GLSA 201612-21 (normal) - SQLite: Multiple vulnerabilities
Multiple vulnerabilities were found in SQLite, the worst of which may allow execution of arbitrary code.

GLSA 201612-20 (normal) - jq: Buffer overflow
A buffer overflow in jq might allow remote attackers to execute arbitrary code.

GLSA 201612-19 (normal) - Mercurial: Multiple vulnerabilities
Multiple vulnerabilities have been found in Mercurial, the worst of which could lead to the remote execution of arbitrary code.

GLSA 201612-18 (normal) - OpenSSH: Multiple vulnerabilities
Multiple vulnerabilities have been found in OpenSSH, the worst of which allows remote attackers to cause Denial of Service.

GLSA 201612-17 (normal) - PECL HTTP: Remote execution of arbitrary code
A buffer overflow in PECL HTTP might allow remote attackers to execute arbitrary code.

GLSA 201612-16 (normal) - OpenSSL: Multiple vulnerabilities
Multiple vulnerabilities have been found in OpenSSL, the worst of which allows attackers to conduct a time based side-channel attack.

GLSA 201612-15 (normal) - ARJ: Multiple vulnerabilities
Multiple vulnerabilities have been found in ARJ, the worst of which may allow attackers to execute arbitrary code.

GLSA 201612-14 (normal) - util-linux: Arbitrary code execution
A vulnerability was discovered in util-linux, which could potentially lead to the execution of arbitrary code.

GLSA 201612-13 (normal) - nghttp2: Denial of Service
Nghttp2 is vulnerable to a Denial of Service attack.

GLSA 201612-12 (normal) - Patch: Denial of Service
Patch is vulnerable to a locally generated Denial of Service condition.

GLSA 201612-11 (normal) - Chromium: Multiple vulnerabilities
Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

GLSA 201612-10 (normal) - libvirt: Directory traversal
Libvirt is vulnerable to directory traversal when using Access Control Lists (ACL).

GLSA 201612-09 (normal) - GD: Multiple vulnerabilities
Multiple vulnerabilities have been found in GD, the worst of which allows remote attackers to execute arbitrary code.

GLSA 201612-08 (normal) - LinuxCIFS utils: Buffer overflow
A vulnerability in LinuxCIFS utils' "cifscreds" PAM module might allow remote attackers to have an unspecified impact via unknown vectors.

GLSA 201612-07 (normal) - dpkg: Arbitrary code execution
A vulnerability was discovered in dpkg which could potentially lead to arbitrary code execution.

GLSA 201612-06 (normal) - nghttp2: Heap-use-after-free
Nghttp2 is vulnerable to a heap-use-after-free flaw in idle stream handling code.

GLSA 201612-05 (normal) - Pygments: Arbitrary code execution
Pygments is vulnerable to remote code execution if an attacker is allowed to specify the font name.

GLSA 201612-04 (normal) - BusyBox: Multiple vulnerabilities
Multiple vulnerabilities have been found in BusyBox, the worst of which allows remote attackers to execute arbitrary code.

GLSA 201612-03 (normal) - libsndfile: Multiple vulnerabilities
Multiple vulnerabilities have been found in libsndfile, the worst of which might allow remote attackers to execute arbitrary code.

GLSA 201612-02 (normal) - DavFS2: Local privilege escalation
A vulnerability in DavFS2 allows local users to gain root privileges.