[ASA-202108-12] loki: directory traversal

Arch Linux Security Advisory ASA-202108-12 ========================================== Severity: Medium Date : 2021-08-10 CVE-ID : CVE-2021-36156 Package : loki Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-2250 Summary ======= The package loki before version...

[ASA-202108-8] fossil: certificate verification bypass

Arch Linux Security Advisory ASA-202108-8 ========================================= Severity: High Date : 2021-08-10 CVE-ID : CVE-2021-36377 Package : fossil Type : certificate verification bypass Remote : Yes Link : https://security.archlinux.org/AVG-2146 Summary ======= The package fossil befor...

[ASA-202107-50] linux-hardened: privilege escalation

Arch Linux Security Advisory ASA-202107-50 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-3609 CVE-2021-3612 CVE-2021-33909 Package : linux-hardened Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2183 Summary ======...

[ASA-202107-37] putty: content spoofing

Arch Linux Security Advisory ASA-202107-37 ========================================== Severity: Low Date : 2021-07-20 CVE-ID : CVE-2021-36367 Package : putty Type : content spoofing Remote : Yes Link : https://security.archlinux.org/AVG-2143 Summary ======= The package putty before version 0.76-1...

[ASA-202102-19] python-jinja: denial of service

Arch Linux Security Advisory ASA-202102-19 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2020-28493 Package : python-jinja Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1523 Summary ======= The package python-jinja before...

[ASA-202101-8] mdbook: cross-site scripting

Arch Linux Security Advisory ASA-202101-8 ========================================= Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-26297 Package : mdbook Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1399 Summary ======= The package mdbook before version...

[ASA-202101-2] roundcubemail: cross-site scripting

Arch Linux Security Advisory ASA-202101-2 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-35730 Package : roundcubemail Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1388 Summary ======= The package roundcubemail...

[ASA-202107-46] opera: arbitrary code execution

Arch Linux Security Advisory ASA-202107-46 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30541 CVE-2021-30559 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30563 CVE-2021-30564 Package : opera Type : arbitrary code execution Remote : Yes Lin...

[ASA-202108-1] nodejs: arbitrary code execution

Arch Linux Security Advisory ASA-202108-1 ========================================= Severity: High Date : 2021-08-03 CVE-ID : CVE-2021-22930 Package : nodejs Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2239 Summary ======= The package nodejs before versi...

[ASA-202107-39] racket: sandbox escape

Arch Linux Security Advisory ASA-202107-39 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-32773 Package : racket Type : sandbox escape Remote : Yes Link : https://security.archlinux.org/AVG-2175 Summary ======= The package racket before version 8.2...

[ASA-202011-19] libass: arbitrary code execution

Arch Linux Security Advisory ASA-202011-19 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2020-26682 Package : libass Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1285 Summary ======= The package libass before...

[ASA-202108-6] vivaldi: multiple issues

Arch Linux Security Advisory ASA-202108-6 ========================================= Severity: High Date : 2021-08-10 CVE-ID : CVE-2021-30590 CVE-2021-30591 CVE-2021-30592 CVE-2021-30593 CVE-2021-30594 CVE-2021-30596 CVE-2021-30597 Package : vivaldi Type : multiple issues Remote : Yes Link :...

[ASA-202107-42] go: denial of service

Arch Linux Security Advisory ASA-202107-42 ========================================== Severity: Low Date : 2021-07-20 CVE-ID : CVE-2021-34558 Package : go Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2147 Summary ======= The package go before version 2:1.16.6-1 ...

[ASA-202106-30] wireshark-cli: denial of service

Arch Linux Security Advisory ASA-202106-30 ========================================== Severity: Low Date : 2021-06-09 CVE-ID : CVE-2021-22222 Package : wireshark-cli Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2037 Summary ======= The package wireshark-cli befo...

[ASA-202101-24] atftp: denial of service

Arch Linux Security Advisory ASA-202101-24 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-6097 Package : atftp Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1395 Summary ======= The package atftp before version...

[ASA-202101-20] vivaldi: multiple issues

Arch Linux Security Advisory ASA-202101-20 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112 CVE-2021-21113 CVE-2021-21114...

[ASA-202101-1] rsync: man-in-the-middle

Arch Linux Security Advisory ASA-202101-1 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-14387 Package : rsync Type : man-in-the-middle Remote : Yes Link : https://security.archlinux.org/AVG-1374 Summary ======= The package rsync before version 3.2.3-...

[ASA-202101-4] dovecot: multiple issues

Arch Linux Security Advisory ASA-202101-4 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-24386 CVE-2020-25275 Package : dovecot Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1398 Summary ======= The package dovecot befo...

