[ASA-202103-5] minio: access restriction bypass

Arch Linux Security Advisory ASA-202103-5 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2021-21362 Package : minio Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-1664 Summary ======= The package minio before...

[ASA-202103-6] openssh: arbitrary code execution

Arch Linux Security Advisory ASA-202103-6 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2021-28041 Package : openssh Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1657 Summary ======= The package openssh before...

[ASA-202103-4] flatpak: sandbox escape

Arch Linux Security Advisory ASA-202103-4 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2021-21381 Package : flatpak Type : sandbox escape Remote : No Link : https://security.archlinux.org/AVG-1678 Summary ======= The package flatpak before version...

[ASA-202103-3] git: arbitrary code execution

Arch Linux Security Advisory ASA-202103-3 ========================================= Severity: Low Date : 2021-03-13 CVE-ID : CVE-2021-21300 Package : git Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1665 Summary ======= The package git before version...

[ASA-202103-9] chromium: arbitrary code execution

Arch Linux Security Advisory ASA-202103-9 ========================================= Severity: High Date : 2021-03-13 CVE-ID : CVE-2021-21191 CVE-2021-21192 CVE-2021-21193 Package : chromium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1683 Summary =======...

[ASA-202103-8] opera: arbitrary code execution

Arch Linux Security Advisory ASA-202103-8 ========================================= Severity: High Date : 2021-03-13 CVE-ID : CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157 Package : opera Type : arbitrary cod...

[ASA-202103-7] ffmpeg: arbitrary code execution

Arch Linux Security Advisory ASA-202103-7 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2020-35964 Package : ffmpeg Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1649 Summary ======= The package ffmpeg before...

[ASA-202102-43] thrift: denial of service

Arch Linux Security Advisory ASA-202102-43 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2020-13949 Package : thrift Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1568 Summary ======= The package thrift before version...

[ASA-202102-42] openssl: multiple issues

Arch Linux Security Advisory ASA-202102-42 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2021-23840 CVE-2021-23841 Package : openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1581 Summary ======= The package openssl...

[ASA-202102-38] isync: directory traversal

Arch Linux Security Advisory ASA-202102-38 ========================================== Severity: High Date : 2021-02-27 CVE-ID : CVE-2021-20247 Package : isync Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1598 Summary ======= The package isync before version...

[ASA-202102-39] ipmitool: arbitrary code execution

Arch Linux Security Advisory ASA-202102-39 ========================================== Severity: High Date : 2021-02-27 CVE-ID : CVE-2020-5208 Package : ipmitool Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1596 Summary ======= The package ipmitool before...

[ASA-202102-37] python: multiple issues

Arch Linux Security Advisory ASA-202102-37 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2021-3177 CVE-2021-23336 Package : python Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1465 Summary ======= The package python...

[ASA-202102-36] python-cryptography: incorrect calculation

Arch Linux Security Advisory ASA-202102-36 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2020-36242 Package : python-cryptography Type : incorrect calculation Remote : No Link : https://security.archlinux.org/AVG-1541 Summary ======= The package...

[ASA-202102-35] python-httplib2: denial of service

Arch Linux Security Advisory ASA-202102-35 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2021-21240 Package : python-httplib2 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1546 Summary ======= The package python-httpli...

[ASA-202102-34] intel-ucode: information disclosure

Arch Linux Security Advisory ASA-202102-34 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2020-8696 CVE-2020-8698 Package : intel-ucode Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1588 Summary ======= The package...

[ASA-202102-33] salt: multiple issues

Arch Linux Security Advisory ASA-202102-33 ========================================== Severity: High Date : 2021-02-27 CVE-ID : CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-3144 CVE-2021-3148 CVE-2021-3197 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284 Package : salt Type :...

[ASA-202102-41] tar: denial of service

Arch Linux Security Advisory ASA-202102-41 ========================================== Severity: Low Date : 2021-02-27 CVE-ID : CVE-2021-20193 Package : tar Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1462 Summary ======= The package tar before version 1.34-1 is...

[ASA-202102-40] bind: arbitrary code execution

Arch Linux Security Advisory ASA-202102-40 ========================================== Severity: High Date : 2021-02-27 CVE-ID : CVE-2020-8625 Package : bind Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1589 Summary ======= The package bind before version...

