Linux Advisory Watch: May 14th, 2021

Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory content.

A buffer overflow was discovered in Graphviz, which could potentially result in the execution of arbitrary code when processing a malformed file.

Jemery Galindo discovered an out-of-bounds memory access in Hivex, a library to parse Windows Registry hive files. For the stable distribution (buster), this problem has been fixed in

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

**MariaDB 10.4.19** Release notes: https://mariadb.com/kb/en/mariadb-10419-release-notes/

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

The 5.11.9 stable kernel update contains a number of important fixes across the tree.

**PHP version 7.4.19** (06 May 2021) **PDO_pgsql:** * Reverted bug fix for php#80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR). (Matteo) ---- **PHP version 7.4.18** (29 Apr 2021) **Core:** * Fixed bug php#80781 (Error handler that throws ErrorException infinite loop). (Nikita) * Fixed bug php#75776 (Flushing streams with compression filter is broken). (cmb) **Dba:**

**Redis 6.0.13** Released Mon May 3 19:00:00 IST 2021 Upgrade urgency: SECURITY, Contains fixes to security issues that affect authenticated client connections. LOW otherwise. Integer overflow in STRALGO LCS command (**CVE-2021-29477**): An integer overflow bug in Redis version 6.0 or newer could be exploited using the STRALGO LCS command to corrupt the heap and

- Security fix for CVE-2018-1000632 - Update to upstream 2.0.3 bugfix release - Fix Fedora 34 FTBFS

**Version 6.4.1** (April 29th, 2021) * **SECURITY** Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details * Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as `ssh2` * Ensure method signature consistency in `doCallback` calls * Ukrainian language update * Add

- New upstream version (88.0.1) - Fixes CVE-2021-29952 (https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/

fix CVE-2021-31542, also fix for CVE-2021-31542

**PHP version 7.4.19** (06 May 2021) **PDO_pgsql:** * Reverted bug fix for php#80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR). (Matteo) ---- **PHP version 7.4.18** (29 Apr 2021) **Core:** * Fixed bug php#80781 (Error handler that throws ErrorException infinite loop). (Nikita) * Fixed bug php#75776 (Flushing streams with compression filter is broken). (cmb) **Dba:**

**Redis 6.2.3** Released Mon May 3 19:00:00 IST 2021 Upgrade urgency: SECURITY, Contains fixes to security issues that affect authenticated client connections. LOW otherwise. Integer overflow in STRALGO LCS command (**CVE-2021-29477**): An integer overflow bug in Redis version 6.0 or newer could be exploited using the STRALGO LCS command to corrupt the heap and potentially result in remote code

**MySQL 8.0.24** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-24.html

Update to Chromium 90.0.4430.93. Fixes the following security issues: CVE-2021-21206 CVE-2021-21220 CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21204 CVE-2021-21221 CVE-2021-21207 CVE-2021-21208 CVE-2021-21209 CVE-2021-21210 CVE-2021-21211 CVE-2021-21212 CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216 CVE-2021-21217 CVE-2021-21218 CVE-2021-21219

- Security fix for CVE-2018-1000632 - Update to upstream 2.0.3 bugfix release - Fix Fedora 34 FTBFS

**Version 6.4.1** (April 29th, 2021) * **SECURITY** Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details * Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as `ssh2` * Ensure method signature consistency in `doCallback` calls * Ukrainian language update * Add

This update fixes several issues in djvulibre. These are mostly related to opening of corrupted files.

**PHP version 7.4.19** (06 May 2021) **PDO_pgsql:** * Reverted bug fix for php#80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR). (Matteo) ---- **PHP version 7.4.18** (29 Apr 2021) **Core:** * Fixed bug php#80781 (Error handler that throws ErrorException infinite loop). (Nikita) * Fixed bug php#75776 (Flushing streams with compression filter is broken). (cmb) **Dba:**

Update to Chromium 90.0.4430.93. Fixes the following security issues: CVE-2021-21206 CVE-2021-21220 CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21204 CVE-2021-21221 CVE-2021-21207 CVE-2021-21208 CVE-2021-21209 CVE-2021-21210 CVE-2021-21211 CVE-2021-21212 CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216 CVE-2021-21217 CVE-2021-21218 CVE-2021-21219

Update to latest upstream version.

This update fixes several issues in djvulibre. These are mostly related to opening of corrupted files.

Backport patches for CVE-2021-23169, CVE-2021-26260, CVE-2021-23215

#### python-markdown2 2.4.0 - [pull #377] Fixed bug breaking strings elements in metadata lists - [pull #380] When rendering fenced code blocks, also add the `language-LANG` class - [pull #387] Regex DoS fixes

This update backports security fixes for CVE-2021-29470 and CVE-2021-29473.

Fix CVE-2021-3516, CVE-2021-3517, CVE-2021-3518 and CVE-2021-3537

Backport patch for CVE-2021-23169.

