Linux Advisory Watch: April 2nd, 2021

Multiple vulnerabilities have been discovered in ldb, a LDAP-like embedded database built on top of TDB. CVE-2020-10730

It was discovered that missing input sanitising in the template() function of the Underscore JavaScript library could result in the execution of arbitrary code.

Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, which could result in denial of service or the execution of arbitrary code when opening a malformed image.

Multiple vulnerabilities were discovered in cURL, an URL transfer library: CVE-2020-8169

Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious user to mount a cross-site scripting attack.

Damian Lukowski discovered a flaw in spamassassin, a Perl-based spam filter using text analysis. Malicious rule configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios.

Ben Caller discovered that Pygments, a syntax highlighting package written in Python 3, used regular expressions which could result in denial of service.

The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-27918

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the stable distribution (buster), these problems have been fixed in

A NULL pointer dereference was found in the signature_algorithms processing in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

Fix for CVE-2021-28831.

Update to upstream 20210315 release ---- Update to upstream 20210208 release: * rtl_bt: Updates for RTL8822C, RTL8821C, added RTL8852A * Link Cypress brcmfmac firmwares to old brcm location * brcm NVRAM updates for Raspberry Pi, added 96boards Rock960 * QCom SM8250 (SD865) firmware for Compute, Audio DSPs, Adreno a650, venus VPU-1.0 * i915: Added firmware for DG1, ADL-S * Uodated bluetooth

Security fix for CVE-2020-11988

Upgrade to version 1.1.1.k Fixes CVEs CVE-2021-3449 CVE-2021-3450

Fix for CVE-2021-28831.

Upstream version 3.4.5. See http://mail-archives.apache.org/mod_mbox/www-announce/202103.mbox/%This email address is being protected from spambots. You need JavaScript enabled to view it.%3e for details. Fixes CVE-2020-1946

HVM soft-reset crashes toolstack [XSA-368, CVE-2021-28687] (#1940610)

Upgrade to version 1.1.1.k

Security fix for CVE-2021-3421, CVE-2021-20271 and CVE-2021-20266.

Security fix for CVE-2021-27807 and CVE-2021-27906

A possible security related issue is found on rubygem-kramdown where kramdown does not restrict custom Rouge formatters within Rouge::Formatters namespace. This issue is now assigned as CVE-2021-28834. This new rpm should fix this issue.

A possible security related issue is found on rubygem-kramdown where kramdown does not restrict custom Rouge formatters within Rouge::Formatters namespace. This issue is now assigned as CVE-2021-28834. This new rpm should fix this issue.

Security fix for CVE-2021-3421, CVE-2021-20271 and CVE-2021-20266.

The 5.11.10 stable kernel update contains a "quick revert" of some 5.11.9 commits that caused noisy warnings to show up in the kernel log of some systems. ---- The 5.11.9 stable update contains a number of important fixes across the tree. ---- The 5.11.8 stable kernel update contains a number of important fixes across the tree.

New upstream version (87.0) Release notes are available here - https://www.mozilla.org/en-US/firefox/87.0/releasenotes/

Update to WebKitGTK 2.32.0: * NPAPI plugins support have been removed. * System font scaling factor is correctly applied now. * New permission request API for MediaKeySystem access. * New API to remove individual scripts/stylesheets using WebKitUserContentManager. * Web inspector now shows detailed information about main loop frames. * The minimum required GStreamer

New upstream release 2.0.27

An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includes the backported upstream fix and should resolve the security issue.

Security fix for CVE-2020-11988

HVM soft-reset crashes toolstack [XSA-368, CVE-2021-28687] (#1940610)

This is the monthly .NET Core 3.1 update for March 2021. Release notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.13/3.1.13.md This update includes a fix for CVE-2021-26701: .NET Core Remote Code Execution Vulnerability

HVM soft-reset crashes toolstack [XSA-368, CVE-2021-28687] (#1940610)

This is the monthly .NET Core 3.1 update for March 2021. Release notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.13/3.1.13.md This update includes a fix for CVE-2021-26701: .NET Core Remote Code Execution Vulnerability

New upstream version (87.0) Release notes are available here - https://www.mozilla.org/en-US/firefox/87.0/releasenotes/

Update to Samba 4.14.2 Security fixes for CVE-2020-27840, CVE-2020-27840

Update to Samba 4.14.2 Security fixes for CVE-2020-27840, CVE-2020-27840

Fix for CVE-2021-28831.

New upstream version (87.0) Release notes are available here - https://www.mozilla.org/en-US/firefox/87.0/releasenotes/

The 5.11.9 stable update contains a number of important fixes across the tree.

New upstream release CGAL-5.1.3. Security fix for CVE-2020-28601, CVE-2020-28636, CVE-2020-35628, CVE-2020-35636.

This is the monthly .NET update for March 2021. Release notes: https://github.com/dotnet/core/blob/main/release-notes/5.0/5.0.4/5.0.4.md This update also contains fixes for CVE-2021-26701.

The 5.11.9 stable update contains a number of important fixes across the tree.

Fix a couple of merge mistakes made when rebasing to 2.06~rc1 ---- Update to 2.06~rc1 to fix a bunch of CVEs ---- Fix config file generation failing due invalid petitboot version value ---- Fix keyboards that report IBM PC AT scan codes (rmetrich)

Security fix for CVE-2021-27807 and CVE-2021-27906

New version 2.3.1 is released. Note that a possible security related issue is found on the previous version of rubygem-kramdown where kramdown does not restrict custom Rouge formatters within Rouge::Formatters namespace. This issue is now assigned as CVE-2021-28834. This new rpm should fix this issue.

