Linux Advisory Watch: November 13th, 2020

Ken Gaillot discovered a vulnerability in the Pacemaker cluster resource manager: If ACLs were configured for users in the "haclient" group, the ACL restrictions could be bypassed via unrestricted IPC communication, resulting in cluster-wide arbitrary code execution with

It was discovered that codemirror, a browser-based text editor implemented in JavaScript, was vulnerable to regular expression denial-of-service.

A use-after-free was found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For the stable distribution (buster), this problem has been fixed in

Two vulnerabilities were discovered in moin, a Python clone of WikiWiki. CVE-2020-15275

It was discovered that a boundary check in libexif, a library to parse EXIF files, could be optimised away by the compiler, resulting in a potential buffer overflow.

It was discovered that raptor2, an RDF parser library, is prone to heap-based buffer overflow flaws, which could result in denial of service, or potentially the execution of arbitrary code, if a specially crafted file is processed.

Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks, escalate privileges, run arbitrary

Fabian Vogt discovered a flaw in sddm, a modern display manager for X11. A local attacker can take advantage of a race condition when creating the Xauthority file to escalate privileges.

Updates the nss package to upstream NSS 3.58 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes -

Updates the nss package to upstream NSS 3.58 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes -

java-latest-openjdk October 2020 CPU update

- New upstream release (82.0.3) ---- - Built with mozilla-openh264 weak dependency ---- - Require mozilla-openh264 package - Add firefox testing scripts

update to xen-4.13.2 ---- x86 PV guest INVLPG-like flushes may leave stale TLB entries [XSA-286, CVE-2020-27674] (#1891092)

revised patch for XSA-286 (mitigating performance impact) ---- x86 PV guest INVLPG-like flushes may leave stale TLB entries [XSA-286, CVE-2020-27674] (#1891092) simplify grub scripts (patches from Thierry Vignaud ) some fixes for gcc 11

**MariaDB 10.3.26** **MariaDB connector C/C++ 3.1.11** **Galera 25.3.26** Release notes: https://mariadb.com/kb/en/mariadb-10326-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/ ---- **MariaDB 10.3.25** Release notes: https://mariadb.com/kb/en/mariadb-10325-release-notes/

**MariaDB 10.3.26** **MariaDB connector C/C++ 3.1.11** **Galera 25.3.26** Release notes: https://mariadb.com/kb/en/mariadb-10326-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/ ---- **MariaDB 10.3.25** Release notes: https://mariadb.com/kb/en/mariadb-10325-release-notes/

**MariaDB 10.3.26** **MariaDB connector C/C++ 3.1.11** **Galera 25.3.26** Release notes: https://mariadb.com/kb/en/mariadb-10326-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/ ---- **MariaDB 10.3.25** Release notes: https://mariadb.com/kb/en/mariadb-10325-release-notes/

**WordPress 5.5.3 Maintenance Release** This maintenance release fixes an issue introduced in WordPress 5.5.2 which makes it impossible to install WordPress on a brand new website that does not have a database connection configured. ---- **WordPress 5.5.2 Security and Maintenance Release** **Security Updates** * Props to Alex Concha of the WordPress Security Team for their work in hardening

- New upstream release (82.0.3)

java-latest-openjdk October CPU update

New upstream release: - fixes CVE-2020-14342 cifs-utils: shell command injection in mount.cifs - adds `smb2-quota` tool - adds `mount.smb3` as a symlink to `mount.cifs`

**WordPress 5.5.3 Maintenance Release** This maintenance release fixes an issue introduced in WordPress 5.5.2 which makes it impossible to install WordPress on a brand new website that does not have a database connection configured. ---- **WordPress 5.5.2 Security and Maintenance Release** **Security Updates** * Props to Alex Concha of the WordPress Security Team for their work in hardening

java-latest-openjdk October CPU update

New upstream release: - fixes CVE-2020-14342 cifs-utils: shell command injection in mount.cifs - adds `smb2-quota` tool - adds `mount.smb3` as a symlink to `mount.cifs`

**WordPress 5.5.3 Maintenance Release** This maintenance release fixes an issue introduced in WordPress 5.5.2 which makes it impossible to install WordPress on a brand new website that does not have a database connection configured. ---- **WordPress 5.5.2 Security and Maintenance Release** **Security Updates** * Props to Alex Concha of the WordPress Security Team for their work in hardening

Update to Samba 4.12.10 ---- Update to Samba 4.12.9 - Security fixes for CVE-2020-14318, CVE-2020-14323 and CVE-2020-14383

**MariaDB 10.4.16** **MariaDB Connector C/C++ 3.1.11** **Galera 26.4.6** Release notes: https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/

**MariaDB 10.4.16** **MariaDB Connector C/C++ 3.1.11** **Galera 26.4.6** Release notes: https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/

**MariaDB 10.4.16** **MariaDB Connector C/C++ 3.1.11** **Galera 26.4.6** Release notes: https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/

Follow stable-0.7.0 branch to v0.7.4 with security-related fixes

- Fix CVE-2020-28196 (DoS in ASN.1 parsing due to missing recursion depth checks) - fc32 + fc33 only: pull-up to rawhide

**MariaDB 10.4.16** **MariaDB Connector C/C++ 3.1.11** **Galera 26.4.6** Release notes: https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/

**MariaDB 10.4.16** **MariaDB Connector C/C++ 3.1.11** **Galera 26.4.6** Release notes: https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/

**MariaDB 10.4.16** **MariaDB Connector C/C++ 3.1.11** **Galera 26.4.6** Release notes: https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/

Follow stable-0.7.0 branch to v0.7.4 with security-related fixes

Follow stable-0.7.0 branch to v0.7.4 with security-related fixes

Security fix for CVE-2020-15999.