[ASA-202012-2] cimg: arbitrary code execution

Arch Linux Security Advisory ASA-202012-2 ========================================= Severity: Medium Date : 2020-12-05 CVE-ID : CVE-2020-25693 Package : cimg Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1318 Summary ======= The package cimg before version...

[ASA-202011-23] matrix-synapse: denial of service

Arch Linux Security Advisory ASA-202011-23 ========================================== Severity: High Date : 2020-11-26 CVE-ID : CVE-2020-26890 Package : matrix-synapse Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1296 Summary ======= The package matrix-synapse...

[ASA-202011-20] raptor: arbitrary code execution

Arch Linux Security Advisory ASA-202011-20 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2017-18926 CVE-2020-25713 Package : raptor Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1283 Summary ======= The package...

[ASA-202011-18] c-ares: denial of service

Arch Linux Security Advisory ASA-202011-18 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2020-8277 Package : c-ares Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1280 Summary ======= The package c-ares before version...

[ASA-202108-3] nodejs-lts-erbium: arbitrary code execution

Arch Linux Security Advisory ASA-202108-3 ========================================= Severity: High Date : 2021-08-03 CVE-ID : CVE-2021-22930 Package : nodejs-lts-erbium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2241 Summary ======= The package...

[ASA-202101-15] nodejs-lts-fermium: multiple issues

Arch Linux Security Advisory ASA-202101-15 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-8265 CVE-2020-8287 Package : nodejs-lts-fermium Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1401 Summary ======= The package...

[ASA-202101-22] mediawiki: multiple issues

Arch Linux Security Advisory ASA-202101-22 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-35474 CVE-2020-35475 CVE-2020-35477 CVE-2020-35478 CVE-2020-35479 CVE-2020-35480 Package : mediawiki Type : multiple issues Remote : Yes Link :...

[ASA-202407-1] openssh: authentication bypass

Arch Linux Security Advisory ASA-202407-1 ========================================= Severity: High Date : 2024-07-01 CVE-ID : CVE-2024-6387 Package : openssh Type : authentication bypass Remote : Yes Link : https://security.archlinux.org/AVG-2855 Summary ======= The package openssh before version...

[ASA-202108-4] chromium: multiple issues

Arch Linux Security Advisory ASA-202108-4 ========================================= Severity: High Date : 2021-08-03 CVE-ID : CVE-2021-30590 CVE-2021-30591 CVE-2021-30592 CVE-2021-30593 CVE-2021-30594 CVE-2021-30596 CVE-2021-30597 Package : chromium Type : multiple issues Remote : Yes Link :...

[ASA-202101-10] gitlab: multiple issues

Arch Linux Security Advisory ASA-202101-10 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-26414 CVE-2021-22166 CVE-2021-22167 CVE-2021-22168 CVE-2021-22171 Package : gitlab Type : multiple issues Remote : Yes Link :...

bash: Remote code execution

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the...

[ASA-202101-23] wavpack: arbitrary code execution

Arch Linux Security Advisory ASA-202101-23 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-35738 Package : wavpack Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1387 Summary ======= The package wavpack before...

[ASA-202011-21] swtpm: privilege escalation

Arch Linux Security Advisory ASA-202011-21 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2020-28407 Package : swtpm Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1282 Summary ======= The package swtpm before version...

[ASA-202101-41] jenkins: multiple issues

Arch Linux Security Advisory ASA-202101-41 ========================================== Severity: High Date : 2021-01-20 CVE-ID : CVE-2021-21602 CVE-2021-21603 CVE-2021-21604 CVE-2021-21605 CVE-2021-21606 CVE-2021-21607 CVE-2021-21608 CVE-2021-21609 CVE-2021-21610 CVE-2021-21611 Package : jenkins...

[ASA-202106-26] python-websockets: private key recovery

Arch Linux Security Advisory ASA-202106-26 ========================================== Severity: Medium Date : 2021-06-09 CVE-ID : CVE-2021-33880 Package : python-websockets Type : private key recovery Remote : Yes Link : https://security.archlinux.org/AVG-2040 Summary ======= The package...

[ASA-202101-21] coturn: insufficient validation

Arch Linux Security Advisory ASA-202101-21 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-26262 Package : coturn Type : insufficient validation Remote : Yes Link : https://security.archlinux.org/AVG-1430 Summary ======= The package coturn before...

