OL CVE Issue Summary:

When an account is set for a non-login user in /etc/passwd, it is not considered disabled by sudo.

The newly introduced runas_check_shell sudoers setting can be used to require that the run as user have a shell that's listed in /etc/shells. Users such as "bin", "nobody", etc, do not have a valid shell, and this option prevents commands from being run as those users.

OL CVE Issue Summary :

A flaw was found in xmlBuildQName(), where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. 
This issue can result in memory corruption or a denial of service when processing crafted input.

OL CVE Issue Summary:

xinclude.c:xmlXIncludeDoProcess() triggers a heap-use-after-free with a crafted XML payload.