Linux security Advisories

Fix for multiple CVEs

fix CVE-2020-27780: authentication bypass when the user doesn't exist

Update to upstream 17.9.0 for bug and security fixes

Fix for multiple CVEs

Security fix for CVE-2020-8277.

The webkit2 package has been updated to version 2.30.3, fixing several security issues and other bugs. A type confusion issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory handling (CVE-2020-9948).

Response Splitting attack in the HTTP server of WEBrick (CVE-2017-17742). Delete directory using symlink when decompressing tar (CVE-2019-8320). Escape sequence injection vulnerability in verbose (CVE-2019-8321).

An update that solves 8 vulnerabilities, contains three features and has 6 fixes is now available.

An update that fixes 10 vulnerabilities, contains one feature is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes 12 vulnerabilities is now available.

Two vulnerabilities were found in the Archive_Tar PHP module, used by Drupal, which could result in the execution of arbitrary code if a malicious user is allowed to upload tar archives.