[ASA-202106-29] kube-apiserver: insufficient validation

Arch Linux Security Advisory ASA-202106-29 ========================================== Severity: Low Date : 2021-06-09 CVE-ID : CVE-2021-25737 Package : kube-apiserver Type : insufficient validation Remote : Yes Link : https://security.archlinux.org/AVG-1970 Summary ======= The package...

[ASA-202106-25] python-urllib3: denial of service

Arch Linux Security Advisory ASA-202106-25 ========================================== Severity: Medium Date : 2021-06-09 CVE-ID : CVE-2021-33503 Package : python-urllib3 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2038 Summary ======= The package python-urllib3...

[ASA-202106-27] isync: arbitrary code execution

Arch Linux Security Advisory ASA-202106-27 ========================================== Severity: Medium Date : 2021-06-09 CVE-ID : CVE-2021-3578 Package : isync Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2042 Summary ======= The package isync before...

[ASA-202101-33] linux: directory traversal

Arch Linux Security Advisory ASA-202101-33 ========================================== Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2020-28374 Package : linux Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-1442 Summary ======= The package linux before version...

[ASA-202006-5] tomcat8: arbitrary code execution

Arch Linux Security Advisory ASA-202006-5 ========================================= Severity: High Date : 2020-06-06 CVE-ID : CVE-2020-9484 Package : tomcat8 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1170 Summary ======= The package tomcat8 before...

[ASA-202101-45] libgcrypt: arbitrary code execution

Arch Linux Security Advisory ASA-202101-45 ========================================== Severity: Critical Date : 2021-01-29 CVE-ID : CVE-2021-3345 Package : libgcrypt Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1505 Summary ======= The package libgcrypt...

[ASA-202101-37] virtualbox: multiple issues

Arch Linux Security Advisory ASA-202101-37 ========================================== Severity: High Date : 2021-01-20 CVE-ID : CVE-2021-2073 CVE-2021-2074 CVE-2021-2086 CVE-2021-2111 CVE-2021-2112 CVE-2021-2119 CVE-2021-2120 CVE-2021-2121 CVE-2021-2123 CVE-2021-2124 CVE-2021-2125 CVE-2021-2126...

[ASA-202101-3] poppler: arbitrary code execution

Arch Linux Security Advisory ASA-202101-3 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-35702 Package : poppler Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1382 Summary ======= The package poppler before...

[ASA-202110-1] apache: directory traversal

Arch Linux Security Advisory ASA-202110-1 ========================================= Severity: Critical Date : 2021-10-21 CVE-ID : CVE-2021-42013 Package : apache Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-2450 Summary ======= The package apache before versio...

[ASA-202108-10] jupyterlab: cross-site scripting

Arch Linux Security Advisory ASA-202108-10 ========================================== Severity: High Date : 2021-08-10 CVE-ID : CVE-2021-32797 Package : jupyterlab Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-2266 Summary ======= The package jupyterlab before...

[ASA-202108-9] lynx: information disclosure

Arch Linux Security Advisory ASA-202108-9 ========================================= Severity: High Date : 2021-08-10 CVE-ID : CVE-2021-38165 Package : lynx Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2261 Summary ======= The package lynx before version...

[ASA-202107-58] nvidia-utils: multiple issues

Arch Linux Security Advisory ASA-202107-58 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-1093 CVE-2021-1094 CVE-2021-1095 Package : nvidia-utils Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-2193 Summary ======= The...

[ASA-202102-6] chromium: multiple issues

Arch Linux Security Advisory ASA-202102-6 ========================================= Severity: Critical Date : 2021-02-06 CVE-ID : CVE-2021-21142 CVE-2021-21143 CVE-2021-21144 CVE-2021-21145 CVE-2021-21146 CVE-2021-21147 CVE-2021-21148 Package : chromium Type : multiple issues Remote : Yes Link :...

[ASA-202107-45] telegram-desktop: content spoofing

Arch Linux Security Advisory ASA-202107-45 ========================================== Severity: Low Date : 2021-07-20 CVE-ID : CVE-2021-36769 Package : telegram-desktop Type : content spoofing Remote : Yes Link : https://security.archlinux.org/AVG-2170 Summary ======= The package telegram-desktop...

[ASA-202107-56] impacket: directory traversal

Arch Linux Security Advisory ASA-202107-56 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-31800 Package : impacket Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1916 Summary ======= The package impacket before...

[ASA-202107-43] ant: denial of service

Arch Linux Security Advisory ASA-202107-43 ========================================== Severity: Low Date : 2021-07-20 CVE-ID : CVE-2021-36373 CVE-2021-36374 Package : ant Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-2151 Summary ======= The package ant before...