Insufficient checks in Horde may allow a remote attacker to bypass security restrictions.

Multiple vulnerabilities were discovered in Gallery.

Several integer overflow vulnerabilities have been reported in Gnumeric, possibly resulting in user-assisted execution of arbitrary code.

Multiple vulnerabilities in scponly allow authenticated users to bypass security restrictions.

"New kernel packages are available for Slackware 12.0, and -current to fix a local root exploit."

"New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. New seamonkey updates are available for Slackware 11.0, 12.0, and -current to address similar issues."

A vulnerability in pulseaudio may allow a local user to execute actions with escalated privileges.

"When a process opens a file (and other file system objects, such as directories), it specifies access flags indicating its intent to read, write, or perform other operations. These flags are checked against file system permissions, and then stored in the resulting file descriptor to validate future operations against."

"There is an improper reference to a data structure in the processing of IPsec packets, which can result in a NULL pointer being dereferenced."

Two vulnerabilities have been reported in Boost, each one possibly resulting in a Denial of Service.

"New httpd packages are available for Slackware 12.0, and -current to fix security issues."

"New php-4.4.8 packages are available for Slackware 10.2 and 11.0 to fix security issues."

"New apache 1.3.41 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues."

Multiple vulnerabilities have been discovered in the X.Org X server and Xfont library, allowing for a local privilege escalation and arbitrary code execution.

Multiple vulnerabilities have been discovered in TikiWiki, some of them having unknown impact.

CherryPy is vulnerable to a directory traversal that could allow attackers to read and write arbitrary files.

xine-lib is vulnerable to multiple heap-based buffer overflows when processing RTSP streams.

ngIRCd does not properly sanitize commands sent by users, allowing for a Denial of Service.

Blam doesn't properly handle environment variables, potentially allowing a local attacker to execute arbitrary code.

PostgreSQL contains multiple vulnerabilities that could result in privilege escalation or a Denial of Service.