Update to CVE release 3001.3-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592

Fix executable hardening (PIC/PIE)

Update to v2.1.4. Contains security fix for CVE-2020-15238.

Update to Chromium 86. A few big things here: 1. Upstream has made hardware accelerated video support (VAAPI) for Linux possible without patches. One key difference is that the patchset used previously in Fedora enabled it by default and upstream's approach disables it by default. To enable Hardware accelerated video in chromium, open this link in chromium: chrome://flags/#enable-

Update to CVE release 3001.3-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592

Fix executable hardening (PIC/PIE)

Update to v2.1.4. Contains security fix for CVE-2020-15238.

Update to Chromium 86. A few big things here: 1. Upstream has made hardware accelerated video support (VAAPI) for Linux possible without patches. One key difference is that the patchset used previously in Fedora enabled it by default and upstream's approach disables it by default. To enable Hardware accelerated video in chromium, open this link in chromium: chrome://flags/#enable-

Update to CVE release 3002.1-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592

Fix executable hardening (PIC/PIE)

Update to v2.1.4. Contains security fix for CVE-2020-15238.

A vulnerability has been discovered in MariaDB which could result in the arbitrary execution of code.

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Multiple vulnerabilities have been found in Salt, the worst of which could result in the arbitrary execution of code.

A privilege escalation vulnerability has been discovered in Blueman.

A buffer overflow in tmux might allow remote attacker(s) to execute arbitrary code.

Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code.

Multiple vulnerabilities have been found in Wireshark, the worst of which could result in a Denial of Service condition.

A use-after-free in Mozilla Firefox might allow remote attacker(s) to execute arbitrary code.

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for rh-nodejs12-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for microcode_ctl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for microcode_ctl is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for microcode_ctl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for skopeo is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for librepo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for resource-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for bind is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for unixODBC is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for kernel is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions.

An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each

A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update is now available for Red Hat Decision Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for libX11 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for freetype is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for thunderbird is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for freetype is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for freetype is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for freetype is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves 53 vulnerabilities, contains 14 features and has 5 fixes is now available.

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

An update that solves 18 vulnerabilities and has two fixes is now available.

An update that fixes one vulnerability is now available.

An update that fixes 18 vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that solves 11 vulnerabilities and has 58 fixes is now available.

An update that fixes two vulnerabilities is now available.

An update that solves 8 vulnerabilities and has 38 fixes is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that solves 8 vulnerabilities and has 38 fixes is now available.

An update that solves two vulnerabilities and has 25 fixes is now available.

An update that fixes two vulnerabilities is now available.

An update that solves two vulnerabilities and has 25 fixes is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

An update that solves four vulnerabilities and has one errata is now available.

An update that solves 18 vulnerabilities and has one errata is now available.

An update that solves one vulnerability and has 35 fixes is now available.

An update that fixes 20 vulnerabilities is now available.

An update that solves four vulnerabilities and has 20 fixes is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes 6 vulnerabilities is now available.

An update that solves four vulnerabilities and has 22 fixes is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that solves three vulnerabilities and has 7 fixes is now available.

An update that solves three vulnerabilities and has 8 fixes is now available.

An update that fixes 5 vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes 5 vulnerabilities is now available.

An update that solves three vulnerabilities and has 7 fixes is now available.

An update that solves three vulnerabilities and has 8 fixes is now available.

An update that solves four vulnerabilities and has 22 fixes is now available.

An update that solves three vulnerabilities and has 7 fixes is now available.

An update that solves three vulnerabilities and has three fixes is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes 16 vulnerabilities is now available.

An update that fixes 5 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes 16 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes one vulnerability is now available.

USN-4607-1 introduced a regression in OpenJDK.

libmaxminddb could be made to crash if it received specially crafted data.

USN-4171-1 introduced a regression in Apport.

USN-4628-1 introduced a regression in the Intel Microcode for some processors.

OpenLDAP could be made to crash or run programs if it received specially crafted network traffic.

Several security issues were fixed in Intel Microcode.

raptor2 could be made to crash or run programs as your login if it opened a specially crafted file.

Several security issues were fixed in MoinMoin.

The system could be made to expose sensitive information.

Several security issues were fixed in the Linux kernel.

Firefox could be made to crash or run programs as your login if it opened a malicious website.

libexif could be made to execute arbitrary code if it received a specially crafted input.

Pacemaker could be made to run programs as an administrator.

OpenLDAP could be made to crash or run programs if it received specially crafted network traffic.

netqmail could be made to crash if it received specially crafted input.