A vulnerability in SQLite could lead to remote code execution.

Multiple vulnerabilities have been found in OpenSSL, the worst of which could allow remote attackers to cause a Denial of Service condition.

A vulnerability in Redis could lead to remote code execution.

Multiple vulnerabilities have been found in Salt, the worst of which could allow remote attacker to execute arbitrary commands.

An update for openvswitch2.11 is now available in Red Hat Virtualization. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For

Red Hat OpenShift Container Platform release 4.6.23 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for mariadb is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for curl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for nss-softokn is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for tomcat is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

An update for perl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Red Hat OpenShift Container Platform release 4.7.4 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Red Hat OpenShift Container Platform release 4.7.4 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For

An update for flatpak is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Red Hat OpenShift Container Platform release 3.11.404 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update of the Red Hat OpenShift Container Platform 3.11 and 4.6/4.7 container images is now available for Red Hat AMQ Online. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

New xterm packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sles12sp5 was updated. The following patches have been included in this update:

Damian Lukowski discovered a flaw in spamassassin, a Perl-based spam filter using text analysis. Malicious rule configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios.

The gunzip decompressor of Busybox, tiny utilities for small and embedded systems, mishandled the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.

node-underscore and libjs-underscore are vulnerable to Arbitrary Code Execution via the template function, particulary when a variable property is passed as an argument as it is not sanitized.

Several issues have been found by ClusterFuzz in leptonlib, an image processing library.

Two issues have been found in ldb, an LDAP-like embedded database, for example used with samba.

The package python2 before version 2.7.18-3 is vulnerable to multiple issues including arbitrary code execution, url request injection and denial of service.

The package godot before version 3.2.3-2 is vulnerable to arbitrary code execution.

The package wpewebkit before version 2.30.6-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, information disclosure and sandbox escape.

The package webkit2gtk before version 2.30.6-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, information disclosure and sandbox escape.

The package dotnet-sdk-3.1 before version 3.1.13.sdk113-1 is vulnerable to arbitrary code execution.

The package dotnet-runtime-3.1 before version 3.1.13.sdk113-1 is vulnerable to arbitrary code execution.

The package dotnet-sdk before version 5.0.4.sdk104-1 is vulnerable to arbitrary code execution.

The package dotnet-runtime before version 5.0.4.sdk104-1 is vulnerable to arbitrary code execution.

The package vivaldi before version 3.7.2218.45-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, access restriction bypass, content spoofing, incorrect calculation and information disclosure.

The package libebml before version 1.4.2-1 is vulnerable to arbitrary code execution.

The package dotnet-sdk before version 5.0.3.sdk103-2 is vulnerable to multiple issues including arbitrary code execution and denial of service.

The package dotnet-runtime before version 5.0.3.sdk103-2 is vulnerable to multiple issues including arbitrary code execution and denial of service.

The package awstats before version 7.8-3 is vulnerable to directory traversal.

The package groovy before version 2.5.14-1 is vulnerable to privilege escalation.

The package gitlab before version 13.9.4-1 is vulnerable to arbitrary code execution.

The package busybox before version 1.32.1-4 is vulnerable to denial of service.

The package mkinitcpio-busybox before version 1.32.1-3 is vulnerable to denial of service.

The package openssl before version 1.1.1.k-1 is vulnerable to multiple issues including certificate verification bypass and denial of service.

Upstream details at : https://access.redhat.com/errata/RHSA-2021:0996

Upstream details at : https://access.redhat.com/errata/RHSA-2021:0992

flatpak: "file forwarding" feature can be used to gain unprivileged access to files (CVE-2021-21381) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE - Scientific Linux Development Team

This update upgrades Firefox to version 78.9.0 ESR. * Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read (CVE-2021-23981) * Mozilla: Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9 (CVE-2021-23987) * Mozilla: Internal network hosts could have been probed by a malicious webpage (CVE-2021-23982) * Mozilla: Malicious extensions could have spoofed [More...]

This update upgrades Thunderbird to version 78.9.0. * Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read (CVE-2021-23981) * Mozilla: Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9 (CVE-2021-23987) * Mozilla: Internal network hosts could have been probed by a malicious webpage (CVE-2021-23982) * Mozilla: Malicious extensions could have spoofed [More...]

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that solves two vulnerabilities and has one errata is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that solves two vulnerabilities and has one errata is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

This update from 4.16.1.2 to 4.16.1.3 fixes bugs several bugs the RPM package manager, including several security issues: * Fix arbitrary data copied from signature header past signature checking (CVE-2021-3421) * Fix signature check bypass with corrupted package (CVE-2021-20271)

Updated privoxy package fixes security vulnerabilities: The privoxy package has been updated to version 3.0.32, fixing five security issues and several other bugs.

Updated python and python3 security vulnerability: The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using

Texture upload into an unbound backing buffer resulted in an out-of-bound read. (CVE-2021-23981) Angle graphics library out of date. (MOZ-2021-0002)

Texture upload into an unbound backing buffer resulted in an out-of-bound read. (CVE-2021-23981) Angle graphics library out of date. (MOZ-2021-0002)

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that

Beast Glatisant and Jelmer Vernooij reported that python-aiohttp is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website (CVE-2021-21330). References:

radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section (CVE-2020-16269). radare2 4.5.0 misparses signature information in PE files, causing a

Memory leak in client induced by malicious server without CURVE/ZAP (rhbz#1921972). Stack overflow on server running PUB/XPUB socket (rhbz#1921976).

A PGP signature bypass was found in fwupd, which could lead to possible installation of unsigned firmware (CVE-2020-10759). References: - https://bugs.mageia.org/show_bug.cgi?id=26854