This update backports security fixes for CVE-2021-29470 and CVE-2021-29473.

#### python-markdown2 2.4.0 - [pull #377] Fixed bug breaking strings elements in metadata lists - [pull #380] When rendering fenced code blocks, also add the `language-LANG` class - [pull #387] Regex DoS fixes

CVE-2019-19004 and CVE-2019-19005

#### python-markdown2 2.4.0 - [pull #377] Fixed bug breaking strings elements in metadata lists - [pull #380] When rendering fenced code blocks, also add the `language-LANG` class - [pull #387] Regex DoS fixes

backported fix for CVE-2021-20095 from Babel 2.9.1

Update to latest bug-fix release including security fixes: https://lib.openmpt.org/libopenmpt/2021/04/11/security-updates-0.5.8-0.4.20-0.3.29/

backported fix for CVE-2021-20095 from Babel 2.9.1

Update to latest bug-fix release including security fixes: https://lib.openmpt.org/libopenmpt/2021/04/11/security-updates-0.5.8-0.4.20-0.3.29/

The 5.11.18 stable kernel update contains a number of important fixes across the tree.

The 5.11.18 stable kernel update contains a number of important fixes across the tree.

The 5.11.18 stable kernel update contains a number of important fixes across the tree.

Update to Samba 4.12.15 - Security fixes for CVE-2021-20254

This update fixes several issues in djvulibre. These are mostly related to opening of corrupted files.

Update to Samba 4.13.8 - Security fixes for CVE-2021-20254

Red Hat AMQ Streams 1.6.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for rh-dotnet31-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for rh-dotnet50-dotnet is now available for .NET on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat Ceph Storage 3.3 - Extended Life Support on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Openshift Logging Bug Fix Release (5.0.3) This release includes a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update is now available for Red Hat AMQ Clients 2.9.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

The container suse/sle15 was updated. The following patches have been included in this update:

The container sles-15-sp2-chost-byos-v20210506 was updated. The following patches have been included in this update:

The container suse-sles-15-sp2-chost-byos-v20210506-gen2 was updated. The following patches have been included in this update:

The container suse/sles12sp5 was updated. The following patches have been included in this update:

The container suse/sles12sp4 was updated. The following patches have been included in this update:

The container suse/sles12sp3 was updated. The following patches have been included in this update:

The container suse-sles-15-sp2-chost-byos-v20210506-hvm-ssd-x86_64 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container ses/7/rook/ceph was updated. The following patches have been included in this update:

The container ses/7/ceph/ceph was updated. The following patches have been included in this update:

One security issue has been discovered in libgetdata CVE-2021-20204

CVE-2018-10196 NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library allows

Several issues were found in Redmine, a project management web application, which could lead to cross-site scripting, information disclosure, and reading arbitrary files from the server.

It was discovered that there was a potential memory corruption vulnerability in the lz4 compression algorithm library. For Debian 9 "Stretch", this problem has been fixed in version

Jemery Galindo discovered an out-of-bounds memory access in Hivex, a library to parse Windows Registry hive files. For Debian 9 stretch, this problem has been fixed in version

CVE-2021-22885 There is a possible information disclosure/unintended method execution vulnerability in Action Pack when using the

It was discovered that composer, a dependency manager for PHP, did not properly sanitize Mercurial URLs, which could lead to arbitrary code execution.

Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files, which could cause denial of service via application crash when parsing specially crafted files.

The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update includes a patch from upstream REL_31 release which fix the issue.

Several security vulnerabilities have been discovered in Unbound, a validating, recursive, caching DNS resolver, by security researchers of X41 D-SEC located in Aachen, Germany. Integer overflows, assertion failures, an out-of-bound write and an infinite loop vulnerability may lead to a denial-of-service or

It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework.

postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694) * postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695) * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other [More...]

An update that solves two vulnerabilities and has one errata is now available.

An update that solves two vulnerabilities and has 55 fixes is now available.

An update that solves two vulnerabilities and has three fixes is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes 7 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that contains security fixes can now be installed.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves three vulnerabilities, contains 8 features and has one errata is now available.

An update that fixes 26 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability and has two fixes is now available.

Some severe exploitable vulnerabilities were discovered and fixed (CVE-2021-2154 and CVE-2021-2166). This is a regular update, which brings the usual improvements in innodb, galera. See upstream advisory.

This update fixes a divide-by-zero crash bug (and probable vulnerability) in interlaced images with extra compressed data beyond the nominal end of the image data. (found by "chiba of topsec alpha lab") (rhbz#1949800). References:

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files (CVE-2020-13977).

Deleting an attachment of a decrypted encrypted message stored on a remote server (e.g. an IMAP server) causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content.

An authentication flaw was found in ceph. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new

Pagure before 5.6 allows XSS via the templates/blame.html blame view. References: - https://bugs.mageia.org/show_bug.cgi?id=27487 - https://bugzilla.suse.com/show_bug.cgi?id=1176987