Linux security Advisories

An update that contains security fixes can now be installed.

An update that fixes one vulnerability is now available.

An update that solves two vulnerabilities and has one errata is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability and has 5 fixes is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves two vulnerabilities and has one errata is now available.

This updates flatpak from 1.8 to new 1.10 stable series. The major new feature in this series compared to 1.8 is the support for the new repo format which should make updates faster and download less data. For details what's new in 1.10, see https://github.com/flatpak/flatpak/releases/tag/1.10.0 This also includes a security update that fixes a sandbox escape where a malicious

The 5.10.7 stable kernel update contains a number of important fixes across the tree.

The 5.10.7 stable kernel update contains a number of important fixes across the tree.

security fix for GHSA-hq37-853p-g5cf: "Regular Expression Denial of Service (REDoS)", rated as "moderate severity" published 17 hours ago by liZe

The 5.10.7 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.

The 5.10.7 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.

**PHP version 7.4.14** (07 Jan 2021) **Core:** * Fixed bug php#74558 (Can't rebind closure returned by Closure::fromCallable()). (cmb) * Fixed bug php#80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION). (cmb) * Fixed bug php#72964 (White space not unfolded for CC/Bcc headers). (cmb) * Fixed bug php#80362 (Running dtrace scripts can cause php to crash). (al at coralnet dot

The package atftp before version 0.7.2-3 is vulnerable to denial of service.

The package wavpack before version 5.3.0-2 is vulnerable to arbitrary code execution.

The package mediawiki before version 1.35.1-1 is vulnerable to multiple issues including cross-site scripting and information disclosure.

The package coturn before version 4.5.2-1 is vulnerable to insufficient validation.