[ASA-201712-10] tor: multiple issues

Arch Linux Security Advisory ASA-201712-10 ========================================== Severity: High Date : 2017-12-16 CVE-ID : CVE-2017-8819 CVE-2017-8820 CVE-2017-8822 CVE-2017-8823 Package : tor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-539 Summary ======= T...

[ASA-201712-1] samba: multiple issues

Arch Linux Security Advisory ASA-201712-1 ========================================= Severity: High Date : 2017-12-02 CVE-ID : CVE-2017-14746 CVE-2017-15275 Package : samba Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-535 Summary ======= The package samba before...

[ASA-201711-10] libcurl-compat: information disclosure

Arch Linux Security Advisory ASA-201711-10 ========================================== Severity: Medium Date : 2017-11-02 CVE-ID : CVE-2017-1000257 Package : libcurl-compat Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-463 Summary ======= The package...

[ASA-201710-28] musl: arbitrary code execution

Arch Linux Security Advisory ASA-201710-28 ========================================== Severity: Critical Date : 2017-10-21 CVE-ID : CVE-2017-15650 Package : musl Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-457 Summary ======= The package musl before...

[ASA-201710-21] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-21 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : lib32-flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-450 Summary ======= The package...

[ASA-201710-15] go: arbitrary command execution

Arch Linux Security Advisory ASA-201710-15 ========================================== Severity: High Date : 2017-10-12 CVE-ID : CVE-2017-15041 Package : go Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-442 Summary ======= The package go before version...

[ASA-201710-7] libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-201710-7 ========================================= Severity: Medium Date : 2017-10-05 CVE-ID : CVE-2017-1000099 CVE-2017-1000100 CVE-2017-1000254 Package : libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-389 Summary...

[ASA-201709-9] linux: arbitrary code execution

Arch Linux Security Advisory ASA-201709-9 ========================================= Severity: High Date : 2017-09-15 CVE-ID : CVE-2017-1000251 Package : linux Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-392 Summary ======= The package linux before versio...

[ASA-201708-9] audiofile: multiple issues

Arch Linux Security Advisory ASA-201708-9 ========================================= Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838...

[ASA-201708-13] strongswan: denial of service

Arch Linux Security Advisory ASA-201708-13 ========================================== Severity: Low Date : 2017-08-14 CVE-ID : CVE-2017-11185 Package : strongswan Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-382 Summary ======= The package strongswan before...

[ASA-201708-6] git: arbitrary command execution

Arch Linux Security Advisory ASA-201708-6 ========================================= Severity: Critical Date : 2017-08-12 CVE-ID : CVE-2017-1000117 Package : git Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-377 Summary ======= The package git before...

[ASA-201707-10] flashplugin: multiple issues

Arch Linux Security Advisory ASA-201707-10 ========================================== Severity: Critical Date : 2017-07-11 CVE-ID : CVE-2017-3080 CVE-2017-3099 CVE-2017-3100 Package : flashplugin Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-344 Summary ======= The...

[ASA-201705-11] smb4k: privilege escalation

Arch Linux Security Advisory ASA-201705-11 ========================================== Severity: High Date : 2017-05-10 CVE-ID : CVE-2017-8849 Package : smb4k Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-268 Summary ======= The package smb4k before version...

[ASA-201705-3] ghostscript: arbitrary command execution

Arch Linux Security Advisory ASA-201705-3 ========================================= Severity: High Date : 2017-05-07 CVE-ID : CVE-2017-8291 Package : ghostscript Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-256 Summary ======= The package ghostscript...

[ASA-201703-19] chromium: arbitrary code execution

Arch Linux Security Advisory ASA-201703-19 ========================================== Severity: Critical Date : 2017-03-31 CVE-ID : CVE-2017-5052 CVE-2017-5053 CVE-2017-5054 CVE-2017-5055 CVE-2017-5056 Package : chromium Type : arbitrary code execution Remote : Yes Link :...

[ASA-201702-6] gst-plugins-ugly: denial of service

Arch Linux Security Advisory ASA-201702-6 ========================================= Severity: Low Date : 2017-02-03 CVE-ID : CVE-2017-5846 CVE-2017-5847 Package : gst-plugins-ugly Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-166 Summary ======= The package...

[ASA-201701-16] flashplugin: multiple issues

Arch Linux Security Advisory ASA-201701-16 ========================================== Severity: Critical Date : 2017-01-12 CVE-ID : CVE-2017-2925 CVE-2017-2926 CVE-2017-2927 CVE-2017-2928 CVE-2017-2930 CVE-2017-2931 CVE-2017-2932 CVE-2017-2933 CVE-2017-2934 CVE-2017-2935 CVE-2017-2936 CVE-2017-29...