USN-4599-1 and USN-4599-2 caused some minor regressions in Firefox.

dom4j could be made to crash or run programs if it received a specially crafted file.

tmux could be made to crash or execute arbitrary code if it received a specially crafted input.

Li Fei found that libproxy, a library for automatic proxy configuration management, was vulnerable to a buffer overflow vulnerability when receiving a large PAC file from a server without a Content-Length header in the response.

A use-after-free was found in Thunderbird, which could potentially result in the execution of arbitrary code. For Debian 9 stretch, this problem has been fixed in version

An ACL bypass flaw was found in pacemaker, a cluster resource manager. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration.

Two vulnerabilities were discovered in moin, a Python clone of WikiWiki. CVE-2020-15275

The ppp de-capsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. The buffer should be big enough to hold the captured data, but it

It was discovered that ZeroMQ, a lightweight messaging kernel library does not properly handle connecting peers before a handshake is completed. A remote, unauthenticated client connecting to an application using the libzmq library, running with a socket

A heap-based buffer over-read has been found in libmaxminddb, an IP geolocation database library. This could be exploited when the mmdblookup tool is used to open a specially crafted database file.

golang-go.crypto was recently updated with a fix for CVE-2019-11840. This in turn requires all packages that use the affected code to be recompiled in order to pick up the security fix.

A privilege escalation was discovered in Sympa, a modern mailing list manager. It is fixed when Sympa is used in conjunction with common MTAs (such as Exim or Postfix) by disabling a setuid executable, although no fix is currently available for all environments (such as

For Debian 9 stretch, these problems have been fixed in version 0.48.0-2+deb9u4. We recommend that you upgrade your poppler packages.

In libexif/exif-entry.c, through libexif 0.6.21-2+deb9u4, compiler optimization could remove a buffer overflow check, making a buffer overflow possible with some EXIF tags.

The server component of Apache Guacamole, a remote desktop gateway, did not properly validate data received from RDP servers. This could result in information disclosure or even the execution of arbitrary code.

The package linux-hardened before version 5.9.8.a-1 is vulnerable to multiple issues including denial of service and information disclosure.

The package chromium before version 86.0.4240.193-1 is vulnerable to arbitrary code execution.

The package sddm before version 0.19.0-1 is vulnerable to privilege escalation.

The package salt before version 2019.2.7-1 is vulnerable to multiple issues including arbitrary command execution and access restriction bypass.

The package firefox before version 82.0.3-1 is vulnerable to arbitrary code execution.

The package gdm before version 3.38.2-1 is vulnerable to privilege escalation.

The package matrix-synapse before version 1.21.0-1 is vulnerable to cross-site scripting.

The package wordpress before version 5.5.3-1 is vulnerable to multiple issues including arbitrary code execution, cross-site request forgery, cross-site scripting, insufficient validation and privilege escalation.

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4947

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4330

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4946

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4183

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4056

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4953

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4182

Upstream details at : https://access.redhat.com/errata/RHSA-2020:4348

An update that fixes two vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that solves three vulnerabilities and has 7 fixes is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves two vulnerabilities and has two fixes is now available.

An update that fixes one vulnerability is now available.

An update that solves two vulnerabilities and has two fixes is now available.

An update that fixes one vulnerability is now available.

An update that solves three vulnerabilities and has 6 fixes is now available.

An update that fixes 7 vulnerabilities is now available.

An update that fixes 39 vulnerabilities is now available.

Fabian Vogt discovered a flaw in sddm before 0.19.0. A local attacker can take advantage of a race condition when creating the Xauthority file to escalate privileges (CVE-2020-28049). References:

Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. (CVE-2019-19917) Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. (CVE-2019-19918)

ACL restrictions bypass. (CVE-2020-25654) References: - https://bugs.mageia.org/show_bug.cgi?id=27472 - https://www.openwall.com/lists/oss-security/2020/10/27/1

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP. An unauthenticated remote attacker can use this flaw to cause a denial of service (slapd daemon crash) via a specially crafted packet (CVE-2020-25692).

It was discovered that Docker could be made to expose sensitive information when processing URLs in container image manifests. A remote attacker could use this to trick the user and obtain the user's registry credentials (CVE-2020-15157).

SFD_GetFontMetaData() insufficient CVE-2020-5395 backport. (CVE-2020-25690) References: - https://bugs.mageia.org/show_bug.cgi?id=27563 - https://access.redhat.com/errata/RHSA-2020:4844

The latest release of mariadb fixes some undisclosed easily exploitable vulnerabilities. (CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 and CVE-2020-14812). Additionally some bugs are fixed:

It was discovered that junit contained a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not allow other users

Vaisha Bernard discovered that blueman did not properly sanitize input on the D-Bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service (CVE-2020-15238).

The suricata package has been updated to version 4.1.9, which fixes security issues and other bugs. See the upstream announcements for details. References: - https://bugs.mageia.org/show_bug.cgi?id=27475

An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. (CVE-2020-8820)

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header. (CVE-2020-26154) References:

The implementation of realpath in libuv before 1.39 incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes (CVE-2020-8252). References: