
200503-06 [U] BidWatcher: Format string vulnerability ( net-misc/bidwatcher )
200503-07 [U] phpMyAdmin: Multiple vulnerabilities ( dev-db/phpmyadmin )
200503-08 [U] OpenMotif, LessTif: New libXpm buffer overflows ( x11-libs/openmotif  x11-libs/lesstif )
200503-09 [U] xv: Filename handling vulnerability ( media-gfx/xv )
200503-10 [U] Mozilla Firefox: Various vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200503-11 [U] ImageMagick: Filename handling vulnerability ( media-gfx/imagemagick )
200503-12 [U] Hashcash: Format string vulnerability ( net-misc/hashcash )
200503-13 [U] mlterm: Integer overflow vulnerability ( x11-terms/mlterm )
200503-14 [U] KDE dcopidlng: Insecure temporary file creation ( kde-base/kdelibs )
200503-15 [U] X.org: libXpm vulnerability ( x11-base/xorg-x11 )
200503-16 [U] Ethereal: Multiple vulnerabilities ( net-analyzer/ethereal )
200503-17 [U] libexif: Buffer overflow vulnerability ( media-libs/libexif )
200503-18 [U] Ringtone Tools: Buffer overflow vulnerability ( app-mobilephone/ringtonetools )
200503-19 [U] MySQL: Multiple vulnerabilities ( dev-db/mysql )
200503-20 [U] curl: NTLM response buffer overflow ( net-misc/curl )
200503-21 [U] Grip: CDDB response overflow ( media-sound/grip )
200503-22 [U] KDE: Local Denial of Service ( kde-base/kdelibs )
200503-23 [U] rxvt-unicode: Buffer overflow ( x11-terms/rxvt-unicode )
200503-24 [U] LTris: Buffer overflow ( games-puzzle/ltris )
200503-25 [U] OpenSLP: Multiple buffer overflows ( net-libs/openslp )
200503-26 [U] Sylpheed, Sylpheed-claws: Message reply overflow ( mail-client/sylpheed  mail-client/sylpheed-claws )
200503-27 [U] Xzabite dyndnsupdate: Multiple vulnerabilities ( net-misc/dyndnsupdate )
200503-28 [U] Sun Java: Web Start argument injection vulnerability ( dev-java/sun-jre-bin  dev-java/sun-jdk )
200503-29 [U] GnuPG: OpenPGP protocol attack ( app-crypt/gnupg )
200503-30 [U] Mozilla Suite: Multiple vulnerabilities ( www-client/mozilla-bin  www-client/mozilla )
200503-31 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200503-32 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200503-33 [U] IPsec-Tools: racoon Denial of Service ( net-firewall/ipsec-tools )
200503-34 [U] mpg321: Format string vulnerability ( media-sound/mpg321 )
200503-35 [U] Smarty: Template vulnerability ( dev-php/smarty )
200503-36 [U] netkit-telnetd: Buffer overflow ( net-misc/netkit-telnetd )
200503-37 [U] LimeWire: Disclosure of sensitive information ( net-p2p/limewire )
200504-01 [U] telnet-bsd: Multiple buffer overflows ( net-misc/telnet-bsd )
200504-02 [U] Sylpheed, Sylpheed-claws: Buffer overflow on message display ( mail-client/sylpheed  mail-client/sylpheed-claws )
200504-03 [U] Dnsmasq: Poisoning and Denial of Service vulnerabilities ( net-dns/dnsmasq )
200504-04 [U] mit-krb5: Multiple buffer overflows in telnet client ( app-crypt/mit-krb5 )
200504-05 [U] Gaim: Denial of Service issues ( net-im/gaim )
200504-06 [U] sharutils: Insecure temporary file creation ( app-arch/sharutils )
200504-07 [U] GnomeVFS, libcdaudio: CDDB response overflow ( media-libs/libcdaudio  gnome-base/gnome-vfs )
200504-08 [U] phpMyAdmin: Cross-site scripting vulnerability ( dev-db/phpmyadmin )
200504-09 [U] Axel: Vulnerability in HTTP redirection handling ( net-misc/axel )
200504-10 [U] Gld: Remote execution of arbitrary code ( mail-filter/gld )
200504-11 [U] JunkBuster: Multiple vulnerabilities ( net-proxy/junkbuster )
200504-12 [U] rsnapshot: Local privilege escalation ( app-backup/rsnapshot )
200504-13 [U] OpenOffice.Org: DOC document Heap Overflow ( app-office/openoffice  app-office/openoffice-bin  app-office/openoffice-ximian )
200504-14 [U] monkeyd: Multiple vulnerabilities ( www-servers/monkeyd )
200504-15 [U] PHP: Multiple vulnerabilities ( dev-php/mod_php  dev-php/php  dev-php/php-cgi )
200504-16 [U] CVS: Multiple vulnerabilities ( dev-util/cvs )
200504-17 [U] XV: Multiple vulnerabilities ( media-gfx/xv )
200504-18 [U] Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities ( www-client/mozilla-bin  www-client/mozilla-firefox-bin  www-client/mozilla ... )
200504-19 [U] MPlayer: Two heap overflow vulnerabilities ( media-video/mplayer )
200504-20 [U] openMosixview: Insecure temporary file creation ( sys-cluster/openmosixview )
200504-21 [U] RealPlayer, Helix Player: Buffer overflow vulnerability ( media-video/helixplayer  media-video/realplayer )
200504-22 [U] KDE kimgio: PCX handling buffer overflow ( kde-base/kdelibs )
200504-23 [U] Kommander: Insecure remote script execution ( kde-base/kdewebdev )
200504-24 [U] eGroupWare: XSS and SQL injection vulnerabilities ( www-apps/egroupware )
200504-25 [U] Rootkit Hunter: Insecure temporary file creation ( app-forensics/rkhunter )
200504-26 [U] Convert-UUlib: Buffer overflow ( dev-perl/Convert-UUlib )
200504-27 [U] xine-lib: Two heap overflow vulnerabilities ( media-libs/xine-lib )
200504-28 [U] Heimdal: Buffer overflow vulnerabilities ( app-crypt/heimdal )
200504-29 [U] Pound: Buffer overflow vulnerability ( www-servers/pound )
200504-30 [U] phpMyAdmin: Insecure SQL script installation ( dev-db/phpmyadmin )
200505-01 [U] Horde Framework: Multiple XSS vulnerabilities ( www-apps/horde-chora  www-apps/horde-accounts  www-apps/horde-turba ... )
200505-02 [U] Oops!: Remote code execution ( net-proxy/oops )
200505-03 [U] Ethereal: Numerous vulnerabilities ( net-analyzer/ethereal )
200505-04 [U] GnuTLS: Denial of Service vulnerability ( net-libs/gnutls )
200505-05 [U] gzip: Multiple vulnerabilities ( app-arch/gzip )
200505-06 [U] TCPDump: Decoding routines Denial of Service vulnerability ( net-analyzer/tcpdump )
200505-07 [U] libTIFF: Buffer overflow ( media-libs/tiff )
200505-08 [U] HT Editor: Multiple buffer overflows ( app-editors/hteditor )
200505-09 [U] Gaim: Denial of Service and buffer overflow vulnerabilties ( net-im/gaim )
200505-10 [U] phpBB: Cross-Site Scripting Vulnerability ( www-apps/phpBB )
200505-11 [U] Mozilla Suite, Mozilla Firefox: Remote compromise ( www-client/mozilla-bin  www-client/mozilla-firefox-bin  www-client/mozilla ... )
200505-12 [U] PostgreSQL: Multiple vulnerabilities ( dev-db/postgresql )
200505-13 [U] FreeRADIUS: SQL injection and Denial of Service vulnerability ( net-dialup/freeradius )
200505-14 [U] Cheetah: Untrusted module search path ( dev-python/cheetah )
200505-15 [U] gdb: Multiple vulnerabilities ( sys-devel/gdb )
200505-16 [U] ImageMagick, GraphicsMagick: Denial of Service vulnerability ( media-gfx/imagemagick  media-gfx/graphicsmagick )
200505-17 [U] Qpopper: Multiple Vulnerabilities ( net-mail/qpopper )
200505-18 [U] Net-SNMP: fixproc insecure temporary file creation ( net-analyzer/net-snmp )
200505-19 [U] gxine: Format string vulnerability ( media-video/gxine )
200505-20 [U] Mailutils: Multiple vulnerabilities in imap4d and mail ( net-mail/mailutils )
200506-01 [U] Binutils, elfutils: Buffer overflow ( sys-devel/binutils  dev-libs/elfutils )
200506-02 [U] Mailutils: SQL Injection ( net-mail/mailutils )
200506-03 [U] Dzip: Directory traversal vulnerability ( games-util/dzip )
200506-04 [U] Wordpress: Multiple vulnerabilities ( www-apps/wordpress )
200506-05 [U] SilverCity: Insecure file permissions ( app-text/silvercity )
200506-06 [U] libextractor: Multiple overflow vulnerabilities ( media-libs/libextractor )
200506-07 [U] Ettercap: Format string vulnerability ( net-analyzer/ettercap )
200506-08 [U] GNU shtool, ocaml-mysql: Insecure temporary file creation ( dev-util/shtool  dev-ml/ocaml-mysql )
200506-09 [U] gedit: Format string vulnerability ( app-editors/gedit )
200506-10 [U] LutelWall: Insecure temporary file creation ( net-firewall/lutelwall )
200506-11 [U] Gaim: Denial of Service vulnerabilities ( net-im/gaim )
200506-12 [U] MediaWiki: Cross-site scripting vulnerability ( www-apps/mediawiki )
200506-13 [U] webapp-config: Insecure temporary file handling ( app-admin/webapp-config )
200506-14 [U] Sun and Blackdown Java: Applet privilege escalation ( dev-java/sun-jre-bin  dev-java/blackdown-jre  dev-java/blackdown-jdk ... )
200506-15 [U] PeerCast: Format string vulnerability ( media-sound/peercast )
200506-16 [U] cpio: Directory traversal vulnerability ( app-arch/cpio )
200506-17 [U] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability ( mail-filter/spamassassin  mail-filter/razor )
200506-18 [U] Tor: Information disclosure ( net-misc/tor )
200506-19 [U] SquirrelMail: Several XSS vulnerabilities ( mail-client/squirrelmail )
200506-20 [U] Cacti: Several vulnerabilities ( net-analyzer/cacti )
200506-21 [U] Trac: File upload vulnerability ( www-apps/trac )
200506-22 [U] sudo: Arbitrary command execution ( app-admin/sudo )
200506-23 [U] Clam AntiVirus: Denial of Service vulnerability ( app-antivirus/clamav )
200506-24 [U] Heimdal: Buffer overflow vulnerabilities ( app-crypt/heimdal )
200507-01 [U] PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability ( dev-php/PEAR-XML_RPC  dev-php/phpxmlrpc )
200507-02 [U] WordPress: Multiple vulnerabilities ( www-apps/wordpress )
200507-03 [U] phpBB: Arbitrary command execution ( www-apps/phpBB )
200507-04 [U] RealPlayer: Heap overflow vulnerability ( media-video/realplayer )
200507-05 [U] zlib: Buffer overflow ( sys-libs/zlib )
200507-06 [U] TikiWiki: Arbitrary command execution through XML-RPC ( www-apps/tikiwiki )
200507-07 [U] phpWebSite: Multiple vulnerabilities ( www-apps/phpwebsite )
200507-08 [U] phpGroupWare, eGroupWare: PHP script injection vulnerability ( www-apps/phpgroupware  www-apps/egroupware )
200507-09 [U] Adobe Acrobat Reader: Buffer overflow vulnerability ( app-text/acroread )
200507-10 [U] Ruby: Arbitrary command execution through XML-RPC ( dev-lang/ruby )
200507-11 [U] MIT Kerberos 5: Multiple vulnerabilities ( app-crypt/mit-krb5 )
200507-12 [U] Bugzilla: Unauthorized access and information disclosure ( www-apps/bugzilla )
200507-13 [U] pam_ldap and nss_ldap: Plain text authentication leak ( sys-auth/nss_ldap  sys-auth/pam_ldap )
200507-14 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200507-15 [U] PHP: Script injection through XML-RPC ( dev-php/php )
200507-16 [U] dhcpcd: Denial of Service vulnerability ( net-misc/dhcpcd )
200507-17 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200507-18 [U] MediaWiki: Cross-site scripting vulnerability ( www-apps/mediawiki )
200507-19 [U] zlib: Buffer overflow ( sys-libs/zlib )
200507-20 [U] Shorewall: Security policy bypass ( net-firewall/shorewall )
200507-21 [U] fetchmail: Buffer Overflow ( net-mail/fetchmail )
200507-22 [U] sandbox: Insecure temporary file handling ( sys-apps/sandbox )
200507-23 [U] Kopete: Vulnerability in included Gadu library ( kde-base/kdenetwork  kde-base/kopete )
200507-24 [U] Mozilla Suite: Multiple vulnerabilities ( www-client/mozilla-bin  www-client/mozilla )
200507-25 [U] Clam AntiVirus: Integer overflows ( app-antivirus/clamav )
200507-26 [U] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library ( net-im/ekg  net-im/centericq  net-im/gnugadu ... )
200507-27 [U] Ethereal: Multiple vulnerabilities ( net-analyzer/ethereal )
200507-28 [U] AMD64 x86 emulation base libraries: Buffer overflow ( app-emulation/emul-linux-x86-baselibs )
200507-29 [U] pstotext: Remote execution of arbitrary code ( app-text/pstotext )
200508-01 [U] Compress::Zlib: Buffer overflow ( perl-core/Compress-Zlib )
200508-02 [U] ProFTPD: Format string vulnerabilities ( net-ftp/proftpd )
200508-03 [U] nbSMTP: Format string vulnerability ( mail-mta/nbsmtp )
200508-04 [U] Netpbm: Arbitrary code execution in pstopnm ( media-libs/netpbm )
200508-05 [U] Heartbeat: Insecure temporary file creation ( sys-cluster/heartbeat )
200508-06 [U] Gaim: Remote execution of arbitrary code ( net-im/gaim )
200508-07 [U] AWStats: Arbitrary code execution using malicious Referrer information ( www-misc/awstats )
200508-08 [U] Xpdf, Kpdf, GPdf: Denial of Service vulnerability ( kde-base/kdegraphics  app-text/xpdf  app-text/gpdf ... )
200508-09 [U] bluez-utils: Bluetooth device name validation vulnerability ( net-wireless/bluez-utils )
200508-10 [U] Kismet: Multiple vulnerabilities ( net-wireless/kismet )
200508-11 [U] Adobe Reader: Buffer Overflow ( app-text/acroread )
200508-12 [U] Evolution: Format string vulnerabilities ( mail-client/evolution )
200508-13 [U] PEAR XML-RPC, phpxmlrpc: New PHP script injection vulnerability ( dev-php/PEAR-XML_RPC  dev-php/phpxmlrpc )
200508-14 [U] TikiWiki, eGroupWare: Arbitrary command execution through XML-RPC ( www-apps/tikiwiki  www-apps/egroupware )
200508-15 [U] Apache 2.0: Denial of Service vulnerability ( www-servers/apache )
200508-16 [U] Tor: Information disclosure ( net-misc/tor )
200508-17 [U] libpcre: Heap integer overflow ( dev-libs/libpcre )
200508-18 [U] PhpWiki: Arbitrary command execution through XML-RPC ( www-apps/phpwiki )
200508-19 [U] lm_sensors: Insecure temporary file creation ( sys-apps/lm_sensors )
200508-20 [U] phpGroupWare: Multiple vulnerabilities ( www-apps/phpgroupware )
200508-21 [U] phpWebSite: Arbitrary command execution through XML-RPC and SQL injection ( www-apps/phpwebsite )
200508-22 [U] pam_ldap: Authentication bypass vulnerability ( sys-auth/pam_ldap )
200509-01 [U] MPlayer: Heap overflow in ad_pcm.c ( media-video/mplayer )
200509-02 [U] Gnumeric: Heap overflow in the included PCRE library ( app-office/gnumeric )
200509-03 [U] OpenTTD: Format string vulnerabilities ( games-simulation/openttd )
200509-04 [U] phpLDAPadmin: Authentication bypass ( net-nds/phpldapadmin )
200509-05 [U] Net-SNMP: Insecure RPATH ( net-analyzer/net-snmp )
200509-06 [U] Squid: Denial of Service vulnerabilities ( net-proxy/squid )
200509-07 [U] X.Org: Heap overflow in pixmap allocation ( x11-base/xorg-x11 )
200509-08 [U] Python: Heap overflow in the included PCRE library ( dev-lang/python )
200509-09 [U] Py2Play: Remote execution of arbitrary Python code ( dev-python/py2play )
200509-10 [U] Mailutils: Format string vulnerability in imap4d ( net-mail/mailutils )
200509-11 [U] Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-bin  www-client/mozilla  net-libs/gecko-sdk ... )
200509-12 [U] Apache, mod_ssl: Multiple vulnerabilities ( www-servers/apache  net-www/mod_ssl )
200509-13 [U] Clam AntiVirus: Multiple vulnerabilities ( app-antivirus/clamav )
200509-14 [U] Zebedee: Denial of Service vulnerability ( net-misc/zebedee )
200509-15 [U] util-linux: umount command validation error ( sys-apps/util-linux )
200509-16 [U] Mantis: XSS and SQL injection vulnerabilities ( www-apps/mantisbt )
200509-17 [U] Webmin, Usermin: Remote code execution through PAM authentication ( app-admin/webmin  app-admin/usermin )
200509-18 [U] Qt: Buffer overflow in the included zlib library ( x11-libs/qt )
200509-19 [U] PHP: Vulnerabilities in included PCRE and XML-RPC libraries ( dev-php/mod_php  dev-php/php  dev-php/php-cgi )
200509-20 [U] AbiWord: RTF import stack-based buffer overflow ( app-office/abiword )
200509-21 [U] Hylafax: Insecure temporary file creation in xferfaxstats script ( net-misc/hylafax )
200510-01 [U] gtkdiskfree: Insecure temporary file creation ( app-admin/gtkdiskfree )
200510-02 [U] Berkeley MPEG Tools: Multiple insecure temporary files ( media-video/mpeg-tools )
200510-03 [U] Uim: Privilege escalation vulnerability ( app-i18n/uim )
200510-04 [U] Texinfo: Insecure temporary file creation ( sys-apps/texinfo )
200510-05 [U] Ruby: Security bypass vulnerability ( dev-lang/ruby )
200510-06 [U] Dia: Arbitrary code execution through SVG import ( app-office/dia )
200510-07 [U] RealPlayer, Helix Player: Format string vulnerability ( media-video/helixplayer  media-video/realplayer )
200510-08 [U] xine-lib: Format string vulnerability ( media-libs/xine-lib )
200510-09 [U] Weex: Format string vulnerability ( net-ftp/weex )
200510-10 [U] uw-imap: Remote buffer overflow ( net-mail/uw-imap )
200510-11 [U] OpenSSL: SSL 2.0 protocol rollback ( dev-libs/openssl )
200510-12 [U] KOffice, KWord: RTF import buffer overflow ( app-office/kword  app-office/koffice )
200510-13 [U] SPE: Insecure file permissions ( dev-util/spe )
200510-14 [U] Perl, Qt-UnixODBC, CMake: RUNPATH issues ( dev-util/cmake  dev-db/qt-unixODBC  dev-lang/perl )
200510-15 [U] Lynx: Buffer overflow in NNTP processing ( www-client/lynx )
200510-16 [U] phpMyAdmin: Local file inclusion vulnerability ( dev-db/phpmyadmin )
200510-17 [U] AbiWord: New RTF import buffer overflows ( app-office/abiword )
200510-18 [U] Netpbm: Buffer overflow in pnmtopng ( media-libs/netpbm )
200510-19 [U] cURL: NTLM username stack overflow ( net-misc/curl )
200510-20 [U] Zope: File inclusion through RestructuredText ( net-zope/zope )
200510-21 [U] phpMyAdmin: Local file inclusion and XSS vulnerabilities ( dev-db/phpmyadmin )
200510-22 [U] SELinux PAM: Local password guessing attack ( sys-libs/pam )
200510-23 [U] TikiWiki: XSS vulnerability ( www-apps/tikiwiki )
200510-24 [U] Mantis: Multiple vulnerabilities ( www-apps/mantisbt )
200510-25 [U] Ethereal: Multiple vulnerabilities in protocol dissectors ( net-analyzer/ethereal )
200510-26 [U] XLI, Xloadimage: Buffer overflow ( media-gfx/xloadimage  media-gfx/xli )
200511-01 [U] libgda: Format string vulnerabilities ( gnome-extra/libgda )
200511-02 [U] QDBM, ImageMagick, GDAL: RUNPATH issues ( sci-libs/gdal  media-gfx/imagemagick  dev-db/qdbm )
200511-03 [U] giflib: Multiple vulnerabilities ( media-libs/giflib )
200511-04 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200511-05 [U] GNUMP3d: Directory traversal and XSS vulnerabilities ( media-sound/gnump3d )
200511-06 [U] fetchmail: Password exposure in fetchmailconf ( net-mail/fetchmail )
200511-07 [U] OpenVPN: Multiple vulnerabilities ( net-misc/openvpn )
200511-08 [U] PHP: Multiple vulnerabilities ( dev-php/mod_php  dev-php/php  dev-php/php-cgi )
200511-09 [U] Lynx: Arbitrary command execution ( www-client/lynx )
200511-10 [U] RAR: Format string and buffer overflow vulnerabilities ( app-arch/rar )
200511-11 [U] linux-ftpd-ssl: Remote buffer overflow ( net-ftp/netkit-ftpd )
200511-12 [U] Scorched 3D: Multiple vulnerabilities ( games-strategy/scorched3d )
200511-13 [U] Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer ( mail-client/sylpheed  mail-client/sylpheed-claws )
200511-14 [U] GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities ( x11-libs/gtk+  media-libs/gdk-pixbuf )
200511-15 [U] Smb4k: Local unauthorized file access ( net-misc/smb4k )
200511-16 [U] GNUMP3d: Directory traversal and insecure temporary file creation ( media-sound/gnump3d )
200511-17 [U] FUSE: mtab corruption through fusermount ( sys-fs/fuse )
200511-18 [U] phpSysInfo: Multiple vulnerabilities ( www-apps/phpsysinfo )
200511-19 [U] eix: Insecure temporary file creation ( app-portage/eix )
200511-20 [U] Horde Application Framework: XSS vulnerability ( www-apps/horde )
200511-21 [U] Macromedia Flash Player: Remote arbitrary code execution ( www-plugins/adobe-flash )
200511-22 [U] Inkscape: Buffer overflow ( media-gfx/inkscape )
200511-23 [U] chmlib, KchmViewer: Stack-based buffer overflow ( dev-libs/chmlib  app-text/kchmviewer )
200512-01 [U] Perl: Format string errors can lead to code execution ( dev-lang/perl )
200512-02 [U] Webmin, Usermin: Format string vulnerability ( app-admin/webmin  app-admin/usermin )
200512-03 [U] phpMyAdmin: Multiple vulnerabilities ( dev-db/phpmyadmin )
200512-04 [U] Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation ( net-misc/openswan  net-firewall/ipsec-tools )
200512-05 [U] Xmail: Privilege escalation through sendmail ( mail-mta/xmail )
200512-06 [U] Ethereal: Buffer overflow in OSPF protocol dissector ( net-analyzer/ethereal )
200512-07 [U] OpenLDAP, Gauche: RUNPATH issues ( net-nds/openldap  dev-scheme/gauche )
200512-08 [U] Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities ( app-text/gpdf  app-text/xpdf  app-text/poppler ... )
200512-09 [U] cURL: Off-by-one errors in URL handling ( net-misc/curl )
200512-10 [U] Opera: Command-line URL shell command injection ( www-client/opera )
200512-11 [U] CenterICQ: Multiple vulnerabilities ( net-im/centericq )
200512-12 [U] Mantis: Multiple vulnerabilities ( www-apps/mantisbt )
200512-13 [U] Dropbear: Privilege escalation ( net-misc/dropbear )
200512-14 [U] NBD Tools: Buffer overflow in NBD server ( sys-block/nbd )
200512-15 [U] rssh: Privilege escalation ( app-shells/rssh )
200512-16 [U] OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library ( x11-libs/openmotif  app-emulation/emul-linux-x86-xlibs )
200512-17 [U] scponly: Multiple privilege escalation issues ( net-misc/scponly )
200512-18 [U] XnView: Privilege escalation ( x11-misc/xnview )
200601-01 [U] pinentry: Local privilege escalation ( app-crypt/pinentry )
200601-02 [U] KPdf, KWord: Multiple overflows in included Xpdf code ( kde-base/kdegraphics  kde-base/kpdf  app-office/kword ... )
200601-03 [U] HylaFAX: Multiple vulnerabilities ( net-misc/hylafax )
200601-04 [U] VMware Workstation: Vulnerability in NAT networking ( app-emulation/vmware-workstation )
200601-05 [U] mod_auth_pgsql: Multiple format string vulnerabilities ( www-apache/mod_auth_pgsql )
200601-06 [U] xine-lib, FFmpeg: Heap-based buffer overflow ( media-video/ffmpeg  media-libs/xine-lib )
200601-07 [U] ClamAV: Remote execution of arbitrary code ( app-antivirus/clamav )
200601-08 [U] Blender: Heap-based buffer overflow ( media-gfx/blender )
200601-09 [U] Wine: Windows Metafile SETABORTPROC vulnerability ( app-emulation/wine )
200601-10 [U] Sun and Blackdown Java: Applet privilege escalation ( dev-java/sun-jre-bin  dev-java/blackdown-jre  dev-java/blackdown-jdk ... )
200601-11 [U] KDE kjs: URI heap overflow vulnerability ( kde-base/kdelibs )
200601-12 [U] Trac: Cross-site scripting vulnerability ( www-apps/trac )
200601-13 [U] Gallery: Cross-site scripting vulnerability ( www-apps/gallery )
200601-14 [U] LibAST: Privilege escalation ( x11-libs/libast )
200601-15 [U] Paros: Default administrator password ( net-proxy/paros )
200601-16 [U] MyDNS: Denial of Service ( net-dns/mydns )
200601-17 [U] Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows ( app-text/gpdf  app-text/xpdf  app-text/poppler ... )
200602-01 [U] GStreamer FFmpeg plugin: Heap-based buffer overflow ( media-plugins/gst-plugins-ffmpeg )
200602-02 [U] ADOdb: PostgresSQL command injection ( dev-php/adodb )
200602-03 [U] Apache: Multiple vulnerabilities ( www-servers/apache )
200602-04 [U] Xpdf, Poppler: Heap overflow ( app-text/xpdf  app-text/poppler )
200602-05 [U] KPdf: Heap based overflow ( kde-base/kdegraphics  kde-base/kpdf )
200602-06 [U] ImageMagick: Format string vulnerability ( media-gfx/imagemagick )
200602-07 [U] Sun JDK/JRE: Applet privilege escalation ( dev-java/sun-jre-bin  dev-java/sun-jdk )
200602-08 [U] libtasn1, GNU TLS: Security flaw in DER decoding ( dev-libs/libtasn1  net-libs/gnutls )
200602-09 [U] BomberClone: Remote execution of arbitrary code ( games-action/bomberclone )
200602-10 [U] GnuPG: Incorrect signature verification ( app-crypt/gnupg )
200602-11 [U] OpenSSH, Dropbear: Insecure use of system() call ( net-misc/openssh  net-misc/dropbear )
200602-12 [U] GPdf: heap overflows in included Xpdf code ( app-text/gpdf )
200602-13 [U] GraphicsMagick: Format string vulnerability ( media-gfx/graphicsmagick )
200602-14 [U] noweb: Insecure temporary file creation ( app-text/noweb )
200603-01 [U] WordPress: SQL injection vulnerability ( www-apps/wordpress )
200603-02 [U] teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code ( app-text/cstetex  app-text/ptex  app-text/tetex )
200603-03 [U] MPlayer: Multiple integer overflows ( media-video/mplayer )
200603-04 [U] IMAP Proxy: Format string vulnerabilities ( net-mail/up-imapproxy )
200603-05 [U] zoo: Stack-based buffer overflow ( app-arch/zoo )
200603-06 [U] GNU tar: Buffer overflow ( app-arch/tar )
200603-07 [U] flex: Potential insecure code generation ( sys-devel/flex )
200603-08 [U] GnuPG: Incorrect signature verification ( app-crypt/gnupg )
200603-09 [U] SquirrelMail: Cross-site scripting and IMAP command injection ( mail-client/squirrelmail )
200603-10 [U] Cube: Multiple vulnerabilities ( games-fps/cube )
200603-11 [U] Freeciv: Denial of Service ( games-strategy/freeciv )
200603-12 [U] zoo: Buffer overflow ( app-arch/zoo )
200603-13 [U] PEAR-Auth: Potential authentication bypass ( dev-php/PEAR-Auth )
200603-14 [U] Heimdal: rshd privilege escalation ( app-crypt/heimdal )
200603-15 [U] Crypt::CBC: Insecure initialization vector ( dev-perl/crypt-cbc )
200603-16 [U] Metamail: Buffer overflow ( net-mail/metamail )
200603-17 [U] PeerCast: Buffer overflow ( media-sound/peercast )
200603-18 [U] Pngcrush: Buffer overflow ( media-gfx/pngcrush )
200603-19 [U] cURL/libcurl: Buffer overflow in the handling of TFTP URLs ( net-misc/curl )
200603-20 [U] Macromedia Flash Player: Arbitrary code execution ( www-plugins/adobe-flash )
200603-21 [U] Sendmail: Race condition in the handling of asynchronous signals ( mail-mta/sendmail )
200603-22 [U] PHP: Format string and XSS vulnerabilities ( dev-lang/php )
200603-23 [U] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation ( games-roguelike/falconseye  games-roguelike/nethack  games-roguelike/slashem )
200603-24 [U] RealPlayer: Buffer overflow vulnerability ( media-video/realplayer )
200603-25 [U] OpenOffice.org: Heap overflow in included libcurl ( app-office/openoffice-bin  app-office/openoffice )
200603-26 [U] bsd-games: Local privilege escalation in tetris-bsd ( games-misc/bsd-games )
200604-01 [U] MediaWiki: Cross-site scripting vulnerability ( www-apps/mediawiki )
200604-02 [U] Horde Application Framework: Remote code execution ( www-apps/horde )
200604-03 [U] FreeRADIUS: Authentication bypass in EAP-MSCHAPv2 module ( net-dialup/freeradius )
200604-04 [U] Kaffeine: Buffer overflow ( media-video/kaffeine )
200604-05 [U] Doomsday: Format string vulnerability ( games-fps/doomsday )
200604-06 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200604-07 [U] Cacti: Multiple vulnerabilities in included ADOdb ( net-analyzer/cacti )
200604-08 [U] libapreq2: Denial of Service vulnerability ( www-apache/libapreq2 )
200604-09 [U] Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service ( dev-libs/cyrus-sasl )
200604-10 [U] zgv, xzgv: Heap overflow ( media-gfx/zgv  media-gfx/xzgv )
200604-11 [U] Crossfire server: Denial of Service and potential arbitrary code execution ( games-server/crossfire-server )
200604-12 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200604-13 [U] fbida: Insecure temporary file creation ( media-gfx/fbida )
200604-14 [U] Dia: Arbitrary code execution through XFig import ( app-office/dia )
200604-15 [U] xine-ui: Format string vulnerabilities ( media-video/xine-ui )
200604-16 [U] xine-lib: Buffer overflow vulnerability ( media-libs/xine-lib )
200604-17 [U] Ethereal: Multiple vulnerabilities in protocol dissectors ( net-analyzer/ethereal )
200604-18 [U] Mozilla Suite: Multiple vulnerabilities ( www-client/mozilla-bin  www-client/mozilla )
200605-01 [U] MPlayer: Heap-based buffer overflow ( media-video/mplayer  media-video/mplayer-bin )
200605-02 [U] X.Org: Buffer overflow in XRender extension ( x11-base/xorg-x11 )
200605-03 [U] ClamAV: Buffer overflow in Freshclam ( app-antivirus/clamav )
200605-04 [U] phpWebSite: Local file inclusion ( www-apps/phpwebsite )
200605-05 [U] rsync: Potential integer overflow ( net-misc/rsync )
200605-06 [U] Mozilla Firefox: Potential remote code execution ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200605-07 [U] Nagios: Buffer overflow ( net-analyzer/nagios-core )
200605-08 [U] PHP: Multiple vulnerabilities ( dev-lang/php )
200605-09 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200605-10 [U] pdnsd: Denial of Service and potential arbitrary code execution ( net-dns/pdnsd )
200605-11 [U] Ruby: Denial of Service ( dev-lang/ruby )
200605-12 [U] Quake 3 engine based games: Buffer Overflow ( games-fps/rtcw  games-fps/enemy-territory  games-fps/quake3-bin )
200605-13 [U] MySQL: Information leakage ( dev-db/mysql )
200605-14 [U] libextractor: Two heap-based buffer overflows ( media-libs/libextractor )
200605-15 [U] Quagga Routing Suite: Multiple vulnerabilities ( net-misc/quagga )
200605-16 [U] CherryPy: Directory traversal vulnerability ( dev-python/cherrypy )
200605-17 [U] libTIFF: Multiple vulnerabilities ( media-libs/tiff )
200606-01 [U] Opera: Buffer overflow ( www-client/opera )
200606-02 [U] shadow: Privilege escalation ( sys-apps/shadow )
200606-03 [U] Dia: Format string vulnerabilities ( app-office/dia )
200606-04 [U] Tor: Several vulnerabilities ( net-misc/tor )
200606-05 [U] Pound: HTTP request smuggling ( www-servers/pound )
200606-06 [U] AWStats: Remote execution of arbitrary code ( www-misc/awstats )
200606-07 [U] Vixie Cron: Privilege Escalation ( sys-process/vixie-cron )
200606-08 [U] WordPress: Arbitrary command execution ( www-apps/wordpress )
200606-09 [U] SpamAssassin: Execution of arbitrary code ( mail-filter/spamassassin )
200606-10 [U] Cscope: Many buffer overflows ( dev-util/cscope )
200606-11 [U] JPEG library: Denial of Service ( media-libs/jpeg )
200606-12 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200606-13 [U] MySQL: SQL Injection ( dev-db/mysql )
200606-14 [U] GDM: Privilege escalation ( gnome-base/gdm )
200606-15 [U] Asterisk: IAX2 video frame buffer overflow ( net-misc/asterisk )
200606-16 [U] DokuWiki: PHP code injection ( www-apps/dokuwiki )
200606-17 [U] OpenLDAP: Buffer overflow ( net-nsd/openldap )
200606-18 [U] PAM-MySQL: Multiple vulnerabilities ( sys-auth/pam_mysql )
200606-19 [U] Sendmail: Denial of Service ( mail-mta/sendmail )
200606-20 [U] Typespeed: Remote execution of arbitrary code ( games-misc/typespeed )
200606-21 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200606-22 [U] aRts: Privilege escalation ( kde-base/arts )
200606-23 [U] KDM: Symlink vulnerability ( kde-base/kdebase  kde-base/kdm )
200606-24 [U] wv2: Integer overflow ( app-text/wv2 )
200606-25 [U] Hashcash: Possible heap overflow ( net-misc/hashcash )
200606-26 [U] EnergyMech: Denial of Service ( net-irc/emech )
200606-27 [U] Mutt: Buffer overflow ( mail-client/mutt )
200606-28 [U] Horde Web Application Framework: XSS vulnerability ( www-apps/horde )
200606-29 [U] Tikiwiki: SQL injection and multiple XSS vulnerabilities ( www-apps/tikiwiki )
200606-30 [U] Kiax: Arbitrary code execution ( net-misc/kiax )
200607-01 [U] mpg123: Heap overflow ( media-sound/mpg123 )
200607-02 [U] FreeType: Multiple integer overflows ( media-libs/freetype )
200607-03 [U] libTIFF: Multiple buffer overflows ( media-libs/tiff )
200607-04 [U] PostgreSQL: SQL injection ( dev-db/postgresql )
200607-05 [U] SHOUTcast server: Multiple vulnerabilities ( media-sound/shoutcast-server-bin )
200607-06 [U] libpng: Buffer overflow ( media-libs/libpng  app-emulation/emul-linux-x86-baselibs )
200607-07 [U] xine-lib: Buffer overflow ( media-libs/xine-lib )
200607-08 [U] GIMP: Buffer overflow ( media-gfx/gimp )
200607-09 [U] Wireshark: Multiple vulnerabilities ( net-analyzer/ethereal  net-analyzer/wireshark )
200607-10 [U] Samba: Denial of Service vulnerability ( net-fs/samba )
200607-11 [U] TunePimp: Buffer overflow ( media-libs/tunepimp )
200607-12 [U] OpenOffice.org: Multiple vulnerabilities ( app-office/openoffice  app-office/openoffice-bin )
200607-13 [U] Audacious: Multiple heap and buffer overflows ( media-sound/audacious )
200608-01 [U] Apache: Off-by-one flaw in mod_rewrite ( www-servers/apache )
200608-02 [U] Mozilla SeaMonkey: Multiple vulnerabilities ( www-client/seamonkey )
200608-03 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200608-04 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200608-05 [U] LibVNCServer: Authentication bypass ( net-libs/libvncserver )
200608-06 [U] Courier MTA: Denial of Service vulnerability ( mail-mta/courier )
200608-07 [U] libTIFF: Multiple vulnerabilities ( media-libs/tiff )
200608-08 [U] GnuPG: Integer overflow vulnerability ( app-crypt/gnupg )
200608-09 [U] MySQL: Denial of Service ( dev-db/mysql )
200608-10 [U] pike: SQL injection vulnerability ( dev-lang/pike )
200608-11 [U] Webmin, Usermin: File Disclosure ( app-admin/webmin  app-admin/usermin )
200608-12 [U] x11vnc: Authentication bypass in included LibVNCServer code ( x11-misc/x11vnc )
200608-13 [U] ClamAV: Heap buffer overflow ( app-antivirus/clamav )
200608-14 [U] DUMB: Heap buffer overflow ( media-libs/dumb )
200608-15 [U] MIT Kerberos 5: Multiple local privilege escalation vulnerabilities ( app-crypt/mit-krb5 )
200608-16 [U] Warzone 2100 Resurrection: Multiple buffer overflows ( games-strategy/warzone2100 )
200608-17 [U] libwmf: Buffer overflow vulnerability ( media-libs/libwmf )
200608-18 [U] Net::Server: Format string vulnerability ( dev-perl/net-server )
200608-19 [U] WordPress: Privilege escalation ( www-apps/wordpress )
200608-20 [U] Ruby on Rails: Several vulnerabilities ( dev-ruby/rails )
200608-21 [U] Heimdal: Multiple local privilege escalation vulnerabilities ( app-crypt/heimdal )
200608-22 [U] fbida: Arbitrary command execution ( media-gfx/fbida )
200608-23 [U] Heartbeat: Denial of Service ( sys-cluster/heartbeat )
200608-24 [U] AlsaPlayer: Multiple buffer overflows ( media-sound/alsaplayer )
200608-25 [U] X.org and some X.org libraries: Local privilege escalations ( x11-libs/libx11  x11-terms/xterm  x11-base/xorg-x11 ... )
200608-26 [U] Wireshark: Multiple vulnerabilities ( net-analyzer/wireshark )
200608-27 [U] Motor: Execution of arbitrary code ( dev-util/motor )
200608-28 [U] PHP: Arbitary code execution ( dev-lang/php )
200609-01 [U] Streamripper: Multiple remote buffer overflows ( media-sound/streamripper )
200609-02 [U] GTetrinet: Remote code execution ( games-puzzle/gtetrinet )
200609-03 [U] OpenTTD: Remote Denial of Service ( games-simulation/openttd )
200609-04 [U] LibXfont: Multiple integer overflows ( x11-libs/libXfont )
200609-05 [U] OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery ( dev-libs/openssl  app-emulation/emul-linux-x86-baselibs )
200609-06 [U] AdPlug: Multiple vulnerabilities ( media-libs/adplug )
200609-07 [U] LibXfont, monolithic X.org: Multiple integer overflows ( x11-base/xorg-x11  x11-libs/libXfont )
200609-08 [U] xine-lib: Buffer overflows ( media-libs/xine-lib )
200609-09 [U] FFmpeg: Buffer overflows ( media-video/ffmpeg )
200609-10 [U] DokuWiki: Arbitrary command execution ( www-apps/dokuwiki )
200609-11 [U] BIND: Denial of Service ( net-dns/bind )
200609-12 [U] Mailman: Multiple vulnerabilities ( net-mail/mailman )
200609-13 [U] gzip: Multiple vulnerabilities ( app-arch/gzip )
200609-14 [U] ImageMagick: Multiple Vulnerabilities ( media-gfx/imagemagick )
