Two core fixes and three ports fixes, with problems in timed, rwhod and cfengine, to name a few. The good news is, you can avoid it by using DenyFilter. We lead off with general advisories and exploit code, then move to vendor advisories.
Most items appear in alphabetical order.
The long strings of hex in front of package names are MD5 signatures. Two actions will occur. I rebooted the machine since I didn't have time for it to fully recover. And this was just one session issuing the attack. This releases supports cryptography with optional modules.