It was discovered that Libgcrypt is prone to a local side-channel attackallowing recovery of ECDSA private keys.
More info:
https://www.debian.org/security/2018/dsa-4231
Multiple vulnerabilities were discovered in the Lua subsystem of Redis, apersistent key-value database, which could result in denial of service.
More info:
https://www.debian.org/security/2018/dsa-4230
Two vulnerabilities were discovered in strongSwan, an IKE/IPsec suite.
More info:
https://www.debian.org/security/2018/dsa-4229