[ASA-202107-61] libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-202107-61 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2196 Summary ======= The package...

[ASA-202106-53] keycloak: certificate verification bypass

Arch Linux Security Advisory ASA-202106-53 ========================================== Severity: Medium Date : 2021-06-22 CVE-ID : CVE-2020-35509 Package : keycloak Type : certificate verification bypass Remote : Yes Link : https://security.archlinux.org/AVG-2084 Summary ======= The package keyclo...

[ASA-202106-33] opera: multiple issues

Arch Linux Security Advisory ASA-202106-33 ========================================== Severity: High Date : 2021-06-15 CVE-ID : CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30529 CVE-2021-30530 CVE-2021-30531 CVE-2021-30532 CVE-2021-30533...

[ASA-202106-12] redis: arbitrary code execution

Arch Linux Security Advisory ASA-202106-12 ========================================== Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-32625 Package : redis Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2022 Summary ======= The package redis before versi...

[ASA-202106-56] dovecot: information disclosure

Arch Linux Security Advisory ASA-202106-56 ========================================== Severity: High Date : 2021-06-22 CVE-ID : CVE-2021-29157 CVE-2021-33515 Package : dovecot Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2087 Summary ======= The package...

[ASA-202106-7] lib32-libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-202106-7 ========================================= Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-22898 CVE-2021-22901 Package : lib32-libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1998 Summary ======= The package...

[ASA-202105-2] python-flask-security-too: cross-site request forgery

Arch Linux Security Advisory ASA-202105-2 ========================================= Severity: High Date : 2021-05-19 CVE-ID : CVE-2021-21241 Package : python-flask-security-too Type : cross-site request forgery Remote : Yes Link : https://security.archlinux.org/AVG-1434 Summary ======= The packag...

[ASA-202106-18] packagekit: information disclosure

Arch Linux Security Advisory ASA-202106-18 ========================================== Severity: Low Date : 2021-06-01 CVE-ID : CVE-2020-16121 Package : packagekit Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1260 Summary ======= The package packagekit before...

[ASA-202106-5] lib32-curl: multiple issues

Arch Linux Security Advisory ASA-202106-5 ========================================= Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-22898 CVE-2021-22901 Package : lib32-curl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1996 Summary ======= The package lib32-cur...

[ASA-202107-63] libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-202107-63 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2198 Summary ======= The package...

[ASA-202107-7] mediawiki: access restriction bypass

Arch Linux Security Advisory ASA-202107-7 ========================================= Severity: Medium Date : 2021-07-01 CVE-ID : CVE-2021-35197 Package : mediawiki Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-2093 Summary ======= The package mediawiki...

[ASA-202106-55] tpm2-tools: man-in-the-middle

Arch Linux Security Advisory ASA-202106-55 ========================================== Severity: Low Date : 2021-06-22 CVE-ID : CVE-2021-3565 Package : tpm2-tools Type : man-in-the-middle Remote : No Link : https://security.archlinux.org/AVG-1986 Summary ======= The package tpm2-tools before versi...

[ASA-202106-32] vivaldi: multiple issues

Arch Linux Security Advisory ASA-202106-32 ========================================== Severity: Critical Date : 2021-06-15 CVE-ID : CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552 CVE-2021-30553 Package : vival...

[ASA-202106-19] keycloak: incorrect calculation

Arch Linux Security Advisory ASA-202106-19 ========================================== Severity: Low Date : 2021-06-01 CVE-ID : CVE-2021-3461 Package : keycloak Type : incorrect calculation Remote : Yes Link : https://security.archlinux.org/AVG-1994 Summary ======= The package keycloak before...

[ASA-202011-22] ceph: multiple issues

Arch Linux Security Advisory ASA-202011-22 ========================================== Severity: High Date : 2020-11-26 CVE-ID : CVE-2020-1759 CVE-2020-1760 CVE-2020-10753 CVE-2020-25660 Package : ceph Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1195 Summary =====...

[ASA-202107-11] python-django: insufficient validation

Arch Linux Security Advisory ASA-202107-11 ========================================== Severity: High Date : 2021-07-03 CVE-ID : CVE-2021-35042 Package : python-django Type : insufficient validation Remote : Yes Link : https://security.archlinux.org/AVG-2123 Summary ======= The package python-djan...

[ASA-202107-8] puppet: privilege escalation

Arch Linux Security Advisory ASA-202107-8 ========================================= Severity: Medium Date : 2021-07-01 CVE-ID : CVE-2021-27021 Package : puppet Type : privilege escalation Remote : Yes Link : https://security.archlinux.org/AVG-2105 Summary ======= The package puppet before version...

