[ASA-201901-16] nasm: denial of service

Arch Linux Security Advisory ASA-201901-16 ========================================== Severity: Medium Date : 2019-01-24 CVE-ID : CVE-2019-6290 CVE-2019-6291 Package : nasm Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-852 Summary ======= The package nasm before...

[ASA-201810-5] python-django: information disclosure

Arch Linux Security Advisory ASA-201810-5 ========================================= Severity: Medium Date : 2018-10-01 CVE-ID : CVE-2018-16984 Package : python-django Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-773 Summary ======= The package python-django...

[ASA-201810-1] mosquitto: denial of service

Arch Linux Security Advisory ASA-201810-1 ========================================= Severity: Medium Date : 2018-10-01 CVE-ID : CVE-2018-12543 Package : mosquitto Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-772 Summary ======= The package mosquitto before versi...

[ASA-201806-12] cantata: multiple issues

Arch Linux Security Advisory ASA-201806-12 ========================================== Severity: High Date : 2018-06-20 CVE-ID : CVE-2018-12559 CVE-2018-12560 CVE-2018-12561 CVE-2018-12562 Package : cantata Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-721 Summary...

[ASA-201805-2] libraw: multiple issues

Arch Linux Security Advisory ASA-201805-2 ========================================= Severity: Critical Date : 2018-05-09 CVE-ID : CVE-2018-10528 CVE-2018-10529 Package : libraw Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-681 Summary ======= The package libraw...

[ASA-201711-39] procmail: arbitrary code execution

Arch Linux Security Advisory ASA-201711-39 ========================================== Severity: Critical Date : 2017-11-30 CVE-ID : CVE-2017-16844 Package : procmail Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-515 Summary ======= The package procmail...

[ASA-201711-31] powerdns-recursor: multiple issues

Arch Linux Security Advisory ASA-201711-31 ========================================== Severity: Medium Date : 2017-11-27 CVE-ID : CVE-2017-15090 CVE-2017-15092 CVE-2017-15093 CVE-2017-15094 Package : powerdns-recursor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-5...

[ASA-201710-3] lib32-curl: multiple issues

Arch Linux Security Advisory ASA-201710-3 ========================================= Severity: Medium Date : 2017-10-05 CVE-ID : CVE-2017-1000099 CVE-2017-1000100 CVE-2017-1000254 Package : lib32-curl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-371 Summary =======...

[ASA-201709-21] openvpn: arbitrary code execution

Arch Linux Security Advisory ASA-201709-21 ========================================== Severity: Medium Date : 2017-09-28 CVE-ID : CVE-2017-12166 Package : openvpn Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-420 Summary ======= The package openvpn before...

[ASA-201706-32] expat: denial of service

Arch Linux Security Advisory ASA-201706-32 ========================================== Severity: Medium Date : 2017-06-26 CVE-ID : CVE-2016-9063 CVE-2017-9233 Package : expat Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-306 Summary ======= The package expat befor...

[ASA-201706-17] messagelib: information disclosure

Arch Linux Security Advisory ASA-201706-17 ========================================== Severity: Medium Date : 2017-06-14 CVE-ID : CVE-2017-9604 Package : messagelib Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-300 Summary ======= The package messagelib befo...

[ASA-201706-4] gajim: information disclosure

Arch Linux Security Advisory ASA-201706-4 ========================================= Severity: High Date : 2017-06-05 CVE-ID : CVE-2016-1037 Package : gajim Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-284 Summary ======= The package gajim before version...

[ASA-201705-23] postgresql: information disclosure

Arch Linux Security Advisory ASA-201705-23 ========================================== Severity: Medium Date : 2017-05-30 CVE-ID : CVE-2017-7484 CVE-2017-7486 Package : postgresql Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-272 Summary ======= The package...

[ASA-201703-17] irssi: arbitrary code execution

Arch Linux Security Advisory ASA-201703-17 ========================================== Severity: High Date : 2017-03-21 CVE-ID : CVE-2017-7191 Package : irssi Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-224 Summary ======= The package irssi before version...

[ASA-201702-7] gstreamer: denial of service

Arch Linux Security Advisory ASA-201702-7 ========================================= Severity: Low Date : 2017-02-03 CVE-ID : CVE-2017-5838 Package : gstreamer Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-167 Summary ======= The package gstreamer before version...