200609-15 [U] GnuTLS: RSA Signature Forgery ( net-libs/gnutls )
200609-16 [U] Tikiwiki: Arbitrary command execution ( www-apps/tikiwiki )
200609-17 [U] OpenSSH: Denial of Service ( net-misc/openssh )
200609-18 [U] Opera: RSA signature forgery ( www-client/opera )
200609-19 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200609-20 [U] DokuWiki: Shell command injection and Denial of Service ( www-apps/dokuwiki )
200610-01 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200610-02 [U] Adobe Flash Player: Arbitrary code execution ( www-plugins/adobe-flash )
200610-03 [U] ncompress: Buffer Underflow ( app-arch/ncompress )
200610-04 [U] Seamonkey: Multiple vulnerabilities ( www-client/seamonkey )
200610-05 [U] CAPI4Hylafax fax receiver: Execution of arbitrary code ( net-misc/capi4hylafax )
200610-06 [U] Mozilla Network Security Service (NSS): RSA signature forgery ( dev-libs/nss )
200610-07 [U] Python: Buffer Overflow ( dev-lang/python )
200610-08 [U] Cscope: Multiple buffer overflows ( dev-util/cscope )
200610-09 [U] libmusicbrainz: Multiple buffer overflows ( media-libs/musicbrainz )
200610-10 [U] ClamAV: Multiple Vulnerabilities ( app-antivirus/clamav )
200610-11 [U] OpenSSL: Multiple vulnerabilities ( dev-libs/openssl )
200610-12 [U] Apache mod_tcl: Format string vulnerability ( www-apache/mod_tcl )
200610-13 [U] Cheese Tracker: Buffer Overflow ( media-sound/cheesetracker )
200610-14 [U] PHP: Integer overflow ( dev-lang/php )
200610-15 [U] Asterisk: Multiple vulnerabilities ( net-misc/asterisk )
200611-01 [U] Screen: UTF-8 character handling vulnerability ( app-misc/screen )
200611-02 [U] Qt: Integer overflow ( x11-libs/qt )
200611-03 [U] NVIDIA binary graphics driver: Privilege escalation vulnerability ( x11-drivers/nvidia-drivers )
200611-04 [U] Bugzilla: Multiple Vulnerabilities ( www-apps/bugzilla )
200611-05 [U] Netkit FTP Server: Privilege escalation ( net-ftp/netkit-ftpd )
200611-06 [U] OpenSSH: Multiple Denial of Service vulnerabilities ( net-misc/openssh )
200611-07 [U] GraphicsMagick: PALM and DCM buffer overflows ( media-gfx/graphicsmagick )
200611-08 [U] RPM: Buffer overflow ( app-arch/rpm )
200611-09 [U] libpng: Denial of Service ( media-libs/libpng )
200611-10 [U] WordPress: Multiple vulnerabilities ( www-apps/wordpress )
200611-11 [U] TikiWiki: Multiple vulnerabilities ( www-apps/tikiwiki )
200611-12 [U] Ruby: Denial of Service vulnerability ( dev-lang/ruby )
200611-13 [U] Avahi: "netlink" message vulnerability ( net-dns/avahi )
200611-14 [U] TORQUE: Insecure temporary file creation ( sys-cluster/torque )
200611-15 [U] qmailAdmin: Buffer overflow ( net-mail/qmailadmin )
200611-16 [U] Texinfo: Buffer overflow ( sys-apps/texinfo )
200611-17 [U] fvwm: fvwm-menu-directory fvwm command injection ( x11-wm/fvwm )
200611-18 [U] TIN: Multiple buffer overflows ( net-nntp/tin )
200611-19 [U] ImageMagick: PALM and DCM buffer overflows ( media-gfx/imagemagick )
200611-20 [U] GNU gv: Stack overflow ( app-text/gv )
200611-21 [U] Kile: Incorrect backup file permission ( app-editors/kile )
200611-22 [U] Ingo H3: Folder name shell command injection ( www-apps/horde-ingo )
200611-23 [U] Mono: Insecure temporary file creation ( dev-lang/mono )
200611-24 [U] LHa: Multiple vulnerabilities ( app-arch/lha )
200611-25 [U] OpenLDAP: Denial of Service vulnerability ( net-nds/openldap )
200611-26 [U] ProFTPD: Remote execution of arbitrary code ( net-ftp/proftpd )
200612-01 [U] wv library: Multiple integer overflows ( app-text/wv )
200612-02 [U] xine-lib: Buffer overflow ( media-libs/xine-lib )
200612-03 [U] GnuPG: Multiple vulnerabilities ( app-crypt/gnupg )
200612-04 [U] ModPlug: Multiple buffer overflows ( media-libs/libmodplug )
200612-05 [U] KOffice shared libraries: Heap corruption ( app-office/koffice-libs )
200612-06 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200612-07 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200612-08 [U] SeaMonkey: Multiple vulnerabilities ( www-client/seamonkey )
200612-09 [U] MadWifi: Kernel driver buffer overflow ( net-wireless/madwifi-ng )
200612-10 [U] Tar: Directory traversal vulnerability ( app-arch/tar )
200612-11 [U] AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities ( app-emulation/emul-linux-x86-baselibs )
200612-12 [U] F-PROT Antivirus: Multiple vulnerabilities ( app-antivirus/f-prot )
200612-13 [U] libgsf: Buffer overflow ( gnome-extra/libgsf )
200612-14 [U] Trac: Cross-site request forgery ( www-apps/trac )
200612-15 [U] McAfee VirusScan: Insecure DT_RPATH ( app-antivirus/vlnx )
200612-16 [U] Links: Arbitrary Samba command execution ( www-client/links )
200612-17 [U] GNU Radius: Format string vulnerability ( net-dialup/gnuradius )
200612-18 [U] ClamAV: Denial of Service ( app-antivirus/clamav )
200612-19 [U] pam_ldap: Authentication bypass vulnerability ( sys-auth/pam_ldap )
200612-20 [U] imlib2: Multiple vulnerabilities ( media-libs/imlib2 )
200612-21 [U] Ruby: Denial of Service vulnerability ( dev-lang/ruby )
200701-01 [U] DenyHosts: Denial of Service ( app-admin/denyhosts )
200701-02 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200701-03 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200701-04 [U] SeaMonkey: Multiple vulnerabilities ( www-client/seamonkey )
200701-05 [U] KDE kfile JPEG info plugin: Denial of Service ( kde-base/kdegraphics-kfile-plugins )
200701-06 [U] w3m: Format string vulnerability ( www-client/w3m )
200701-07 [U] OpenOffice.org: EMF/WMF file handling vulnerabilities ( app-office/openoffice-bin  app-office/openoffice )
200701-08 [U] Opera: Two remote code execution vulnerabilities ( www-client/opera )
200701-09 [U] oftpd: Denial of Service ( net-ftp/oftpd )
200701-10 [U] WordPress: Multiple vulnerabilities ( www-apps/wordpress )
200701-11 [U] Kronolith: Local file inclusion ( www-apps/horde-kronolith )
200701-12 [U] Mono: Information disclosure ( dev-lang/mono )
200701-13 [U] Fetchmail: Denial of Service and password disclosure ( net-mail/fetchmail )
200701-14 [U] Mod_auth_kerb: Denial of Service ( www-apache/mod_auth_kerb )
200701-15 [U] Sun JDK/JRE: Multiple vulnerabilities ( dev-java/sun-jre-bin  dev-java/sun-jdk )
200701-16 [U] Adobe Acrobat Reader: Multiple vulnerabilities ( app-text/acroread )
200701-17 [U] libgtop: Privilege escalation ( gnome-base/libgtop )
200701-18 [U] xine-ui: Format string vulnerabilities ( media-video/xine-ui )
200701-19 [U] OpenLDAP: Insecure usage of /tmp during installation ( net-nds/openldap )
200701-20 [U] Centericq: Remote buffer overflow in LiveJournal handling ( net-im/centericq )
200701-21 [U] MIT Kerberos 5: Arbitrary Remote Code Execution ( app-crypt/mit-krb5 )
200701-22 [U] Squid: Multiple Denial of Service vulnerabilities ( net-proxy/squid )
200701-23 [U] Cacti: Command execution and SQL injection ( net-analyzer/cacti )
200701-24 [U] VLC media player: Format string vulnerability ( media-video/vlc )
200701-25 [U] X.Org X server: Multiple vulnerabilities ( x11-base/xorg-server )
200701-26 [U] KSirc: Denial of Service vulnerability ( kde-base/ksirc )
200701-27 [U] ELinks: Arbitrary Samba command execution ( www-client/elinks )
200701-28 [U] thttpd: Unauthenticated remote file access ( www-servers/thttpd )
200702-01 [U] Samba: Multiple vulnerabilities ( net-fs/samba )
200702-02 [U] ProFTPD: Local privilege escalation ( net-ftp/proftpd )
200702-03 [U] Snort: Denial of Service ( net-analyzer/snort )
200702-04 [U] RAR, UnRAR: Buffer overflow ( app-arch/unrar  app-arch/rar )
200702-05 [U] Fail2ban: Denial of Service ( net-analyzer/fail2ban )
200702-06 [U] BIND: Denial of Service ( net-dns/bind )
200702-07 [U] Sun JDK/JRE: Execution of arbitrary code ( dev-java/sun-jre-bin  dev-java/sun-jdk )
200702-08 [U] AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities ( app-emulation/emul-linux-x86-java )
200702-09 [U] Nexuiz: Multiple vulnerabilities ( games-fps/nexuiz )
200702-10 [U] UFO2000: Multiple vulnerabilities ( games-strategy/ufo2000 )
200702-11 [U] MPlayer: Buffer overflow ( media-video/mplayer )
200702-12 [U] CHMlib: User-assisted remote execution of arbitrary code ( dev-libs/chmlib )
200703-01 [U] Snort: Remote execution of arbitrary code ( net-analyzer/snort )
200703-02 [U] SpamAssassin: Long URI Denial of Service ( mail-filter/spamassassin )
200703-03 [U] ClamAV: Denial of Service ( app-antivirus/clamav )
200703-04 [U] Mozilla Firefox: Multiple vulnerabilities ( www-client/mozilla-firefox-bin  www-client/mozilla-firefox )
200703-05 [U] Mozilla Suite: Multiple vulnerabilities ( www-client/mozilla-bin  www-client/mozilla )
200703-06 [U] AMD64 x86 emulation Qt library: Integer overflow ( app-emulation/emul-linux-x86-qtlibs )
200703-07 [U] STLport: Possible remote execution of arbitrary code ( dev-libs/STLport )
200703-08 [U] SeaMonkey: Multiple vulnerabilities ( www-client/seamonkey  www-client/seamonkey-bin )
200703-09 [U] Smb4K: Multiple vulnerabilities ( net-misc/smb4k )
200703-10 [U] KHTML: Cross-site scripting (XSS) vulnerability ( kde-base/kdelibs )
200703-11 [U] Amarok: User-assisted remote execution of arbitrary code ( media-sound/amarok )
200703-12 [U] SILC Server: Denial of Service ( net-im/silc-server )
200703-13 [U] SSH Communications Security's Secure Shell Server: SFTP privilege escalation ( net-misc/ssh )
200703-14 [U] Asterisk: SIP Denial of Service ( net-misc/asterisk )
200703-15 [U] PostgreSQL: Multiple vulnerabilities ( dev-db/postgresql )
200703-16 [U] Apache JK Tomcat Connector: Remote execution of arbitrary code ( www-apache/mod_jk )
200703-17 [U] ulogd: Remote execution of arbitrary code ( app-admin/ulogd )
200703-18 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200703-19 [U] LTSP: Authentication bypass in included LibVNCServer code ( net-misc/ltsp )
200703-20 [U] LSAT: Insecure temporary file creation ( app-admin/lsat )
200703-21 [U] PHP: Multiple vulnerabilities ( dev-lang/php )
200703-22 [U] Mozilla Network Security Service: Remote execution of arbitrary code ( dev-libs/nss )
200703-23 [U] WordPress: Multiple vulnerabilities ( www-apps/wordpress )
200703-24 [U] mgv: Stack overflow in included gv code ( app-text/mgv )
200703-25 [U] Ekiga: Format string vulnerability ( net-voip/ekiga )
200703-26 [U] file: Integer underflow ( sys-apps/file )
200703-27 [U] Squid: Denial of Service ( net-proxy/squid )
200703-28 [U] CUPS: Denial of Service ( net-print/cups )
200704-01 [U] Asterisk: Two SIP Denial of Service vulnerabilities ( net-misc/asterisk )
200704-02 [U] MIT Kerberos 5: Arbitrary remote code execution ( app-crypt/mit-krb5 )
200704-03 [U] OpenAFS: Privilege escalation ( net-fs/openafs )
200704-04 [U] OpenPBS: Multiple vulnerabilities ( sys-cluster/openpbs )
200704-05 [U] zziplib: Buffer Overflow ( dev-libs/zziplib )
200704-06 [U] Evince: Stack overflow in included gv code ( app-text/evince )
200704-07 [U] libwpd: Multiple vulnerabilities ( app-text/libwpd )
200704-08 [U] DokuWiki: Cross-site scripting vulnerability ( www-apps/dokuwiki )
200704-09 [U] xine-lib: Heap-based buffer overflow ( media-libs/xine-lib )
200704-10 [U] Inkscape: Two format string vulnerabilities ( media-gfx/inkscape )
200704-11 [U] Vixie Cron: Denial of Service ( sys-process/vixie-cron )
200704-12 [U] OpenOffice.org: Multiple vulnerabilities ( app-office/openoffice  app-office/openoffice-bin )
200704-13 [U] File: Denial of Service ( sys-apps/file )
200704-14 [U] FreeRADIUS: Denial of Service ( net-dialup/freeradius )
200704-15 [U] MadWifi: Multiple vulnerabilities ( net-wireless/madwifi-ng )
200704-16 [U] Aircrack-ng: Remote execution of arbitrary code ( net-wireless/aircrack-ng )
