Resolved Bugs
1153938 – drupal7-ckeditor-1.16 is available<br
## [7.x-1.16](https://www.drupal.org/node/2356563)
* [SA-CONTRIB-2014-098 – CKEditor – Cross Site Scripting (XSS)](https://www.drupal.org/node/2357029)

Resolved Bugs
1064098 – CVE-2014-1947 ImageMagick: PSD writing layer name buffer overflow (“L%02ld”)
1083082 – CVE-2014-1947 CVE-2014-2030 ImageMagick, GraphicsMagick: buffer overflow when handling PSD images [fedora-all]
1161869 – GraphicsMagick-1.3.20-3 requires jbigkit-libs and libwepb<br
Fix for psd security issue, and upgrade path to f21.

QPID-6218: Prevent the broker from access external resources.

Resolved Bugs
1161360 – oath-toolkit: potential NULL pointer dereference in OATH PAM module
1161363 – oath-toolkit: potential NULL pointer dereference in OATH PAM module [fedora-all]<br
This is an update adding null check to strdup calls.

Resolved Bugs
1161360 – oath-toolkit: potential NULL pointer dereference in OATH PAM module
1161363 – oath-toolkit: potential NULL pointer dereference in OATH PAM module [fedora-all]<br
This is an update adding null check to strdup calls.

Resolved Bugs
1160540 – python-requests-kerberos: failure to handle mutual authentication
1160545 – python-requests-kerberos: failure to handle mutual authentication [fedora-all]<br
Security fix for CVE-2014-8650: requests-kerberos does not perform mutual authentication

Resolved Bugs
1160540 – python-requests-kerberos: failure to handle mutual authentication
1160545 – python-requests-kerberos: failure to handle mutual authentication [fedora-all]<br
Security fix for CVE-2014-8650: requests-kerberos does not perform mutual authentication

Resolved Bugs
1160540 – python-requests-kerberos: failure to handle mutual authentication
1160547 – python-requests-kerberos: failure to handle mutual authentication [epel-7]<br
Security fix for CVE-2014-8650: requests-kerberos does not perform mutual authentication

Resolved Bugs
1161360 – oath-toolkit: potential NULL pointer dereference in OATH PAM module
1161365 – oath-toolkit: potential NULL pointer dereference in OATH PAM module [epel-7]<br
This is an update that adds null check to strdup calls.

Resolved Bugs
838162 – CVE-2012-3381 sblim-sfcb: insecure LD_LIBRARY_PATH usage [epel-5]<br
Fix insecure LD_LIBRARY_PATH usage.