Cockpit CMS versions 0.4.4 through 0.5.5 suffer from a server-side request forgery vulnerability.
877fb3147fad9053c21d2ae76bcbba82752af4be9b3e9a70fa171c8a6b4a756e
Debian Linux Security Advisory 4181-1 - Andrea Basile discovered that the 'archive' plugin in roundcube, a skinnable AJAX based webmail solution for IMAP servers, does not properly sanitize a user-controlled parameter, allowing a remote attacker to inject arbitrary IMAP commands and perform malicious actions.
7003e22c47aad0f29075ef56927b0bb2fd415a5a734d9b6f25a33893ba5a6af7
Debian Linux Security Advisory 4182-1 - Several vulnerabilities have been discovered in the chromium web browser.
bf467922f499761124cd3e7e1500636dd40ac227780bc16080c337465230a2ad