We lead off with general advisories and exploit code, then move to vendor advisories.
Most items appear in alphabetical order.
The long strings of hex in front of package names are MD5 signatures. Unfortunately this fix breaks the imap module under some circumstances due to its interaction with the WU c-client library which PHP uses to implement the imap protocol. A number of WebMail systems are likely to be vulnerable to this issue. Additionally, the c-client library uses callbacks into PHP in order to ascertain the username and password for the requested connection. However, the c-client library may still call the callback function to retrieve the username and password outside of this call, which then returns garbage data.