200704-17 [U] 3proxy: Buffer overflow ( net-proxy/3proxy )
200704-18 [U] Courier-IMAP: Remote execution of arbitrary code ( net-mail/courier-imap )
200704-19 [U] Blender: User-assisted remote execution of arbitrary code ( media-gfx/blender )
200704-20 [U] NAS: Multiple vulnerabilities ( media-libs/nas )
200704-21 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200704-22 [U] BEAST: Denial of Service ( media-sound/beast )
200704-23 [U] capi4k-utils: Buffer overflow ( net-dialup/capi4k-utils )
200705-01 [U] Ktorrent: Multiple vulnerabilities ( net-p2p/ktorrent )
200705-02 [U] FreeType: User-assisted execution of arbitrary code ( media-libs/freetype )
200705-03 [U] Tomcat: Information disclosure ( www-servers/tomcat )
200705-04 [U] Apache mod_perl: Denial of Service ( www-apache/mod_perl )
200705-05 [U] Quagga: Denial of Service ( net-misc/quagga )
200705-06 [U] X.Org X11 library: Multiple integer overflows ( x11-libs/libX11 )
200705-07 [U] Lighttpd: Two Denials of Service ( www-servers/lighttpd )
200705-08 [U] GIMP: Buffer overflow ( media-gfx/gimp )
200705-09 [U] IPsec-Tools: Denial of Service ( net-firewall/ipsec-tools )
200705-10 [U] LibXfont, TightVNC: Multiple vulnerabilities ( net-misc/tightvnc  x11-libs/libXfont )
200705-11 [U] MySQL: Two Denial of Service vulnerabilities ( dev-db/mysql )
200705-12 [U] PostgreSQL: Privilege escalation ( dev-db/postgresql )
200705-13 [U] ImageMagick: Multiple buffer overflows ( media-gfx/imagemagick )
200705-14 [U] XScreenSaver: Privilege escalation ( x11-misc/xscreensaver )
200705-15 [U] Samba: Multiple vulnerabilities ( net-fs/samba )
200705-16 [U] PhpWiki: Remote execution of arbitrary code ( www-apps/phpwiki )
200705-17 [U] Apache mod_security: Rule bypass ( www-apache/mod_security )
200705-18 [U] PPTPD: Denial of Service attack ( net-dialup/pptpd )
200705-19 [U] PHP: Multiple vulnerabilities ( dev-lang/php )
200705-20 [U] Blackdown Java: Applet privilege escalation ( dev-java/blackdown-jre  dev-java/blackdown-jdk )
200705-21 [U] MPlayer: Two buffer overflows ( media-video/mplayer )
200705-22 [U] FreeType: Buffer overflow ( media-libs/freetype )
200705-23 [U] Sun JDK/JRE: Multiple vulnerabilities ( dev-java/sun-jre-bin  dev-java/sun-jdk )
200705-24 [U] libpng: Denial of Service ( media-libs/libpng )
200705-25 [U] file: Integer overflow ( sys-apps/file )
200706-01 [U] libexif: Integer overflow vulnerability ( media-libs/libexif )
200706-02 [U] Evolution: User-assisted execution of arbitrary code ( mail-client/evolution )
200706-03 [U] ELinks: User-assisted execution of arbitrary code ( www-client/elinks )
200706-04 [U] MadWifi: Multiple vulnerabilities ( net-wireless/madwifi-ng )
200706-05 [U] ClamAV: Multiple Denials of Service ( app-antivirus/clamav )
200706-06 [U] Mozilla products: Multiple vulnerabilities ( mail-client/mozilla-thunderbird-bin  www-client/seamonkey-bin  mail-client/mozilla-thunderbird ... )
200706-07 [U] PHProjekt: Multiple vulnerabilities ( www-apps/phprojekt )
200706-08 [U] emul-linux-x86-java: Multiple vulnerabilities ( app-emulation/emul-linux-x86-java )
200706-09 [U] libexif: Buffer overflow ( media-libs/libexif )
200707-01 [U] Firebird: Buffer overflow ( dev-db/firebird )
200707-02 [U] OpenOffice.org: Two buffer overflows ( app-office/openoffice  app-office/openoffice-bin )
200707-03 [U] Evolution: User-assisted remote execution of arbitrary code ( gnome-extra/evolution-data-server )
200707-04 [U] GNU C Library: Integer overflow ( sys-libs/glibc )
200707-05 [U] Webmin, Usermin: Cross-site scripting vulnerabilities ( app-admin/webmin  app-admin/usermin )
200707-06 [U] XnView: Stack-based buffer overflow ( x11-misc/xnview )
200707-07 [U] MPlayer: Multiple buffer overflows ( media-video/mplayer )
200707-08 [U] NVClock: Insecure file usage ( media-video/nvclock )
200707-09 [U] GIMP: Multiple integer overflows ( media-gfx/gimp )
200707-10 [U] Festival: Privilege elevation ( app-accessibility/festival )
200707-11 [U] MIT Kerberos 5: Arbitrary remote code execution ( app-crypt/mit-krb5 )
200707-12 [U] VLC media player: Format string vulnerabilities ( media-video/vlc )
200707-13 [U] Fail2ban: Denial of Service ( net-analyzer/fail2ban )
200707-14 [U] tcpdump: Integer overflow ( net-analyzer/tcpdump )
200708-01 [U] Macromedia Flash Player: Remote arbitrary code execution ( www-plugins/adobe-flash )
200708-02 [U] Xvid: Array indexing vulnerabilities ( media-libs/xvid )
200708-03 [U] libarchive (formerly named as bsdtar): Multiple PaX Extension Header Vulnerabilities ( app-arch/libarchive )
200708-04 [U] ClamAV: Denial of Service ( app-antivirus/clamav )
200708-05 [U] GD: Multiple vulnerabilities ( media-libs/gd )
200708-06 [U] Net::DNS: Multiple vulnerabilities ( dev-perl/Net-DNS )
200708-07 [U] Xfce Terminal: Remote arbitrary code execution ( x11-terms/terminal )
200708-08 [U] SquirrelMail G/PGP plugin: Arbitrary code execution ( mail-client/squirrelmail )
200708-09 [U] Mozilla products: Multiple vulnerabilities ( mail-client/mozilla-thunderbird-bin  www-client/seamonkey-bin  mail-client/mozilla-thunderbird ... )
200708-10 [U] MySQL: Denial of Service and information leakage ( dev-db/mysql )
200708-11 [U] Lighttpd: Multiple vulnerabilities ( www-servers/lighttpd )
200708-12 [U] Wireshark: Multiple vulnerabilities ( net-analyzer/wireshark )
200708-13 [U] BIND: Weak random number generation ( net-dns/bind )
200708-14 [U] NVIDIA drivers: Denial of Service ( x11-drivers/nvidia-drivers )
200708-15 [U] Apache mod_jk: Directory traversal ( www-apache/mod_jk )
200708-16 [U] Qt: Multiple format string vulnerabilities ( x11-libs/qt )
200708-17 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200709-01 [U] MIT Kerberos 5: Multiple vulnerabilities ( app-crypt/mit-krb5 )
200709-02 [U] KVIrc: Remote arbitrary code execution ( net-irc/kvirc )
200709-03 [U] Streamripper: Buffer overflow ( media-sound/streamripper )
200709-04 [U] po4a: Insecure temporary file creation ( app-text/po4a )
200709-05 [U] RealPlayer: Buffer overflow ( media-video/realplayer )
200709-06 [U] flac123: Buffer overflow ( media-sound/flac123 )
200709-07 [U] Eggdrop: Buffer overflow ( net-irc/eggdrop )
200709-08 [U] id3lib: Insecure temporary file creation ( media-libs/id3lib )
200709-09 [U] GNU Tar: Directory traversal vulnerability ( app-arch/tar )
200709-10 [U] PhpWiki: Authentication bypass ( www-apps/phpwiki )
200709-11 [U] GDM: Local Denial of Service ( gnome-base/gdm )
200709-12 [U] Poppler: Two buffer overflow vulnerabilities ( app-text/poppler )
200709-13 [U] rsync: Two buffer overflows ( net-misc/rsync )
200709-14 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200709-15 [U] BEA JRockit: Multiple vulnerabilities ( dev-java/jrockit-jdk-bin )
200709-16 [U] Lighttpd: Buffer overflow ( www-servers/lighttpd )
200709-17 [U] teTeX: Multiple buffer overflows ( app-text/tetex )
200709-18 [U] Bugzilla: Multiple vulnerabilities ( www-apps/bugzilla )
200710-01 [U] RPCSEC_GSS library: Buffer overflow ( net-libs/librpcsecgss )
200710-02 [U] PHP: Multiple vulnerabilities ( dev-lang/php )
200710-03 [U] libvorbis: Multiple vulnerabilities ( media-libs/libvorbis )
200710-04 [U] libsndfile: Buffer overflow ( media-libs/libsndfile )
200710-05 [U] QGit: Insecure temporary file creation ( dev-util/qgit )
200710-06 [U] OpenSSL: Multiple vulnerabilities ( dev-libs/openssl )
200710-07 [U] Tk: Buffer overflow ( dev-lang/tk )
200710-08 [U] KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow ( kde-base/kdegraphics  kde-base/kpdf  app-office/kword ... )
200710-09 [U] NX 2.1: User-assisted execution of arbitrary code ( net-misc/nx  net-misc/nxnode )
200710-10 [U] SKK Tools: Insecure temporary file creation ( app-i18n/skktools )
200710-11 [U] X Font Server: Multiple Vulnerabilities ( x11-apps/xfs )
200710-12 [U] T1Lib: Buffer overflow ( media-libs/t1lib )
200710-13 [U] Ampache: Multiple vulnerabilities ( www-apps/ampache )
200710-14 [U] DenyHosts: Denial of Service ( app-admin/denyhosts )
200710-15 [U] KDM: Local privilege escalation ( kde-base/kdebase  kde-base/kdm )
200710-16 [U] X.Org X server: Composite local privilege escalation ( x11-base/xorg-server )
200710-17 [U] Balsa: Buffer overflow ( mail-client/balsa )
200710-18 [U] util-linux: Local privilege escalation ( sys-apps/util-linux )
200710-19 [U] The Sleuth Kit: Integer underflow ( app-forensics/sleuthkit )
200710-20 [U] PDFKit, ImageKits: Buffer overflow ( gnustep-libs/imagekits  gnustep-libs/pdfkit )
200710-21 [U] TikiWiki: Arbitrary command execution ( www-apps/tikiwiki )
200710-22 [U] TRAMP: Insecure temporary file creation ( app-emacs/tramp )
200710-23 [U] Star: Directory traversal vulnerability ( app-arch/star )
200710-24 [U] OpenOffice.org: Heap-based buffer overflow ( app-office/openoffice  app-office/openoffice-bin )
200710-25 [U] MLDonkey: Privilege escalation ( net-p2p/mldonkey )
200710-26 [U] HPLIP: Privilege escalation ( net-print/hplip )
200710-27 [U] ImageMagick: Multiple vulnerabilities ( media-gfx/imagemagick )
200710-28 [U] Qt: Buffer overflow ( x11-libs/qt )
200710-29 [U] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code ( mail-client/sylpheed  mail-client/claws-mail )
200710-30 [U] OpenSSL: Remote execution of arbitrary code ( dev-libs/openssl )
200710-31 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200711-01 [U] gFTP: Multiple vulnerabilities ( net-ftp/gftp )
200711-02 [U] OpenSSH: Security bypass ( net-misc/openssh )
200711-03 [U] Gallery: Multiple vulnerabilities ( www-apps/gallery )
200711-04 [U] Evolution: User-assisted remote execution of arbitrary code ( gnome-extra/evolution-data-server )
200711-05 [U] SiteBar: Multiple issues ( www-apps/sitebar )
200711-06 [U] Apache: Multiple vulnerabilities ( www-servers/apache )
200711-07 [U] Python: User-assisted execution of arbitrary code ( dev-lang/python )
200711-08 [U] libpng: Multiple Denials of Service ( media-libs/libpng )
200711-09 [U] MadWifi: Denial of Service ( net-wireless/madwifi-ng )
200711-10 [U] Mono: Buffer overflow ( dev-lang/mono )
200711-11 [U] Nagios Plugins: Two buffer overflows ( net-analyzer/nagios-plugins )
200711-12 [U] Tomboy: User-assisted execution of arbitrary code ( app-misc/tomboy )
200711-13 [U] 3proxy: Denial of Service ( net-proxy/3proxy )
200711-14 [U] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities ( www-client/seamonkey  www-client/mozilla-firefox-bin  net-libs/xulrunner ... )
200711-15 [U] FLAC: Buffer overflow ( media-libs/flac )
200711-16 [U] CUPS: Memory corruption ( net-print/cups )
200711-17 [U] Ruby on Rails: Multiple vulnerabilities ( dev-ruby/rails )
200711-18 [U] Cpio: Buffer overflow ( app-arch/cpio )
200711-19 [U] TikiWiki: Multiple vulnerabilities ( www-apps/tikiwiki )
200711-20 [U] Pioneers: Multiple Denials of Service ( games-board/pioneers )
200711-21 [U] Bochs: Multiple vulnerabilities ( app-emulation/bochs )
200711-22 [U] Poppler, KDE: User-assisted execution of arbitrary code ( kde-base/kdegraphics  kde-base/kpdf  app-text/poppler ... )
200711-23 [U] VMware Workstation and Player: Multiple vulnerabilities ( app-emulation/vmware-workstation  app-emulation/vmware-player )
200711-24 [U] Mozilla Thunderbird: Multiple vulnerabilities ( mail-client/mozilla-thunderbird  mail-client/mozilla-thunderbird-bin )
200711-25 [U] MySQL: Denial of Service ( dev-db/mysql )
200711-26 [U] teTeX: Multiple vulnerabilities ( app-text/tetex )
200711-27 [U] Link Grammar: User-assisted execution of arbitrary code ( dev-libs/link-grammar )
200711-28 [U] Perl: Buffer overflow ( dev-lang/perl )