[ASA-201701-41] salt: multiple issues

Arch Linux Security Advisory ASA-201701-41 ========================================== Severity: High Date : 2017-01-31 CVE-ID : CVE-2017-5192 CVE-2017-5200 Package : salt Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-159 Summary ======= The package salt before...

file-roller: multiple issues

File Roller was affected by a directory traversal bug that could result in deleted files if a user were tricked into opening a malicious archive...

mplayer: denial of service

A vulnerability has been discovered that is leading to a crash when playing a fuzzed gif file. The gif demuxes assumed in many places that widthheight is = INTMAX, however this was not always true and was leading to an integer overflow...

opensmtpd: multiple issues

an oversight in the portable version of fgetln that allows attackers to read and write out-of-bounds memory - multiple denial-of-service vulnerabilities that allow local users to kill or hang OpenSMTPD - a stack-based buffer overflow that allows local users to crash OpenSMTPD, or execute...

[ASA-202506-5] konsole: arbitrary code execution

Arch Linux Security Advisory ASA-202506-5 ========================================= Severity: High Date : 2025-06-11 CVE-ID : CVE-2025-49091 Package : konsole Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2897 Summary ======= The package konsole before...

[ASA-202505-10] python-django: denial of service

Arch Linux Security Advisory ASA-202505-10 ========================================== Severity: Medium Date : 2025-05-19 CVE-ID : CVE-2025-32873 Package : python-django Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2876 Summary ======= The package python-django...

[ASA-202010-8] kpmcore: privilege escalation

Arch Linux Security Advisory ASA-202010-8 ========================================= Severity: High Date : 2020-10-18 CVE-ID : CVE-2020-27187 Package : kpmcore Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1253 Summary ======= The package kpmcore before version...

[ASA-202009-5] gnupg: arbitrary code execution

Arch Linux Security Advisory ASA-202009-5 ========================================= Severity: Critical Date : 2020-09-07 CVE-ID : CVE-2020-25125 Package : gnupg Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1218 Summary ======= The package gnupg before...

[ASA-202002-4] ksh: arbitrary command execution

Arch Linux Security Advisory ASA-202002-4 ========================================= Severity: High Date : 2020-02-08 CVE-ID : CVE-2019-14868 Package : ksh Type : arbitrary command execution Remote : No Link : https://security.archlinux.org/AVG-1095 Summary ======= The package ksh before version...

[ASA-201912-3] crypto++: private key recovery

Arch Linux Security Advisory ASA-201912-3 ========================================= Severity: High Date : 2019-12-06 CVE-ID : CVE-2019-14318 Package : crypto++ Type : private key recovery Remote : Yes Link : https://security.archlinux.org/AVG-1046 Summary ======= The package crypto++ before versi...

[ASA-201908-4] exim: arbitrary code execution

Arch Linux Security Advisory ASA-201908-4 ========================================= Severity: Critical Date : 2019-08-05 CVE-ID : CVE-2019-13917 Package : exim Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1011 Summary ======= The package exim before versi...

[ASA-201807-9] libcurl-gnutls: arbitrary code execution

Arch Linux Security Advisory ASA-201807-9 ========================================= Severity: High Date : 2018-07-16 CVE-ID : CVE-2018-0500 Package : libcurl-gnutls Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-734 Summary ======= The package libcurl-gnutl...

[ASA-201806-8] gnupg: content spoofing

Arch Linux Security Advisory ASA-201806-8 ========================================= Severity: High Date : 2018-06-11 CVE-ID : CVE-2018-12020 Package : gnupg Type : content spoofing Remote : Yes Link : https://security.archlinux.org/AVG-713 Summary ======= The package gnupg before version 2.2.8-1 ...

[ASA-201804-3] zziplib: denial of service

Arch Linux Security Advisory ASA-201804-3 ========================================= Severity: Medium Date : 2018-04-04 CVE-ID : CVE-2018-7725 CVE-2018-7726 CVE-2018-7727 Package : zziplib Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-612 Summary ======= The packa...

[ASA-201803-24] bchunk: denial of service

Arch Linux Security Advisory ASA-201803-24 ========================================== Severity: Medium Date : 2018-03-25 CVE-ID : CVE-2017-15953 CVE-2017-15954 CVE-2017-15955 Package : bchunk Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-475 Summary ======= The...

[ASA-201712-4] vlc: arbitrary code execution

Arch Linux Security Advisory ASA-201712-4 ========================================= Severity: Critical Date : 2017-12-07 CVE-ID : CVE-2017-10699 CVE-2017-9300 Package : vlc Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-533 Summary ======= The package vlc...

[ASA-201711-17] postgresql: multiple issues

Arch Linux Security Advisory ASA-201711-17 ========================================== Severity: Medium Date : 2017-11-10 CVE-ID : CVE-2017-15098 CVE-2017-15099 Package : postgresql Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-485 Summary ======= The package...

[ASA-201709-20] weechat: denial of service

Arch Linux Security Advisory ASA-201709-20 ========================================== Severity: Medium Date : 2017-09-25 CVE-ID : CVE-2017-14727 Package : weechat Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-412 Summary ======= The package weechat before version...

