Marked PIL and Pillow vulnerable.
Marked libgcrypt vulnerable.
Marked procmail vulnerable.
Marked eglibc vulnerable.
Marked gpgme maybe vulnerable.
Marked OpenJDK maybe vulnerable.
Marked libav maybe vulnerable.
Marked ffmpeg vulnerable and apache httpd 2.2 maybe vulnerable.
Note on apache httpd vulnerabilities.
Marked lzo maybe vulnerable.
Marked Firefox 13 maybe vulnerable.
Marked nss as maybe vulnerable.
Marked krb5 vulnerable.
A note on eglibc's vulnerablility.
libgcrypt actually not vulnerable.
krb5: Update to 12.2.2.

Fixes security vulnerabilities CVE-2014-4341, CVE-2014-4342,
CVE-2014-4343, CVE-2014-4344 and CVE-2014-4345.
lzo 2.08 not vulnerable to CVE-2014-4607
Change the way I mark apache-httpd vulnerable.