An interesting week. We lead off with general advisories and exploit code, then move to vendor advisories.
Most items appear in alphabetical order.
The long strings of hex in front of package names are MD5 signatures. On the flip side, a number of potential vulnerabilities have been discovered in the SSH protocol. The countermeasures introduced in earlier OpenSSH-2.5.x versions caused interoperability problems with some other implementations. PreferredAuthentications allows client to specify the order in which authentication methods are tried. OpenSSH should now be significantly faster when connecting use SSH protocol 2.