Gentoo Linux Security Advisory 201512-11 – A buffer overflow in Firebird might allow remote attackers to execute arbitrary code. Versions less than 2.5.3.26780.0-r3 are affected.

Gentoo Linux Security Advisory 201512-12 – Data validation in KDE Systemsettings could lead to local privilege escalation. Versions less than 4.11.13-r1 are affected.

Gentoo Linux Security Advisory 201512-13 – Multiple vulnerabilities have been found in InspIRCd, the worst allowing remote attackers to execute arbitrary code. Versions less than 2.0.20 are affected.

Ganeti, an open source virtualization manager, suffers from multiple issues in its RESTful control interface (RAPI). The distributed replicated storage (DRBD) secret is leaked by the RAPI interface when job results are requested. Leveraging on the knowledge of this secret, a malicious user who had already gained access to the storage network of the cluster can retrieve instance data more easily and reliably. The RAPI interface is also vulnerable to a denial of service condition, triggered via SSL parameter renegotiation issued by a malicious client. The condition leads to resource exhaustion on the master node. Many versions are affected.

Joomla versions 1.5.x through 3.4.5 object injection exploit that allows for code execution and more. Written in golang.