[ASA-201701-9] lib32-curl: multiple issues

Arch Linux Security Advisory ASA-201701-9 ========================================= Severity: Medium Date : 2017-01-03 CVE-ID : CVE-2016-9586 CVE-2016-9594 Package : lib32-curl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-115 Summary ======= The package lib32-curl...

libdwarf: arbitrary code execution

CVE-2016-5027 denial of service Multiple NULL pointer dereference issues in several functions of libdwarf/dwarfleb.c, where leb128length was wrongly assumed non-NULL. - CVE-2016-5028 denial of service NULL pointer dereference issue in printframeinstbytes. - CVE-2016-5029 denial of service NULL...

latex2rtf: arbitrary code execution

A format string vulnerability was found in the CmdKeywords function, where the user-controlled variable 'keywords' is passed as a format argument to vnsprintf, when processing the \keywords command in a TeX file...

flashplugin: multiple issues

CVE-2015-8045 CVE-2015-8060 CVE-2015-8408 CVE-2015-8416 CVE-2015-8417 CVE-2015-8418 CVE-2015-8419 CVE-2015-8443 CVE-2015-8444 CVE-2015-8047 CVE-2015-8451 CVE-2015-8455 arbitrary code execution Memory corruption vulnerabilities have been discovered that could lead to arbitrary code execution. -...

vorbis-tools: denial of service

Buffer overflow in the aiffopen function in oggenc/audio.c allows local attackers to cause a denial of service crash via a crafted AIFF file...

ppp: denial of service

A buffer overflow has been found in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp. When the PID of the pppd process is greater than 65535, the computation of a start accounting message to the RADIUS server will crash the pppd server...

squid: weak certificate validation

The flaw allows remote servers to bypass client certificate validation. Some attackers may also be able to use valid certificates for one domain signed by a global Certificate Authority to abuse an unrelated domain. However, the bug is exploitable only if you have configured Squid to perform SSL...

libtasn1: stack overflow

A two-byte stack overflow has been found in the ASN.1 DER decoding logic of libtasn1...

vorbis-tools: denial of service

CVE-2014-9638 denial of service A flaw in oggenc allows attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero. - CVE-2014-9639 denial of service Integer overflow in oggenc allows attackers to cause a denial of service crash...

postgresql: multiple issues

CVE-2014-8161 information leak Some server error messages show the values of columns that violate a constraint, such as a unique constraint. If the user does not have SELECT privilege on all columns of the table, this could mean exposing values that the user should not be able to see. Adjust the...

glibc: command execution

The wordexp function could ignore the WRDENOCMD flag under certain input conditions resulting in the execution of a shell for command substitution when the application did not request it. The implementation now checks WRDENOCMD immediately before executing the shell and returns the error WRDECMDS...

aircrack-ng: multiple vulnerabilities

Nick Sampanis discovered the following vulnerabilities: - CVE-2014-8321 code execution and privilege escalation A stack overflow at airodump-ng gpstracker which may lead to code execution and privilege escalation. - CVE-2014-8322 remote code execution A length parameter inconsistency at aireplay...

[ASA-202009-13] brotli: denial of service

Arch Linux Security Advisory ASA-202009-13 ========================================== Severity: Medium Date : 2020-09-26 CVE-ID : CVE-2020-8927 Package : brotli Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1230 Summary ======= The package brotli before version...

[ASA-202009-6] chromium: multiple issues

Arch Linux Security Advisory ASA-202009-6 ========================================= Severity: High Date : 2020-09-09 CVE-ID : CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-6579 Package : chromium Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1225...

[ASA-202006-14] imagemagick: information disclosure

Arch Linux Security Advisory ASA-202006-14 ========================================== Severity: Medium Date : 2020-06-28 CVE-ID : CVE-2020-13902 Package : imagemagick Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1181 Summary ======= The package imagemagick...

[ASA-202005-8] keycloak: arbitrary code execution

Arch Linux Security Advisory ASA-202005-8 ========================================= Severity: High Date : 2020-05-16 CVE-ID : CVE-2020-1714 Package : keycloak Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1158 Summary ======= The package keycloak before...

[ASA-202004-15] chromium: arbitrary code execution

Arch Linux Security Advisory ASA-202004-15 ========================================== Severity: Critical Date : 2020-04-16 CVE-ID : CVE-2020-6457 Package : chromium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1134 Summary ======= The package chromium...