[ASA-202102-32] mumble: arbitrary code execution

Arch Linux Security Advisory ASA-202102-32 ========================================== Severity: Medium Date : 2021-02-20 CVE-ID : CVE-2021-27229 Package : mumble Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1576 Summary ======= The package mumble before...

[ASA-202102-28] python-django: url request injection

Arch Linux Security Advisory ASA-202102-28 ========================================== Severity: Medium Date : 2021-02-20 CVE-ID : CVE-2021-23336 Package : python-django Type : url request injection Remote : Yes Link : https://security.archlinux.org/AVG-1593 Summary ======= The package python-djan...

[ASA-202102-31] postgresql: information disclosure

Arch Linux Security Advisory ASA-202102-31 ========================================== Severity: Medium Date : 2021-02-20 CVE-ID : CVE-2021-3393 CVE-2021-20229 Package : postgresql Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1567 Summary ======= The package...

[ASA-202102-30] ansible-base: information disclosure

Arch Linux Security Advisory ASA-202102-30 ========================================== Severity: Medium Date : 2021-02-20 CVE-ID : CVE-2021-20228 Package : ansible-base Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1562 Summary ======= The package ansible-base...

[ASA-202102-29] keycloak: cross-site scripting

Arch Linux Security Advisory ASA-202102-29 ========================================== Severity: High Date : 2021-02-20 CVE-ID : CVE-2021-20195 Package : keycloak Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1578 Summary ======= The package keycloak before...

[ASA-202102-27] roundcubemail: cross-site scripting

Arch Linux Security Advisory ASA-202102-27 ========================================== Severity: High Date : 2021-02-12 CVE-ID : CVE-2021-26925 Package : roundcubemail Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1551 Summary ======= The package roundcubemail...

[ASA-202102-26] firejail: privilege escalation

Arch Linux Security Advisory ASA-202102-26 ========================================== Severity: High Date : 2021-02-12 CVE-ID : CVE-2021-26910 Package : firejail Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1545 Summary ======= The package firejail before...

[ASA-202102-25] wpa_supplicant: arbitrary code execution

Arch Linux Security Advisory ASA-202102-25 ========================================== Severity: High Date : 2021-02-12 CVE-ID : CVE-2021-0326 Package : wpasupplicant Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1530 Summary ======= The package wpasupplica...

[ASA-202102-23] linux: arbitrary code execution

Arch Linux Security Advisory ASA-202102-23 ========================================== Severity: Medium Date : 2021-02-12 CVE-ID : CVE-2021-3347 Package : linux Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1506 Summary ======= The package linux before versi...

[ASA-202102-24] connman: multiple issues

Arch Linux Security Advisory ASA-202102-24 ========================================== Severity: Critical Date : 2021-02-12 CVE-ID : CVE-2021-26675 CVE-2021-26676 Package : connman Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1543 Summary ======= The package connma...

[ASA-202102-20] python2-jinja: denial of service

Arch Linux Security Advisory ASA-202102-20 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2020-28493 Package : python2-jinja Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1523 Summary ======= The package python2-jinja befo...

[ASA-202102-21] privoxy: denial of service

Arch Linux Security Advisory ASA-202102-21 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2021-20216 CVE-2021-20217 Package : privoxy Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1524 Summary ======= The package privoxy...

[ASA-202102-19] python-jinja: denial of service

Arch Linux Security Advisory ASA-202102-19 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2020-28493 Package : python-jinja Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1523 Summary ======= The package python-jinja before...

[ASA-202102-18] python-django: directory traversal

Arch Linux Security Advisory ASA-202102-18 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2021-3281 Package : python-django Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-1518 Summary ======= The package python-django befo...

[ASA-202102-17] glibc: denial of service

Arch Linux Security Advisory ASA-202102-17 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2019-25013 CVE-2020-27618 CVE-2020-29562 CVE-2021-3326 Package : glibc Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1320 Summary...

[ASA-202102-16] lib32-glibc: denial of service

Arch Linux Security Advisory ASA-202102-16 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2019-25013 CVE-2020-27618 CVE-2020-29562 CVE-2021-3326 Package : lib32-glibc Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1320 Summa...

