Apache Camel’s XStream usage is vulnerable to remote code execution attacks.

Debian Linux Security Advisory 3463-1 – It was discovered that insecure handling of dialback keys may allow a malicious XMPP server to impersonate another server.

Debian Linux Security Advisory 3462-1 – Two vulnerabilities were fixed in radicale, a CardDAV/CalDAV server.

Debian Linux Security Advisory 3461-1 – Mateusz Jurczyk discovered multiple vulnerabilities in Freetype. Opening malformed fonts may result in denial of service or the execution of arbitrary code.

Debian Linux Security Advisory 3464-1 – Multiple security issues have been discovered in the Rails on Rails web application development framework, which may result in denial of service, cross-site scripting, information disclosure or bypass of input validation.