[ASA-201708-10] libytnef: arbitrary code execution

Arch Linux Security Advisory ASA-201708-10 ========================================== Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-9058 Package : libytnef Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-275 Summary ======= The package libytnef before...

[ASA-201707-23] freeradius: multiple issues

Arch Linux Security Advisory ASA-201707-23 ========================================== Severity: Critical Date : 2017-07-18 CVE-ID : CVE-2017-10978 CVE-2017-10983 CVE-2017-10984 CVE-2017-10985 CVE-2017-10986 CVE-2017-10987 Package : freeradius Type : multiple issues Remote : Yes Link :...

[ASA-201701-31] ed: denial of service

Arch Linux Security Advisory ASA-201701-31 ========================================== Severity: Low Date : 2017-01-25 CVE-ID : CVE-2017-5357 Package : ed Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-145 Summary ======= The package ed before version 1.14.1-1 is...

[ASA-201701-2] libpng: denial of service

Arch Linux Security Advisory ASA-201701-2 ========================================= Severity: Low Date : 2017-01-01 CVE-ID : CVE-2016-10087 Package : libpng Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-119 Summary ======= The package libpng before version 1.6.27...

libtorrent-rasterbar: denial of service

A bug has been found in the libtorrent-rasterbar code handling GZIP-encoded responses from a tracker, where malformed responses could lead to a crash...

mencoder: denial of service

A vulnerability has been discovered that is leading to a crash when playing a fuzzed gif file. The gif demuxes assumed in many places that widthheight is = INTMAX, however this was not always true and was leading to an integer overflow...

[ASA-201812-1] jupyter-notebook: cross-site scripting

Arch Linux Security Advisory ASA-201812-1 ========================================= Severity: Medium Date : 2018-12-06 CVE-ID : CVE-2018-19351 CVE-2018-19352 Package : jupyter-notebook Type : cross-site scripting Remote : No Link : https://security.archlinux.org/AVG-820 Summary ======= The packag...

[ASA-201805-1] powerdns: arbitrary code execution

Arch Linux Security Advisory ASA-201805-1 ========================================= Severity: High Date : 2018-05-09 CVE-ID : CVE-2018-1046 Package : powerdns Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-686 Summary ======= The package powerdns before...

[ASA-201802-13] lib32-wavpack: arbitrary code execution

Arch Linux Security Advisory ASA-201802-13 ========================================== Severity: High Date : 2018-02-23 CVE-ID : CVE-2018-6767 CVE-2018-7253 CVE-2018-7254 Package : lib32-wavpack Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-634 Summary...

[ASA-201802-12] wavpack: arbitrary code execution

Arch Linux Security Advisory ASA-201802-12 ========================================== Severity: High Date : 2018-02-23 CVE-ID : CVE-2018-6767 CVE-2018-7253 CVE-2018-7254 Package : wavpack Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-631 Summary ======= Th...

[ASA-201802-7] mpv: arbitrary code execution

Arch Linux Security Advisory ASA-201802-7 ========================================= Severity: High Date : 2018-02-13 CVE-ID : CVE-2018-6360 Package : mpv Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-605 Summary ======= The package mpv before version...

[ASA-201801-11] qtpass: private key recovery

Arch Linux Security Advisory ASA-201801-11 ========================================== Severity: High Date : 2018-01-11 CVE-ID : CVE-2017-18021 Package : qtpass Type : private key recovery Remote : Yes Link : https://security.archlinux.org/AVG-576 Summary ======= The package qtpass before version...

[ASA-201712-3] libofx: arbitrary code execution

Arch Linux Security Advisory ASA-201712-3 ========================================= Severity: Medium Date : 2017-12-02 CVE-ID : CVE-2017-2816 Package : libofx Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-534 Summary ======= The package libofx before versi...

[ASA-201711-19] konversation: denial of service

Arch Linux Security Advisory ASA-201711-19 ========================================== Severity: Medium Date : 2017-11-12 CVE-ID : CVE-2017-15923 Package : konversation Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-489 Summary ======= The package konversation befo...

[ASA-201710-13] flyspray: cross-site scripting

Arch Linux Security Advisory ASA-201710-13 ========================================== Severity: High Date : 2017-10-10 CVE-ID : CVE-2017-15213 CVE-2017-15214 Package : flyspray Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-439 Summary ======= The package...

[ASA-201708-15] newsbeuter: arbitrary code execution

Arch Linux Security Advisory ASA-201708-15 ========================================== Severity: High Date : 2017-08-20 CVE-ID : CVE-2017-12904 Package : newsbeuter Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-384 Summary ======= The package newsbeuter...

[ASA-201708-12] spice: arbitrary code execution

Arch Linux Security Advisory ASA-201708-12 ========================================== Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-7506 Package : spice Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-349 Summary ======= The package spice before version...