[ASA-202102-22] helm: insufficient validation

Arch Linux Security Advisory ASA-202102-22 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2021-21303 Package : helm Type : insufficient validation Remote : No Link : https://security.archlinux.org/AVG-1539 Summary ======= The package helm before version...

[ASA-202102-15] php: denial of service

Arch Linux Security Advisory ASA-202102-15 ========================================== Severity: Medium Date : 2021-02-07 CVE-ID : CVE-2021-21702 Package : php Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1531 Summary ======= The package php before version 8.0.2-...

[ASA-202102-14] php7: denial of service

Arch Linux Security Advisory ASA-202102-14 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-21702 Package : php7 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1532 Summary ======= The package php7 before version...

[ASA-202102-13] cups: information disclosure

Arch Linux Security Advisory ASA-202102-13 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2020-10001 Package : cups Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1529 Summary ======= The package cups before version...

[ASA-202102-12] docker: multiple issues

Arch Linux Security Advisory ASA-202102-12 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-21284 CVE-2021-21285 Package : docker Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1528 Summary ======= The package docker...

[ASA-202102-10] minio: directory traversal

Arch Linux Security Advisory ASA-202102-10 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-21287 Package : minio Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1520 Summary ======= The package minio before version...

[ASA-202102-8] opendoas: privilege escalation

Arch Linux Security Advisory ASA-202102-8 ========================================= Severity: High Date : 2021-02-06 CVE-ID : CVE-2019-25016 Package : opendoas Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1504 Summary ======= The package opendoas before versio...

[ASA-202102-6] chromium: multiple issues

Arch Linux Security Advisory ASA-202102-6 ========================================= Severity: Critical Date : 2021-02-06 CVE-ID : CVE-2021-21142 CVE-2021-21143 CVE-2021-21144 CVE-2021-21145 CVE-2021-21146 CVE-2021-21147 CVE-2021-21148 Package : chromium Type : multiple issues Remote : Yes Link :...

[ASA-202102-4] vivaldi: multiple issues

Arch Linux Security Advisory ASA-202102-4 ========================================= Severity: Critical Date : 2021-02-06 CVE-ID : CVE-2020-16044 CVE-2021-21117 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124 CVE-2021-21125 CVE-2021-21126...

[ASA-202102-5] opera: multiple issues

Arch Linux Security Advisory ASA-202102-5 ========================================= Severity: Critical Date : 2021-02-06 CVE-ID : CVE-2020-16044 CVE-2021-21117 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124 CVE-2021-21125 CVE-2021-21126...

[ASA-202102-3] wireshark-cli: denial of service

Arch Linux Security Advisory ASA-202102-3 ========================================= Severity: Low Date : 2021-02-06 CVE-ID : CVE-2021-22173 CVE-2021-22174 Package : wireshark-cli Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1510 Summary ======= The package...

[ASA-202102-2] thunderbird: multiple issues

Arch Linux Security Advisory ASA-202102-2 ========================================= Severity: High Date : 2021-02-06 CVE-ID : CVE-2020-15685 CVE-2020-26976 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2021-23964 Package : thunderbird Type : multiple issues Remote : Yes Link :...

[ASA-202102-11] gitlab: information disclosure

Arch Linux Security Advisory ASA-202102-11 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-22172 Package : gitlab Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1521 Summary ======= The package gitlab before...

[ASA-202102-9] ansible: information disclosure

Arch Linux Security Advisory ASA-202102-9 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 Package : ansible Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1437 Summary ======= T...

[ASA-202102-7] nextcloud: directory traversal

Arch Linux Security Advisory ASA-202102-7 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2020-36193 Package : nextcloud Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1464 Summary ======= The package nextcloud before...

[ASA-202102-1] firefox: multiple issues

Arch Linux Security Advisory ASA-202102-1 ========================================= Severity: High Date : 2021-02-01 CVE-ID : CVE-2021-23953 CVE-2021-23954 CVE-2021-23955 CVE-2021-23956 CVE-2021-23958 CVE-2021-23960 CVE-2021-23961 CVE-2021-23962 CVE-2021-23963 CVE-2021-23964 CVE-2021-23965 Packag...