[ASA-201910-13] pacman: arbitrary command execution

Arch Linux Security Advisory ASA-201910-13 ========================================== Severity: High Date : 2019-10-23 CVE-ID : CVE-2019-18182 CVE-2019-18183 Package : pacman Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-1049 Summary ======= The package...

[ASA-201904-5] ghostscript: sandbox escape

Arch Linux Security Advisory ASA-201904-5 ========================================= Severity: High Date : 2019-04-11 CVE-ID : CVE-2019-3835 CVE-2019-3838 Package : ghostscript Type : sandbox escape Remote : Yes Link : https://security.archlinux.org/AVG-929 Summary ======= The package ghostscript...

[ASA-201901-12] matrix-synapse: private key recovery

Arch Linux Security Advisory ASA-201901-12 ========================================== Severity: High Date : 2019-01-24 CVE-ID : CVE-2019-5885 Package : matrix-synapse Type : private key recovery Remote : No Link : https://security.archlinux.org/AVG-846 Summary ======= The package matrix-synapse...

[ASA-201811-20] webkit2gtk: arbitrary code execution

Arch Linux Security Advisory ASA-201811-20 ========================================== Severity: Critical Date : 2018-11-22 CVE-ID : CVE-2018-4372 Package : webkit2gtk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-819 Summary ======= The package webkit2gtk...

[ASA-201811-13] powerdns-recursor: denial of service

Arch Linux Security Advisory ASA-201811-13 ========================================== Severity: Medium Date : 2018-11-12 CVE-ID : CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 Package : powerdns-recursor Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-805 Summary...

[ASA-201808-8] thunderbird: multiple issues

Arch Linux Security Advisory ASA-201808-8 ========================================= Severity: Critical Date : 2018-08-10 CVE-ID : CVE-2018-5156 CVE-2018-5187 CVE-2018-12361 CVE-2018-12367 CVE-2018-12371 Package : thunderbird Type : multiple issues Remote : Yes Link :...

[ASA-201808-2] cgit: directory traversal

Arch Linux Security Advisory ASA-201808-2 ========================================= Severity: High Date : 2018-08-03 CVE-ID : CVE-2018-14912 Package : cgit Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-745 Summary ======= The package cgit before version 1.2.1-1...

[ASA-201807-13] networkmanager-vpnc: privilege escalation

Arch Linux Security Advisory ASA-201807-13 ========================================== Severity: High Date : 2018-07-20 CVE-ID : CVE-2018-10900 Package : networkmanager-vpnc Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-739 Summary ======= The package...

[ASA-201805-9] webkit2gtk: arbitrary code execution

Arch Linux Security Advisory ASA-201805-9 ========================================= Severity: Critical Date : 2018-05-13 CVE-ID : CVE-2018-4200 Package : webkit2gtk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-692 Summary ======= The package webkit2gtk...

[ASA-201803-23] xerces-c: arbitrary code execution

Arch Linux Security Advisory ASA-201803-23 ========================================== Severity: High Date : 2018-03-25 CVE-ID : CVE-2017-12627 Package : xerces-c Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-644 Summary ======= The package xerces-c before...

[ASA-201803-17] libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-201803-17 ========================================== Severity: Medium Date : 2018-03-19 CVE-ID : CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122 Package : libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-655 Summary...

[ASA-201802-2] go: arbitrary code execution

Arch Linux Security Advisory ASA-201802-2 ========================================= Severity: High Date : 2018-02-09 CVE-ID : CVE-2018-6574 Package : go Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-606 Summary ======= The package go before version 1.9.4-1...

[ASA-201711-41] libxcursor: arbitrary code execution

Arch Linux Security Advisory ASA-201711-41 ========================================== Severity: High Date : 2017-11-30 CVE-ID : CVE-2017-16612 Package : libxcursor Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-531 Summary ======= The package libxcursor...

[ASA-201711-18] postgresql-old-upgrade: multiple issues

Arch Linux Security Advisory ASA-201711-18 ========================================== Severity: Medium Date : 2017-11-10 CVE-ID : CVE-2017-15098 CVE-2017-15099 Package : postgresql-old-upgrade Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-486 Summary ======= The...

[ASA-201710-18] pcre2: denial of service

Arch Linux Security Advisory ASA-201710-18 ========================================== Severity: Medium Date : 2017-10-12 CVE-ID : CVE-2017-7186 Package : pcre2 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-223 Summary ======= The package pcre2 before version...

[ASA-201710-9] lib32-krb5: arbitrary code execution

Arch Linux Security Advisory ASA-201710-9 ========================================= Severity: High Date : 2017-10-05 CVE-ID : CVE-2017-11462 Package : lib32-krb5 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-415 Summary ======= The package lib32-krb5 befor...