Advisory: ArchLinux Essential and Critical Security Patch Updates
Find the information you need for your favorite open source distribution .
Find the information you need for your favorite open source distribution .
The package electron12 before version 12.0.13-1 is vulnerable to arbitrary code execution.
The package pigeonhole before version 0.5.15-1 is vulnerable to denial of service.
The package dovecot before version 2.3.15-1 is vulnerable to information disclosure.
The package tpm2-tools before version 5.1.1-1 is vulnerable to man-in- the-middle.
The package exiv2 before version 0.27.4-1 is vulnerable to multiple issues including arbitrary code execution, denial of service and information disclosure.
The package keycloak before version 14.0.0-1 is vulnerable to certificate verification bypass.
The package helm before version 3.6.1-1 is vulnerable to information disclosure.
The package matrix-appservice-irc before version 0.27.0-1 is vulnerable to insufficient validation.
The package tor before version 0.4.5.9-1 is vulnerable to denial of service.
The package libslirp before version 4.6.0-1 is vulnerable to information disclosure.
The package nginx-mainline before version 1.21.0-1 is vulnerable to arbitrary code execution.
The package vivaldi before version 4.0.2312.33-1 is vulnerable to arbitrary code execution.
The package chromium before version 91.0.4472.114-1 is vulnerable to arbitrary code execution.
The package opera before version 77.0.4054.90-1 is vulnerable to multiple issues including arbitrary code execution and incorrect calculation.
The package connman before version 1.40-1 is vulnerable to arbitrary code execution.
The package grub before version 2:2.06-1 is vulnerable to multiple issues including access restriction bypass and arbitrary code execution.
The package go before version 2:1.16.5-1 is vulnerable to multiple issues including insufficient validation, url request injection and denial of service.
The package python-django before version 3.2.4-1 is vulnerable to multiple issues including insufficient validation and directory traversal.
The package radare2 before version 5.3.1-1 is vulnerable to denial of service.
The package thefuck before version 3.31-1 is vulnerable to arbitrary file overwrite.