200711-29 [U] Samba: Execution of arbitrary code ( net-fs/samba )
200711-30 [U] PCRE: Multiple vulnerabilities ( dev-libs/libpcre )
200711-31 [U] Net-SNMP: Denial of Service ( net-analyzer/net-snmp )
200711-32 [U] Feynmf: Insecure temporary file creation ( dev-tex/feynmf )
200711-33 [U] nss_ldap: Information disclosure ( sys-auth/nss_ldap )
200711-34 [U] CSTeX: Multiple vulnerabilities ( app-text/cstetex )
200712-01 [U] Hugin: Insecure temporary file creation ( media-gfx/hugin )
200712-02 [U] Cacti: SQL injection ( net-analyzer/cacti )
200712-03 [U] GNU Emacs: Multiple vulnerabilities ( app-editors/emacs )
200712-04 [U] Cairo: User-assisted execution of arbitrary code ( x11-libs/cairo )
200712-05 [U] PEAR::MDB2: Information disclosure ( dev-php/PEAR-MDB2 )
200712-06 [U] Firebird: Multiple buffer overflows ( dev-db/firebird )
200712-07 [U] Lookup: Insecure temporary file creation ( app-emacs/lookup )
200712-08 [U] AMD64 x86 emulation Qt library: Multiple vulnerabilities ( app-emulation/emul-linux-x86-qtlibs )
200712-09 [U] Ruby-GNOME2: Format string error ( dev-ruby/ruby-gtk2 )
200712-10 [U] Samba: Execution of arbitrary code ( net-fs/samba )
200712-11 [U] Portage: Information disclosure ( sys-apps/portage )
200712-12 [U] IRC Services: Denial of Service ( net-irc/ircservices )
200712-13 [U] E2fsprogs: Multiple buffer overflows ( sys-fs/e2fsprogs )
200712-14 [U] CUPS: Multiple vulnerabilities ( net-print/cups )
200712-15 [U] libexif: Multiple vulnerabilities ( media-libs/libexif )
200712-16 [U] Exiv2: Integer overflow ( media-gfx/exiv2 )
200712-17 [U] exiftags: Multiple vulnerabilities ( media-gfx/exiftags )
200712-18 [U] Multi-Threaded DAAP Daemon: Multiple vulnerabilities ( media-sound/mt-daapd )
200712-19 [U] Syslog-ng: Denial of Service ( app-admin/syslog-ng )
200712-20 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200712-21 [U] Mozilla Firefox, SeaMonkey: Multiple vulnerabilities ( www-client/seamonkey  www-client/mozilla-firefox-bin  www-client/mozilla-firefox ... )
200712-22 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200712-23 [U] Wireshark: Multiple vulnerabilities ( net-analyzer/wireshark )
200712-24 [U] AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code ( app-emulation/emul-linux-x86-gtklibs )
200712-25 [U] OpenOffice.org: User-assisted arbitrary code execution ( app-office/openoffice  app-office/openoffice-bin  dev-db/hsqldb )
200801-01 [U] unp: Arbitrary command execution ( app-arch/unp )
200801-02 [U] R: Multiple vulnerabilities ( dev-lang/R )
200801-03 [U] Claws Mail: Insecure temporary file creation ( mail-client/claws-mail )
200801-04 [U] OpenAFS: Denial of Service ( net-fs/openafs )
200801-05 [U] Squid: Denial of Service ( net-proxy/squid )
200801-06 [U] Xfce: Multiple vulnerabilities ( xfce-base/libxfcegui4  xfce-base/xfce4-panel )
200801-07 [U] Adobe Flash Player: Multiple vulnerabilities ( www-plugins/adobe-flash )
200801-08 [U] libcdio: User-assisted execution of arbitrary code ( dev-libs/libcdio )
200801-09 [U] X.Org X server and Xfont library: Multiple vulnerabilities ( x11-libs/libXfont  x11-base/xorg-server )
200801-10 [U] TikiWiki: Multiple vulnerabilities ( www-apps/tikiwiki )
200801-11 [U] CherryPy: Directory traversal vulnerability ( dev-python/cherrypy )
200801-12 [U] xine-lib: User-assisted execution of arbitrary code ( media-libs/xine-lib )
200801-13 [U] ngIRCd: Denial of Service ( net-irc/ngircd )
200801-14 [U] Blam: User-assisted execution of arbitrary code ( net-news/blam )
200801-15 [U] PostgreSQL: Multiple vulnerabilities ( dev-db/postgresql )
200801-16 [U] MaraDNS: CNAME Denial of Service ( net-dns/maradns )
200801-17 [U] Netkit FTP Server: Denial of Service ( net-ftp/netkit-ftpd )
200801-18 [U] Kazehakase: Multiple vulnerabilities ( www-client/kazehakase )
200801-19 [U] GOffice: Multiple vulnerabilities ( x11-libs/goffice )
200801-20 [U] libxml2: Denial of Service ( dev-libs/libxml2 )
200801-21 [U] Xdg-Utils: Arbitrary command execution ( x11-misc/xdg-utils )
200801-22 [U] PeerCast: Buffer overflow ( media-sound/peercast )
200802-01 [U] SDL_image: Two buffer overflow vulnerabilities ( media-libs/sdl-image )
200802-02 [U] Doomsday: Multiple vulnerabilities ( games-fps/doomsday )
200802-03 [U] Horde IMP: Security bypass ( www-apps/horde-imp )
200802-04 [U] Gallery: Multiple vulnerabilities ( www-apps/gallery )
200802-05 [U] Gnumeric: User-assisted execution of arbitrary code ( app-office/gnumeric )
200802-06 [U] scponly: Multiple vulnerabilities ( net-misc/scponly )
200802-07 [U] Pulseaudio: Privilege escalation ( media-sound/pulseaudio )
200802-08 [U] Boost: Denial of Service ( dev-libs/boost )
200802-09 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200802-10 [U] Python: PCRE Integer overflow ( dev-lang/python )
200802-11 [U] Asterisk: Multiple vulnerabilities ( net-misc/asterisk )
200802-12 [U] xine-lib: User-assisted execution of arbitrary code ( media-libs/xine-lib )
200803-01 [U] Adobe Acrobat Reader: Multiple vulnerabilities ( app-text/acroread )
200803-02 [U] Firebird: Multiple vulnerabilities ( dev-db/firebird )
200803-03 [U] Audacity: Insecure temporary file creation ( media-sound/audacity )
200803-04 [U] Mantis: Cross-Site Scripting ( www-apps/mantisbt )
200803-05 [U] SplitVT: Privilege escalation ( app-misc/splitvt )
200803-06 [U] SWORD: Shell command injection ( app-text/sword )
200803-07 [U] Paramiko: Information disclosure ( dev-python/paramiko )
200803-08 [U] Win32 binary codecs: Multiple vulnerabilities ( media-libs/win32codecs )
200803-09 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200803-10 [U] lighttpd: Multiple vulnerabilities ( www-servers/lighttpd )
200803-11 [U] Vobcopy: Insecure temporary file creation ( media-video/vobcopy )
200803-12 [U] Evolution: Format string vulnerability ( mail-client/evolution )
200803-13 [U] VLC: Multiple vulnerabilities ( media-video/vlc )
200803-14 [U] Ghostscript: Buffer overflow ( app-text/ghostscript-gnu  app-text/ghostscript-gpl  app-text/ghostscript-esp )
200803-15 [U] phpMyAdmin: SQL injection vulnerability ( dev-db/phpmyadmin )
200803-16 [U] MPlayer: Multiple buffer overflows ( media-video/mplayer )
200803-17 [U] PDFlib: Multiple buffer overflows ( media-libs/pdflib )
200803-18 [U] Cacti: Multiple vulnerabilities ( net-analyzer/cacti )
200803-19 [U] Apache: Multiple vulnerabilities ( www-servers/apache )
200803-20 [U] International Components for Unicode: Multiple vulnerabilities ( dev-libs/icu )
200803-21 [U] Sarg: Remote execution of arbitrary code ( net-analyzer/sarg )
200803-22 [U] LIVE555 Media Server: Denial of Service ( media-plugins/live )
200803-23 [U] Website META Language: Insecure temporary file usage ( dev-lang/wml )
200803-24 [U] PCRE: Buffer overflow ( dev-libs/glib  dev-libs/libpcre )
200803-25 [U] Dovecot: Multiple vulnerabilities ( net-mail/dovecot )
200803-26 [U] Adobe Acrobat Reader: Insecure temporary file creation ( app-text/acroread )
200803-27 [U] MoinMoin: Multiple vulnerabilities ( www-apps/moinmoin )
200803-28 [U] OpenLDAP: Denial of Service vulnerabilities ( net-nds/openldap )
200803-29 [U] ViewVC: Multiple vulnerabilities ( www-apps/viewvc )
200803-30 [U] ssl-cert eclass: Certificate disclosure ( net-ftp/netkit-ftpd  net-nntp/inn  net-mail/dovecot ... )
200803-31 [U] MIT Kerberos 5: Multiple vulnerabilities ( app-crypt/mit-krb5 )
200803-32 [U] Wireshark: Denial of Service ( net-analyzer/wireshark )
200804-01 [U] CUPS: Multiple vulnerabilities ( net-print/cups )
200804-02 [U] bzip2: Denial of Service ( app-arch/bzip2 )
200804-03 [U] OpenSSH: Privilege escalation ( net-misc/openssh )
200804-04 [U] MySQL: Multiple vulnerabilities ( dev-db/mysql )
200804-05 [U] NX: User-assisted execution of arbitrary code ( net-misc/nx  net-misc/nxnode )
200804-06 [U] UnZip: User-assisted execution of arbitrary code ( app-arch/unzip )
200804-07 [U] PECL APC: Buffer Overflow ( dev-php5/pecl-apc )
200804-08 [U] lighttpd: Multiple vulnerabilities ( www-servers/lighttpd )
200804-09 [U] am-utils: Insecure temporary file creation ( net-fs/am-utils )
200804-10 [U] Tomcat: Multiple vulnerabilities ( www-servers/tomcat )
200804-11 [U] policyd-weight: Insecure temporary file creation ( mail-filter/policyd-weight )
200804-12 [U] gnome-screensaver: Privilege escalation ( gnome-extra/gnome-screensaver )
200804-13 [U] Asterisk: Multiple vulnerabilities ( net-misc/asterisk )
200804-14 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200804-15 [U] libpng: Execution of arbitrary code ( media-libs/libpng )
200804-16 [U] rsync: Execution of arbitrary code ( net-misc/rsync )
200804-17 [U] Speex: User-assisted execution of arbitrary code ( media-libs/speex )
200804-18 [U] Poppler: User-assisted execution of arbitrary code ( app-text/poppler )
200804-19 [U] PHP Toolkit: Data disclosure and Denial of Service ( app-admin/php-toolkit )
200804-20 [U] Sun JDK/JRE: Multiple vulnerabilities ( dev-java/sun-jre-bin  app-emulation/emul-linux-x86-java  dev-java/sun-jdk )
200804-21 [U] Adobe Flash Player: Multiple vulnerabilities ( www-plugins/adobe-flash )
200804-22 [U] PowerDNS Recursor: DNS Cache Poisoning ( net-dns/pdns-recursor )
200804-23 [U] CUPS: Integer overflow vulnerability ( net-print/cups )
200804-24 [U] DBmail: Data disclosure ( net-mail/dbmail )
200804-25 [U] VLC: User-assisted execution of arbitrary code ( media-video/vlc )
200804-26 [U] Openfire: Denial of Service ( net-im/openfire )
200804-27 [U] SILC: Multiple vulnerabilities ( net-im/silc-toolkit  net-im/silc-client  net-im/silc-server )
200804-28 [U] JRockit: Multiple vulnerabilities ( dev-java/jrockit-jdk-bin )
200804-29 [U] Comix: Multiple vulnerabilities ( media-gfx/comix )
200804-30 [U] KDE start_kdeinit: Multiple vulnerabilities ( kde-base/kdelibs )
200805-01 [U] Horde Application Framework: Multiple vulnerabilities ( www-apps/horde-webmail  www-apps/horde-mnemo  www-apps/horde ... )
200805-02 [U] phpMyAdmin: Information disclosure ( dev-db/phpmyadmin )
200805-03 [U] Multiple X11 terminals: Local privilege escalation ( x11-terms/eterm  x11-terms/wterm  x11-terms/rxvt-unicode ... )
200805-04 [U] eGroupWare: Multiple vulnerabilities ( www-apps/egroupware )
200805-05 [U] Wireshark: Denial of Service ( net-analyzer/wireshark )
200805-06 [U] Firebird: Data disclosure ( dev-db/firebird )
200805-07 [U] Linux Terminal Server Project: Multiple vulnerabilities ( net-misc/ltsp )
200805-08 [U] InspIRCd: Denial of Service ( net-irc/inspircd )
200805-09 [U] MoinMoin: Privilege escalation ( www-apps/moinmoin )
200805-10 [U] Pngcrush: User-assisted execution of arbitrary code ( media-gfx/pngcrush )
200805-11 [U] Chicken: Multiple vulnerabilities ( dev-scheme/chicken )
200805-12 [U] Blender: Multiple vulnerabilities ( media-gfx/blender )
200805-13 [U] PTeX: Multiple vulnerabilities ( app-text/ptex )
200805-14 [U] Common Data Format library: User-assisted execution of arbitrary code ( sci-libs/cdf )
200805-15 [U] libid3tag: Denial of Service ( media-libs/libid3tag )
200805-16 [U] OpenOffice.org: Multiple vulnerabilities ( app-office/openoffice  app-office/openoffice-bin )
200805-17 [U] Perl: Execution of arbitrary code ( sys-devel/libperl  dev-lang/perl )
200805-18 [U] Mozilla products: Multiple vulnerabilities ( mail-client/mozilla-thunderbird-bin  www-client/seamonkey-bin  mail-client/mozilla-thunderbird ... )
200805-19 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200805-20 [U] GnuTLS: Execution of arbitrary code ( net-libs/gnutls )
200805-21 [U] Roundup: Permission bypass ( www-apps/roundup )
