a/kernel-modules-kirkwood-3.9.10_kirkwood-arm-1.tgz

a/kernel-modules-tegra-3.9.10_tegra-arm-1.tgz

a/kernel-modules-versatile-3.9.10_versatile-arm-1.tgz

a/kernel_kirkwood-3.9.10-arm-1.tgz

a/kernel_tegra-3.9.10-arm-1.tgz

a/kernel_versatile-3.9.10-arm-1.tgz

a/mtd-utils-170713-arm-1.tgz

a/u-boot-tools-2013.04-arm-1.tgz

ap/ddrescue-1.17-arm-1.tgz

ap/mc-4.8.9-arm-1.tgz

k/kernel-source-3.9.10-arm-1.tgz

n/php-5.4.17-arm-1.tgz
This update fixes an issue where XML in PHP does not properly consider
parsing depth, which allows remote attackers to cause a denial of service
(heap memory corruption) or possibly have unspecified other impact via a
crafted document that is processed by the xml_parse_into_struct function.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4113
(* Security fix *)

kernels/*

n/cyrus-sasl-2.1.23-arm-4.tgz
Patched for new glibc crypt(). Thanks to mancha.

isolinux/*