[ASA-202102-39] ipmitool: arbitrary code execution

Arch Linux Security Advisory ASA-202102-39 ========================================== Severity: High Date : 2021-02-27 CVE-ID : CVE-2020-5208 Package : ipmitool Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1596 Summary ======= The package ipmitool before...

[ASA-202102-37] python: multiple issues

Arch Linux Security Advisory ASA-202102-37 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2021-3177 CVE-2021-23336 Package : python Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1465 Summary ======= The package python...

[ASA-202102-42] openssl: multiple issues

Arch Linux Security Advisory ASA-202102-42 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2021-23840 CVE-2021-23841 Package : openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1581 Summary ======= The package openssl...

ConnMan 1.39 Information Leakage Vulnerability

Arch Linux ConnMan 1.39 is an application from the Arch Linux community in the United States. It provides Intel's modular network connection manager. An information leakage vulnerability exists in versions prior to ConnMan 1.39, which stems from the gdhcp feature that can lead to leakage of stack...

ConnMan Buffer Error Vulnerability

Arch Linux ConnMan 1.39 is an application from the Arch Linux community in the United States. It provides Intel's Modular Network Connection Manager. A buffer error vulnerability exists in versions prior to ConnMan 1.39, which can be exploited to cause remote code execution...

[ASA-202102-9] ansible: information disclosure

Arch Linux Security Advisory ASA-202102-9 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 Package : ansible Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1437 Summary ======= T...

[ASA-202102-8] opendoas: privilege escalation

Arch Linux Security Advisory ASA-202102-8 ========================================= Severity: High Date : 2021-02-06 CVE-ID : CVE-2019-25016 Package : opendoas Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1504 Summary ======= The package opendoas before versio...

[ASA-202101-44] home-assistant: information disclosure

Arch Linux Security Advisory ASA-202101-44 ========================================== Severity: Medium Date : 2021-01-29 CVE-ID : CVE-2021-3152 Package : home-assistant Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1488 Summary ======= The package...

[ASA-202101-42] libvirt: arbitrary code execution

Arch Linux Security Advisory ASA-202101-42 ========================================== Severity: Critical Date : 2021-01-29 CVE-ID : CVE-2020-25637 Package : libvirt Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1240 Summary ======= The package libvirt befor...

[ASA-202101-40] flatpak: sandbox escape

Arch Linux Security Advisory ASA-202101-40 ========================================== Severity: High Date : 2021-01-20 CVE-ID : CVE-2021-21261 Package : flatpak Type : sandbox escape Remote : No Link : https://security.archlinux.org/AVG-1454 Summary ======= The package flatpak before version...

[ASA-202101-27] go: multiple issues

Arch Linux Security Advisory ASA-202101-27 ========================================== Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2021-3114 CVE-2021-3115 Package : go Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1481 Summary ======= The package go before versio...

[ASA-202101-26] gobby: denial of service

Arch Linux Security Advisory ASA-202101-26 ========================================== Severity: Low Date : 2021-01-20 CVE-ID : CVE-2020-35450 Package : gobby Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1383 Summary ======= The package gobby before version...

[ASA-202101-41] jenkins: multiple issues

Arch Linux Security Advisory ASA-202101-41 ========================================== Severity: High Date : 2021-01-20 CVE-ID : CVE-2021-21602 CVE-2021-21603 CVE-2021-21604 CVE-2021-21605 CVE-2021-21606 CVE-2021-21607 CVE-2021-21608 CVE-2021-21609 CVE-2021-21610 CVE-2021-21611 Package : jenkins...

[ASA-202101-28] openvswitch: multiple issues

Arch Linux Security Advisory ASA-202101-28 ========================================== Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2015-8011 CVE-2020-27827 Package : openvswitch Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1456 Summary ======= The package...

K55 - Linux X86_64 Process Injection Utility | Manipulate Processes With Customized Payloads

pronounced: "kay fifty-five" The K55 payload injection tool is used for injecting x8664 shellcode payloads into running processes. The utility was developed using modern C++11 techniques as well as some traditional C linux functions like ptrace. The shellcode spawned in the target process is 27...

[ASA-202101-15] nodejs-lts-fermium: multiple issues

Arch Linux Security Advisory ASA-202101-15 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-8265 CVE-2020-8287 Package : nodejs-lts-fermium Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1401 Summary ======= The package...

[ASA-202101-11] python-pillow: multiple issues

Arch Linux Security Advisory ASA-202101-11 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-35653 CVE-2020-35654 CVE-2020-35655 Package : python-pillow Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1438 Summary =======...

[ASA-202101-23] wavpack: arbitrary code execution

Arch Linux Security Advisory ASA-202101-23 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-35738 Package : wavpack Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1387 Summary ======= The package wavpack before...

[ASA-202012-14] chromium: multiple issues

Arch Linux Security Advisory ASA-202012-14 ========================================== Severity: High Date : 2020-12-09 CVE-ID : CVE-2020-16037 CVE-2020-16038 CVE-2020-16039 CVE-2020-16040 CVE-2020-16041 CVE-2020-16042 Package : chromium Type : multiple issues Remote : Yes Link :...

[ASA-202012-12] blueman: privilege escalation

Arch Linux Security Advisory ASA-202012-12 ========================================== Severity: High Date : 2020-12-09 CVE-ID : CVE-2020-15238 Package : blueman Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1259 Summary ======= The package blueman before versio...