200805-22 [U] MPlayer: User-assisted execution of arbitrary code ( media-video/mplayer )
200805-23 [U] Samba: Heap-based buffer overflow ( net-fs/samba )
200806-01 [U] mtr: Stack-based buffer overflow ( net-analyzer/mtr )
200806-02 [U] libxslt: Execution of arbitrary code ( dev-libs/libxslt )
200806-03 [U] Imlib 2: User-assisted execution of arbitrary code ( media-libs/imlib2 )
200806-04 [U] rdesktop: Multiple vulnerabilities ( net-misc/rdesktop )
200806-05 [U] cbrPager: User-assisted execution of arbitrary code ( app-misc/cbrpager )
200806-06 [U] Evolution: User-assisted execution of arbitrary code ( mail-client/evolution )
200806-07 [U] X.Org X server: Multiple vulnerabilities ( x11-base/xorg-server )
200806-08 [U] OpenSSL: Denial of Service ( dev-libs/openssl )
200806-09 [U] libvorbis: Multiple vulnerabilities ( media-libs/libvorbis )
200806-10 [U] FreeType: User-assisted execution of arbitrary code ( media-libs/freetype )
200806-11 [U] IBM JDK/JRE: Multiple vulnerabilities ( dev-java/ibm-jre-bin  dev-java/ibm-jdk-bin )
200807-01 [U] Python: Multiple integer overflows ( dev-lang/python )
200807-02 [U] Motion: Execution of arbitrary code ( media-video/motion )
200807-03 [U] PCRE: Buffer overflow ( dev-libs/glib  dev-libs/libpcre )
200807-04 [U] Poppler: User-assisted execution of arbitrary code ( app-text/poppler )
200807-05 [U] OpenOffice.org: User-assisted execution of arbitrary code ( app-office/openoffice  app-office/openoffice-bin )
200807-06 [U] Apache: Denial of Service ( www-servers/apache )
200807-07 [U] NX: User-assisted execution of arbitrary code ( net-misc/nx  net-misc/nxnode )
200807-08 [U] BIND: Cache poisoning ( net-dns/bind )
200807-09 [U] Mercurial: Directory traversal ( dev-util/mercurial )
200807-10 [U] Bacula: Information disclosure ( app-backup/bacula )
200807-11 [U] PeerCast: Buffer overflow ( media-sound/peercast )
200807-12 [U] BitchX: Multiple vulnerabilities ( net-irc/bitchx )
200807-13 [U] VLC: Multiple vulnerabilities ( media-video/vlc )
200807-14 [U] Linux Audit: Buffer overflow ( sys-process/audit )
200807-15 [U] Pan: User-assisted execution of arbitrary code ( net-nntp/pan )
200807-16 [U] Python: Multiple vulnerabilities ( dev-lang/python )
200808-01 [U] xine-lib: User-assisted execution of arbitrary code ( media-libs/xine-lib )
200808-02 [U] Net-SNMP: Multiple vulnerabilities ( net-analyzer/net-snmp )
200808-03 [U] Mozilla products: Multiple vulnerabilities ( mail-client/mozilla-thunderbird-bin  net-libs/xulrunner-bin  www-client/seamonkey-bin ... )
200808-04 [U] Wireshark: Denial of Service ( net-analyzer/wireshark )
200808-05 [U] ISC DHCP: Denial of Service ( net-misc/dhcp )
200808-06 [U] libxslt: Execution of arbitrary code ( dev-libs/libxslt )
200808-07 [U] ClamAV: Multiple Denials of Service ( app-antivirus/clamav )
200808-08 [U] stunnel: Security bypass ( net-misc/stunnel )
200808-09 [U] OpenLDAP: Denial of Service vulnerability ( net-nds/openldap )
200808-10 [U] Adobe Reader: User-assisted execution of arbitrary code ( app-text/acroread )
200808-11 [U] UUDeview: Insecure temporary file creation ( app-text/uudeview  news-nntp/nzbget )
200808-12 [U] Postfix: Local privilege escalation vulnerability ( mail-mta/postfix )
200809-01 [U] yelp: User-assisted execution of arbitrary code ( gnome-extra/yelp )
200809-02 [U] dnsmasq: Denial of Service and DNS spoofing ( net-dns/dnsmasq )
200809-03 [U] RealPlayer: Buffer overflow ( media-video/realplayer )
200809-04 [U] MySQL: Privilege bypass ( dev-db/mysql )
200809-05 [U] Courier Authentication Library: SQL injection vulnerability ( net-libs/courier-authlib )
200809-06 [U] VLC: Multiple vulnerabilities ( media-video/vlc )
200809-07 [U] libTIFF: User-assisted execution of arbitrary code ( media-libs/tiff )
200809-08 [U] Amarok: Insecure temporary file creation ( media-sound/amarok )
200809-09 [U] Postfix: Denial of Service ( mail-mta/postfix )
200809-10 [U] Mantis: Multiple vulnerabilities ( www-apps/mantisbt )
200809-11 [U] HAVP: Denial of Service ( net-proxy/havp )
200809-12 [U] Newsbeuter: User-assisted execution of arbitrary code ( net-news/newsbeuter )
200809-13 [U] R: Insecure temporary file creation ( dev-lang/R )
200809-14 [U] BitlBee: Security bypass ( net-im/bitlbee )
200809-15 [U] GNU ed: User-assisted execution of arbitrary code ( sys-apps/ed )
200809-16 [U] Git: User-assisted execution of arbitrary code ( dev-util/git )
200809-17 [U] Wireshark: Multiple Denials of Service ( net-analyzer/wireshark )
200809-18 [U] ClamAV: Multiple Denials of Service ( app-antivirus/clamav )
200810-01 [U] WordNet: Execution of arbitrary code ( app-dicts/wordnet )
200810-02 [U] Portage: Untrusted search path local root vulnerability ( sys-apps/portage )
200810-03 [U] libspf2: DNS response buffer overflow ( mail-filter/libspf2 )
200811-01 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200811-02 [U] Gallery: Multiple vulnerabilities ( www-apps/gallery )
200811-03 [U] FAAD2: User-assisted execution of arbitrary code ( media-libs/faad2 )
200811-04 [U] Graphviz: User-assisted execution of arbitrary code ( media-gfx/graphviz )
200811-05 [U] PHP: Multiple vulnerabilities ( dev-lang/php )
200812-01 [U] OptiPNG: User-assisted execution of arbitrary code ( media-gfx/optipng )
200812-02 [U] enscript: User-assisted execution of arbitrary code ( app-text/enscript )
200812-03 [U] IPsec-Tools: racoon Denial of Service ( net-firewall/ipsec-tools )
200812-04 [U] lighttpd: Multiple vulnerabilities ( www-servers/lighttpd )
200812-05 [U] libsamplerate: User-assisted execution of arbitrary code ( media-libs/libsamplerate )
200812-06 [U] libxml2: Multiple vulnerabilities ( dev-libs/libxml2 )
200812-07 [U] Mantis: Multiple vulnerabilities ( www-apps/mantisbt )
200812-08 [U] Mgetty: Insecure temporary file usage ( net-dialup/mgetty )
200812-09 [U] OpenSC: Insufficient protection of smart card PIN ( dev-libs/opensc )
200812-10 [U] Archive::Tar: Directory traversal vulnerability ( perl-core/Archive-Tar )
200812-11 [U] CUPS: Multiple vulnerabilities ( net-print/cups )
200812-12 [U] Honeyd: Insecure temporary file creation ( net-analyzer/honeyd )
200812-13 [U] OpenOffice.org: Multiple vulnerabilities ( app-office/openoffice  app-office/openoffice-bin )
200812-14 [U] aview: Insecure temporary file usage ( media-gfx/aview )
200812-15 [U] POV-Ray: User-assisted execution of arbitrary code ( media-gfx/povray )
200812-16 [U] Dovecot: Multiple vulnerabilities ( net-mail/dovecot )
200812-17 [U] Ruby: Multiple vulnerabilities ( dev-lang/ruby )
200812-18 [U] JasPer: User-assisted execution of arbitrary code ( media-libs/jasper )
200812-19 [U] PowerDNS: Multiple vulnerabilities ( net-dns/pdns )
200812-20 [U] phpCollab: Multiple vulnerabilities ( www-apps/phpcollab )
200812-21 [U] ClamAV: Multiple vulnerabilities ( app-antivirus/clamav )
200812-22 [U] Ampache: Insecure temporary file usage ( www-apps/ampache )
200812-23 [U] Imlib2: User-assisted execution of arbitrary code ( media-libs/imlib2 )
200812-24 [U] VLC: Multiple vulnerabilities ( media-video/vlc )
200901-01 [U] NDISwrapper: Arbitrary remote code execution ( net-wireless/ndiswrapper )
200901-02 [U] JHead: Multiple vulnerabilities ( media-gfx/jhead )
200901-03 [U] pdnsd: Denial of Service and cache poisoning ( net-dns/pdnsd )
200901-04 [U] D-Bus: Denial of Service ( sys-apps/dbus )
200901-05 [U] Streamripper: Multiple vulnerabilities ( media-sound/streamripper )
200901-06 [U] Tremulous: User-assisted execution of arbitrary code ( games-fps/tremulous-bin  games-fps/tremulous )
200901-07 [U] MPlayer: Multiple vulnerabilities ( media-video/mplayer )
200901-08 [U] Online-Bookmarks: Multiple vulnerabilities ( www-apps/online-bookmarks )
200901-09 [U] Adobe Reader: User-assisted execution of arbitrary code ( app-text/acroread )
200901-10 [U] GnuTLS: Certificate validation error ( net-libs/gnutls )
200901-11 [U] Avahi: Denial of Service ( net-dns/avahi )
200901-12 [U] noip-updater: Execution of arbitrary code ( net-dns/noip-updater )
200901-13 [U] Pidgin: Multiple vulnerabilities ( net-im/pidgin )
200901-14 [U] Scilab: Insecure temporary file usage ( sci-mathematics/scilab )
200901-15 [U] Net-SNMP: Denial of Service ( net-analyzer/net-snmp )
200902-01 [U] sudo: Privilege escalation ( app-admin/sudo )
200902-02 [U] OpenSSL: Certificate validation error ( dev-libs/openssl )
200902-03 [U] Valgrind: Untrusted search path ( dev-util/valgrind )
200902-04 [U] xterm: User-assisted arbitrary commands execution ( x11-terms/xterm )
200902-05 [U] KTorrent: Multiple vulnerabilitites ( net-p2p/ktorrent )
200902-06 [U] GNU Emacs, XEmacs: Multiple vulnerabilities ( app-editors/emacs  app-xemacs/edit-utils )
200903-01 [U] Vinagre: User-assisted execution of arbitrary code ( net-misc/vinagre )
200903-02 [U] ZNC: Privilege escalation ( net-irc/znc )
200903-03 [U] Audacity: User-assisted execution of arbitrary code ( media-sound/audacity )
200903-04 [U] DevIL: User-assisted execution of arbitrary code ( media-libs/devil )
200903-05 [U] PDFjam: Multiple vulnerabilities ( app-text/pdfjam )
200903-06 [U] nfs-utils: Access restriction bypass ( net-fs/nfs-utils )
200903-07 [U] Samba: Data disclosure ( net-fs/samba )
200903-08 [U] gEDA: Insecure temporary file creation ( sci-electronics/geda )
200903-09 [U] OpenTTD: Execution of arbitrary code ( games-simulation/openttd )
200903-10 [U] Irrlicht: User-assisted execution of arbitrary code ( dev-games/irrlicht )
200903-11 [U] PyCrypto: Execution of arbitrary code ( dev-python/pycrypto )
200903-12 [U] OptiPNG: User-assisted execution of arbitrary code ( media-gfx/optipng )
200903-13 [U] MPFR: Denial of Service ( dev-libs/mpfr )
200903-14 [U] BIND: Incorrect signature verification ( net-dns/bind )
200903-15 [U] git: Multiple vulnerabilties ( dev-util/git )
200903-16 [U] Epiphany: Untrusted search path ( www-client/epiphany )
200903-17 [U] Real VNC: User-assisted execution of arbitrary code ( net-misc/vnc )
200903-18 [U] Openswan: Insecure temporary file creation ( net-misc/openswan )
200903-19 [U] Xerces-C++: Denial of Service ( dev-libs/xerces-c )
200903-20 [U] WebSVN: Multiple vulnerabilities ( www-apps/websvn )
200903-21 [U] cURL: Arbitrary file access ( net-misc/curl )
200903-22 [U] Ganglia: Execution of arbitrary code ( sys-cluster/ganglia )
200903-23 [U] Adobe Flash Player: Multiple vulnerabilities ( www-plugins/adobe-flash )
200903-24 [U] Shadow: Privilege escalation ( sys-apps/shadow )
200903-25 [U] Courier Authentication Library: SQL Injection vulnerability ( net-libs/courier-authlib )
200903-26 [U] TMSNC: Execution of arbitrary code ( net-im/tmsnc )
200903-27 [U] ProFTPD: Multiple vulnerabilities ( net-ftp/proftpd )
200903-28 [U] libpng: Multiple vulnerabilities ( media-libs/libpng )
200903-29 [U] BlueZ: Arbitrary code execution ( net-wireless/bluez-utils  net-wireless/bluez-libs )
200903-30 [U] Opera: Multiple vulnerabilities ( www-client/opera )
200903-31 [U] libcdaudio: User-assisted execution of arbitrary code ( media-libs/libcdaudio )
200903-32 [U] phpMyAdmin: Multiple vulnerabilities ( dev-db/phpmyadmin )
200903-33 [U] FFmpeg: Multiple vulnerabilities ( media-video/mplayer  media-plugins/gst-plugins-ffmpeg  media-video/ffmpeg )
200903-34 [U] Amarok: User-assisted execution of arbitrary code ( media-sound/amarok )
200903-35 [U] Muttprint: Insecure temporary file usage ( app-misc/muttprint )
200903-36 [U] MLDonkey: Information disclosure ( net-p2p/mldonkey )
200903-37 [U] Ghostscript: User-assisted execution of arbitrary code ( app-text/ghostscript-gnu  app-text/ghostscript-gpl  app-text/ghostscript-esp )
