Libtasn1 could be made to crash if it received specially crafted network traffic.
Comment
Atril could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in OpenSSH.
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enabled (disabled by default).
Bing Shi reported a flaw in GnuTLS, a library implementing the TLS and SSL protocols. Inefficient processing of certificates containing numerous names or name constraints may result in a denial of service.