[ASA-202107-9] libtpms: information disclosure

Arch Linux Security Advisory ASA-202107-9 ========================================= Severity: Medium Date : 2021-07-01 CVE-ID : CVE-2021-3623 Package : libtpms Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-2108 Summary ======= The package libtpms before versi...

[ASA-202107-6] python-fastapi: cross-site request forgery

Arch Linux Security Advisory ASA-202107-6 ========================================= Severity: Medium Date : 2021-07-01 CVE-ID : CVE-2021-32677 Package : python-fastapi Type : cross-site request forgery Remote : Yes Link : https://security.archlinux.org/AVG-2060 Summary ======= The package...

[ASA-202107-5] jenkins: multiple issues

Arch Linux Security Advisory ASA-202107-5 ========================================= Severity: High Date : 2021-07-01 CVE-ID : CVE-2021-21670 CVE-2021-21671 Package : jenkins Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2118 Summary ======= The package jenkins befo...

[ASA-202106-16] pam-u2f: authentication bypass

Arch Linux Security Advisory ASA-202106-16 ========================================== Severity: Medium Date : 2021-06-01 CVE-ID : CVE-2021-31924 Package : pam-u2f Type : authentication bypass Remote : No Link : https://security.archlinux.org/AVG-2001 Summary ======= The package pam-u2f before...

[ASA-202102-16] lib32-glibc: denial of service

Arch Linux Security Advisory ASA-202102-16 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2019-25013 CVE-2020-27618 CVE-2020-29562 CVE-2021-3326 Package : lib32-glibc Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1320 Summa...

[ASA-202102-7] nextcloud: directory traversal

Arch Linux Security Advisory ASA-202102-7 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2020-36193 Package : nextcloud Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1464 Summary ======= The package nextcloud before...

[ASA-202106-23] apache: denial of service

Arch Linux Security Advisory ASA-202106-23 ========================================== Severity: High Date : 2021-06-09 CVE-ID : CVE-2021-31618 Package : apache Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2041 Summary ======= The package apache before version...

[ASA-202106-13] zint: arbitrary code execution

Arch Linux Security Advisory ASA-202106-13 ========================================== Severity: Medium Date : 2021-06-01 CVE-ID : CVE-2021-27799 Package : zint Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1625 Summary ======= The package zint before versio...

[ASA-202106-17] rabbitmq: denial of service

Arch Linux Security Advisory ASA-202106-17 ========================================== Severity: Medium Date : 2021-06-01 CVE-ID : CVE-2021-22116 Package : rabbitmq Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1966 Summary ======= The package rabbitmq before...

[ASA-202012-5] ant: arbitrary code execution

Arch Linux Security Advisory ASA-202012-5 ========================================= Severity: Medium Date : 2020-12-05 CVE-ID : CVE-2020-11979 Package : ant Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1312 Summary ======= The package ant before version...

[ASA-202108-2] nodejs-lts-fermium: arbitrary code execution

Arch Linux Security Advisory ASA-202108-2 ========================================= Severity: High Date : 2021-08-03 CVE-ID : CVE-2021-22930 Package : nodejs-lts-fermium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2240 Summary ======= The package...

[ASA-202107-36] libuv: information disclosure

Arch Linux Security Advisory ASA-202107-36 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-22918 Package : libuv Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2131 Summary ======= The package libuv before versi...

[ASA-202106-37] aspnet-runtime: denial of service

Arch Linux Security Advisory ASA-202106-37 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-31957 Package : aspnet-runtime Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2046 Summary ======= The package aspnet-runtime...

[ASA-202101-13] nodejs-lts-dubnium: multiple issues

Arch Linux Security Advisory ASA-202101-13 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-8265 CVE-2020-8287 Package : nodejs-lts-dubnium Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1403 Summary ======= The package...

[ASA-202107-3] istio: information disclosure

Arch Linux Security Advisory ASA-202107-3 ========================================= Severity: Critical Date : 2021-07-01 CVE-ID : CVE-2021-34824 Package : istio Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2113 Summary ======= The package istio before versi...

[ASA-202106-14] ruby-bundler: insufficient validation

Arch Linux Security Advisory ASA-202106-14 ========================================== Severity: Medium Date : 2021-06-01 CVE-ID : CVE-2020-36327 Package : ruby-bundler Type : insufficient validation Remote : Yes Link : https://security.archlinux.org/AVG-1891 Summary ======= The package ruby-bundl...