200903-38 [U] Squid: Multiple Denial of Service vulnerabilities ( net-proxy/squid )
200903-39 [U] pam_krb5: Privilege escalation ( sys-auth/pam_krb5 )
200903-40 [U] Analog: Denial of Service ( app-admin/analog )
200903-41 [U] gedit: Untrusted search path ( app-editors/gedit )
200904-01 [U] Openfire: Multiple vulnerabilities ( net-im/openfire )
200904-02 [U] GLib: Execution of arbitrary code ( dev-libs/glib )
200904-03 [U] Gnumeric: Untrusted search path ( app-office/gnumeric )
200904-04 [U] WeeChat: Denial of Service ( net-irc/weechat )
200904-05 [U] ntp: Certificate validation error ( net-misc/ntp )
200904-06 [U] Eye of GNOME: Untrusted search path ( media-gfx/eog )
200904-07 [U] Xpdf: Untrusted search path ( app-text/xpdf )
200904-08 [U] OpenSSL: Denial of Service ( dev-libs/openssl )
200904-09 [U] MIT Kerberos 5: Multiple vulnerabilities ( app-crypt/mit-krb5 )
200904-10 [U] Avahi: Denial of Service ( net-dns/avahi )
200904-11 [U] Tor: Multiple vulnerabilities ( net-misc/tor )
200904-12 [U] Wicd: Information disclosure ( net-misc/wicd )
200904-13 [U] Ventrilo: Denial of Service ( media-sound/ventrilo-server-bin )
200904-14 [U] F-PROT Antivirus: Multiple Denial of Service vulnerabilities ( app-antivirus/f-prot )
200904-15 [U] mpg123: User-assisted execution of arbitrary code ( media-sound/mpg123 )
200904-16 [U] libsndfile: User-assisted execution of arbitrary code ( media-libs/libsndfile )
200904-17 [U] Adobe Reader: User-assisted execution of arbitrary code ( app-text/acroread )
200904-18 [U] udev: Multiple vulnerabilities ( sys-fs/udev )
200904-19 [U] LittleCMS: Multiple vulnerabilities ( media-libs/lcms )
200904-20 [U] CUPS: Multiple vulnerabilities ( net-print/cups )
200905-01 [U] Asterisk: Multiple vulnerabilities ( net-misc/asterisk )
200905-02 [U] Cscope: User-assisted execution of arbitrary code ( dev-util/cscope )
200905-03 [U] IPSec Tools: Denial of Service ( net-firewall/ipsec-tools )
200905-04 [U] GnuTLS: Multiple vulnerabilities ( net-libs/gnutls )
200905-05 [U] FreeType: Multiple vulnerabilities ( media-libs/freetype )
200905-06 [U] acpid: Denial of Service ( sys-power/acpid )
200905-07 [U] Pidgin: Multiple vulnerabilities ( net-im/pidgin )
200905-08 [U] NTP: Remote execution of arbitrary code ( net-misc/ntp )
200905-09 [U] libsndfile: User-assisted execution of arbitrary code ( media-libs/libsndfile )
200906-01 [U] libpng: Information disclosure ( media-libs/libpng )
200906-02 [U] Ruby: Denial of Service ( dev-lang/ruby )
200906-03 [U] phpMyAdmin: Multiple vulnerabilities ( dev-db/phpmyadmin )
200906-04 [U] Apache Tomcat JK Connector: Information disclosure ( www-apache/mod_jk )
200906-05 [U] Wireshark: Multiple vulnerabilities ( net-analyzer/wireshark )
200907-01 [U] libwmf: User-assisted execution of arbitrary code ( media-libs/libwmf )
200907-02 [U] ModSecurity: Denial of Service ( www-apache/mod_security )
200907-03 [U] APR Utility Library: Multiple vulnerabilities ( dev-libs/apr-util )
200907-04 [U] Apache: Multiple vulnerabilities ( www-servers/apache )
200907-05 [U] git: git-daemon Denial of Service ( dev-util/git )
200907-06 [U] Adobe Reader: User-assisted execution of arbitrary code ( app-text/acroread )
200907-07 [U] ModPlug: User-assisted execution of arbitrary code ( media-libs/gst-plugins-bad  media-libs/libmodplug )
200907-08 [U] Multiple Ralink wireless drivers: Execution of arbitrary code ( net-wireless/ralink-rt61  net-wireless/rt2570  net-wireless/rt61 ... )
200907-09 [U] Cyrus-SASL: Execution of arbitrary code ( dev-libs/cyrus-sasl )
200907-10 [U] Syslog-ng: Chroot escape ( app-admin/syslog-ng )
200907-11 [U] GStreamer plug-ins: User-assisted execution of arbitrary code ( media-libs/gst-plugins-base  media-plugins/gst-plugins-libpng  media-libs/gst-plugins-good )
200907-12 [U] ISC DHCP: dhcpclient Remote execution of arbitrary code ( net-misc/dhcp )
200907-13 [U] PulseAudio: Local privilege escalation ( media-sound/pulseaudio )
200907-14 [U] Rasterbar libtorrent: Directory traversal ( net-p2p/deluge  net-libs/rb_libtorrent )
200907-15 [U] Nagios: Execution of arbitrary code ( net-analyzer/nagios-core )
200907-16 [U] Python: Integer overflows ( dev-lang/python )
200908-01 [U] OpenSC: Multiple vulnerabilities ( dev-libs/opensc )
200908-02 [U] BIND: Denial of Service ( net-dns/bind )
200908-03 [U] libTIFF: User-assisted execution of arbitrary code ( media-libs/tiff )
200908-04 [U] Adobe products: Multiple vulnerabilities ( www-plugins/adobe-flash  app-text/acroread )
200908-05 [U] Subversion: Remote execution of arbitrary code ( dev-util/subversion )
200908-06 [U] CDF: User-assisted execution of arbitrary code ( sci-libs/cdf )
200908-07 [U] Perl Compress::Raw modules: Denial of Service ( perl-core/Compress-Raw-Zlib  perl-core/Compress-Raw-Bzip2 )
200908-08 [U] ISC DHCP: dhcpd Denial of Service ( net-misc/dhcp )
200908-09 [U] DokuWiki: Local file inclusion ( www-apps/dokuwiki )
200908-10 [U] Dillo: User-assisted execution of arbitrary code ( www-client/dillo )
200909-01 [U] Linux-PAM: Privilege escalation ( sys-libs/pam )
200909-02 [U] libvorbis: User-assisted execution of arbitrary code ( media-libs/libvorbis )
200909-03 [U] Apache Portable Runtime, APR Utility Library: Execution of arbitrary code ( dev-libs/apr  dev-libs/apr-util )
200909-04 [U] Clam AntiVirus: Multiple vulnerabilities ( app-antivirus/clamav )
200909-05 [U] Openswan: Denial of Service ( net-misc/openswan )
200909-06 [U] aMule: Parameter injection ( net-p2p/amule )
200909-07 [U] TkMan: Insecure temporary file usage ( app-text/tkman )
200909-08 [U] C* music player: Insecure temporary file usage ( media-sound/cmus )
200909-09 [U] Screenie: Insecure temporary file usage ( app-misc/screenie )
200909-10 [U] LMBench: Insecure temporary file usage ( app-benchmarks/lmbench )
200909-11 [U] GCC-XML: Insecure temporary file usage ( dev-cpp/gccxml )
200909-12 [U] HTMLDOC: User-assisted execution of arbitrary code ( app-text/htmldoc )
200909-13 [U] irssi: Execution of arbitrary code ( net-irc/irssi )
200909-14 [U] Horde: Multiple vulnerabilities ( www-apps/horde-passwd  www-apps/horde-imp  www-apps/horde )
200909-15 [U] Lynx: Arbitrary command execution ( www-client/lynx )
200909-16 [U] Wireshark: Denial of Service ( net-analyzer/wireshark )
200909-17 [U] ZNC: Directory traversal ( net-irc/znc )
200909-18 [U] nginx: Remote execution of arbitrary code ( www-servers/nginx )
200909-19 [U] Dnsmasq: Multiple vulnerabilities ( net-dns/dnsmasq )
200909-20 [U] cURL: Certificate validation error ( net-misc/curl )
200910-01 [U] Wget: Certificate validation error ( net-misc/wget )
200910-02 [U] Pidgin: Multiple vulnerabilities ( net-im/pidgin )
200910-03 [U] Adobe Reader: Multiple vulnerabilities ( app-text/acroread )
200911-01 [U] Horde: Multiple vulnerabilities ( www-apps/horde-groupware  www-apps/horde-webmail  www-apps/horde )
200911-02 [U] Sun JDK/JRE: Multiple vulnerabilites ( dev-java/sun-jre-bin  app-emulation/emul-linux-x86-java  dev-java/blackdown-jdk ... )
200911-03 [U] UW IMAP toolkit: Multiple vulnerabilities ( net-libs/c-client  net-mail/uw-imap )
200911-04 [U] dstat: Untrusted search path ( sys-apps/dstat )
200911-05 [U] Wireshark: Multiple vulnerabilities ( net-analyzer/wireshark )
200911-06 [U] PEAR Net_Traceroute: Command injection ( dev-php/PEAR-Net_Traceroute )
200912-01 [U] OpenSSL: Multiple vulnerabilities ( dev-libs/openssl )
200912-02 [U] Ruby on Rails: Multiple vulnerabilities ( dev-ruby/rails )
201001-01 [U] NTP: Denial of Service ( net-misc/ntp )
201001-02 [U] Adobe Flash Player: Multiple vulnerabilities ( www-plugins/adobe-flash )
201001-03 [U] PHP: Multiple vulnerabilities ( dev-lang/php )
201001-04 [U] VirtualBox: Multiple vulnerabilities ( app-emulation/virtualbox-ose  app-emulation/virtualbox-guest-additions  app-emulation/virtualbox-ose-additions ... )
201001-05 [U] net-snmp: Authorization bypass ( net-analyzer/net-snmp )
201001-06 [U] aria2: Multiple vulnerabilities ( net-misc/aria2 )
201001-07 [U] Blender: Untrusted search path ( media-gfx/blender )
201001-08 [U] SquirrelMail: Multiple vulnerabilities ( mail-client/squirrelmail )
201001-09 [U] Ruby: Terminal Control Character Injection ( dev-lang/ruby )
201003-01 [U] sudo: Privilege escalation ( app-admin/sudo )
201006-01 [U] FreeType 1: User-assisted execution of arbitrary code ( media-libs/freetype )
201006-02 [U] CamlImages: User-assisted execution of arbitrary code ( dev-ml/camlimages )
201006-03 [U] ImageMagick: User-assisted execution of arbitrary code ( media-gfx/imagemagick )
201006-04 [U] xine-lib: User-assisted execution of arbitrary code ( media-libs/xine-lib )
201006-05 [U] Wireshark: Multiple vulnerabilities ( net-analyzer/wireshark )
201006-06 [U] Transmission: Multiple vulnerabilities ( net-p2p/transmission )
201006-07 [U] SILC: Multiple vulnerabilities ( net-im/silc-toolkit  net-im/silc-client )
201006-08 [U] nano: Multiple vulnerabilities ( app-editors/nano )
201006-09 [U] sudo: Privilege escalation ( app-admin/sudo )
201006-10 [U] multipath-tools: World-writeable socket ( sys-fs/multipath-tools )
201006-11 [U] BIND: Multiple vulnerabilities ( net-dns/bind )
201006-12 [U] Fetchmail: Multiple vulnerabilities ( net-mail/fetchmail )
201006-13 [U] Smarty: Multiple vulnerabilities ( dev-php/smarty )
201006-14 [U] Newt: User-assisted execution of arbitrary code ( dev-libs/newt )
201006-15 [U] XEmacs: User-assisted execution of arbitrary code ( app-editors/xemacs )
201006-16 [U] GD: User-assisted execution of arbitrary code ( media-libs/gd )
201006-17 [U] lighttpd: Denial of Service ( www-servers/lighttpd )
201006-18 [U] Oracle JRE/JDK: Multiple vulnerabilities ( dev-java/sun-jre-bin  app-emulation/emul-linux-x86-java  dev-java/sun-jdk )
201006-19 [U] Bugzilla: Multiple vulnerabilities ( www-apps/bugzilla )
201006-20 [U] Asterisk: Multiple vulnerabilities ( net-misc/asterisk )
201006-21 [U] UnrealIRCd: Multiple vulnerabilities ( net-irc/unrealircd )
201009-01 [U] wxGTK: User-assisted execution of arbitrary code ( x11-libs/wxGTK )
201009-02 [U] Maildrop: privilege escalation ( mail-filter/maildrop )
201009-03 [U] sudo: Privilege Escalation ( app-admin/sudo )
201009-04 [U] SARG: User-assisted execution of arbitrary code ( net-analyzer/sarg )
201009-05 [U] Adobe Reader: Multiple vulnerabilities ( app-text/acroread )
201009-06 [U] Clam AntiVirus: Multiple vulnerabilities ( app-antivirus/clamav )
201009-07 [U] libxml2: Denial of Service ( dev-libs/libxml2 )
201009-08 [U] python-updater: Untrusted search path ( app-admin/python-updater )
201009-09 [U] fence: Multiple symlink vulnerabilites ( sys-cluster/fence )
201010-01 [U] Libpng: Multiple vulnerabilities ( media-libs/libpng )
201011-01 [U] GNU C library: Multiple vulnerabilities ( sys-libs/glibc )
201012-01 [U] Chromium: Multiple vulnerabilities ( www-client/chromium )
201101-01 [U] gif2png: User-assisted execution of arbitrary code ( media-gfx/gif2png )
201101-02 [U] Tor: Remote heap-based buffer overflow ( net-misc/tor )
201101-03 [U] libvpx: User-assisted execution of arbitrary code ( media-libs/libvpx )
201101-04 [U] aria2: Directory traversal ( net-misc/aria2 )
201101-05 [U] OpenAFS: Arbitrary code execution ( net-fs/openafs )
201101-06 [U] IO::Socket::SSL: Certificate validation error ( dev-perl/IO-Socket-SSL )
201101-07 [U] Prewikka: password disclosure ( net-analyzer/prewikka )
201101-08 [U] Adobe Reader: Multiple vulnerabilities ( app-text/acroread )
201101-09 [U] Adobe Flash Player: Multiple vulnerabilities ( www-plugins/adobe-flash )

