Arch Linux安全漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. Arch Linux suffers from a security vulnerability that allows partial display of files not accessed by the user...

Arch Linux输入验证错误漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. Arch Linux suffers from an input validation error vulnerability that can be exploited by an attacker to pass specially designed data to an application, trigger a...

[ASA-202106-12] redis: arbitrary code execution

Arch Linux Security Advisory ASA-202106-12 ========================================== Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-32625 Package : redis Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2022 Summary ======= The package redis before versi...

[ASA-202106-16] pam-u2f: authentication bypass

Arch Linux Security Advisory ASA-202106-16 ========================================== Severity: Medium Date : 2021-06-01 CVE-ID : CVE-2021-31924 Package : pam-u2f Type : authentication bypass Remote : No Link : https://security.archlinux.org/AVG-2001 Summary ======= The package pam-u2f before...

[ASA-202105-19] matrix-synapse: denial of service

Arch Linux Security Advisory ASA-202105-19 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-29471 Package : matrix-synapse Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1943 Summary ======= The package matrix-synapse...

python38:3.8 security update

python38 3.8.6-3 - Security fix for CVE-2021-3177 Resolves: rhbz1919161 3.8.6-2 - Add support for upstream architecture names https://fedoraproject.org/wiki/Changes/PythonUpstreamArchitectureNames Resolves: rhbz1868006 3.8.6-1 - Update to 3.8.6 - Security fix for CVE-2020-26116 python-requests...

The vulnerability in the components arch/*/xen/p2m.c and drivers/xen/gntdev.c of the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability in the components arch//xen/p2m.c and drivers/xen/gntdev.c of Linux operating systems is related to errors in grant matching in PV mode. Exploiting this vulnerability can allow an attacker to cause service failures...

[ASA-202105-15] python-babel: arbitrary code execution

Arch Linux Security Advisory ASA-202105-15 ========================================== Severity: Medium Date : 2021-05-19 CVE-ID : CVE-2021-20095 Package : python-babel Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1894 Summary ======= The package python-bab...

[ASA-202105-10] squid: denial of service

Arch Linux Security Advisory ASA-202105-10 ========================================== Severity: High Date : 2021-05-19 CVE-ID : CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 Package : squid Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1949 Summary ======= The...

[ASA-202105-2] python-flask-security-too: cross-site request forgery

Arch Linux Security Advisory ASA-202105-2 ========================================= Severity: High Date : 2021-05-19 CVE-ID : CVE-2021-21241 Package : python-flask-security-too Type : cross-site request forgery Remote : Yes Link : https://security.archlinux.org/AVG-1434 Summary ======= The packag...

[ASA-202105-5] firefox: arbitrary code execution

Arch Linux Security Advisory ASA-202105-5 ========================================= Severity: High Date : 2021-05-19 CVE-ID : CVE-2021-29952 Package : firefox Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1917 Summary ======= The package firefox before...

Arch Linux 缓冲区错误漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. A buffer error vulnerability exists in Arch Linux. The vulnerability originates when a networked system or product performs an operation in memory without proper...

Arch Linux 缓冲区错误漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. There are security vulnerabilities in Arch Linux...

Arch Linux 缓冲区错误漏洞

DjVuLibre is an open source implementation of the DjVu computer file format, which includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities.DjVuLibre suffers from a denial-of-service vulnerability that could be exploited by an attacker to cause an application to...

PT-2021-3386

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.12.11 Description An Out-of-Bounds Read issue was discovered in the arch/arm/mach-footbridge/personal-pci.c component of the Linux kernel. This issue is caused by the lack of a check for a value that shouldn't b...

[ASA-202104-4] thunderbird: multiple issues

Arch Linux Security Advisory ASA-202104-4 ========================================= Severity: High Date : 2021-04-29 CVE-ID : CVE-2021-23961 CVE-2021-23994 CVE-2021-23995 CVE-2021-23998 CVE-2021-23999 CVE-2021-24002 CVE-2021-29946 CVE-2021-29948 Package : thunderbird Type : multiple issues Remote...

Fedora 33 : kernel (2021-e71c033f88)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e71c033f88 advisory. - BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code...

CVE-2021-29154

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpfjitcomp.c and arch/x86/net/bpfjitcomp32.c...

CVE-2021-29154: Improper Neutralization of Special Elements used in a Command

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpfjitcomp.c and arch/x86/net/bpfjitcomp32.c...

kernel security, bug fix, and enhancement update

4.18.0-240.22.13.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...