[ASA-202106-9] lib32-libcurl-gnutls: information disclosure

Arch Linux Security Advisory ASA-202106-9 ========================================= Severity: Medium Date : 2021-06-01 CVE-ID : CVE-2021-22898 Package : lib32-libcurl-gnutls Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2000 Summary ======= The package...

[ASA-202106-41] python-django: multiple issues

Arch Linux Security Advisory ASA-202106-41 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-33203 CVE-2021-33571 Package : python-django Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2026 Summary ======= The package...

[ASA-202106-34] intel-ucode: multiple issues

Arch Linux Security Advisory ASA-202106-34 ========================================== Severity: High Date : 2021-06-15 CVE-ID : CVE-2020-24511 CVE-2020-24512 CVE-2020-24513 CVE-2021-24489 Package : intel-ucode Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-2051 Summa...

[ASA-202102-17] glibc: denial of service

Arch Linux Security Advisory ASA-202102-17 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2019-25013 CVE-2020-27618 CVE-2020-29562 CVE-2021-3326 Package : glibc Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1320 Summary...

[ASA-202107-62] lib32-libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-202107-62 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : lib32-libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2197 Summary ======= The...

[ASA-202101-14] nodejs-lts-erbium: multiple issues

Arch Linux Security Advisory ASA-202101-14 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-8265 CVE-2020-8287 Package : nodejs-lts-erbium Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1402 Summary ======= The package...

[ASA-202106-38] aspnet-runtime-3.1: denial of service

Arch Linux Security Advisory ASA-202106-38 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-31957 Package : aspnet-runtime-3.1 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2047 Summary ======= The package...

[ASA-202101-25] sudo: multiple issues

Arch Linux Security Advisory ASA-202101-25 ========================================== Severity: Critical Date : 2021-01-20 CVE-ID : CVE-2021-3156 CVE-2021-23239 Package : sudo Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1431 Summary ======= The package sudo before...

[ASA-202011-27] opensc: arbitrary code execution

Arch Linux Security Advisory ASA-202011-27 ========================================== Severity: Medium Date : 2020-11-26 CVE-ID : CVE-2020-26570 CVE-2020-26571 CVE-2020-26572 Package : opensc Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1298 Summary ======...

[ASA-201902-13] lib32-curl: arbitrary code execution

Arch Linux Security Advisory ASA-201902-13 ========================================== Severity: High Date : 2019-02-12 CVE-ID : CVE-2018-16890 CVE-2019-3822 CVE-2019-3823 Package : lib32-curl Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-874 Summary ======...

[ASA-202107-10] mruby: arbitrary code execution

Arch Linux Security Advisory ASA-202107-10 ========================================== Severity: Medium Date : 2021-07-01 CVE-ID : CVE-2020-36401 Package : mruby Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2116 Summary ======= The package mruby before...

[ASA-202012-3] tomcat9: information disclosure

Arch Linux Security Advisory ASA-202012-3 ========================================= Severity: Medium Date : 2020-12-05 CVE-ID : CVE-2020-17527 Package : tomcat9 Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1317 Summary ======= The package tomcat9 before...

[ASA-202108-14] firefox: multiple issues

Arch Linux Security Advisory ASA-202108-14 ========================================== Severity: High Date : 2021-08-11 CVE-ID : CVE-2021-29980 CVE-2021-29981 CVE-2021-29982 CVE-2021-29984 CVE-2021-29985 CVE-2021-29986 CVE-2021-29987 CVE-2021-29988 CVE-2021-29989 CVE-2021-29990 Package : firefox...

[ASA-202102-18] python-django: directory traversal

Arch Linux Security Advisory ASA-202102-18 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2021-3281 Package : python-django Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-1518 Summary ======= The package python-django befo...

[ASA-202012-10] libproxy: denial of service

Arch Linux Security Advisory ASA-202012-10 ========================================== Severity: Low Date : 2020-12-05 CVE-ID : CVE-2020-25219 Package : libproxy Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1226 Summary ======= The package libproxy before version...

[ASA-202107-48] linux: privilege escalation

Arch Linux Security Advisory ASA-202107-48 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-3609 CVE-2021-3612 CVE-2021-33909 Package : linux Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2181 Summary ======= The...

[ASA-202106-10] dhclient: arbitrary code execution

Arch Linux Security Advisory ASA-202106-10 ========================================== Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-25217 Package : dhclient Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2004 Summary ======= The package dhclient before...