Linux security Advisories

Two vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code if malformed image files are processed.

Anton Lydike discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could by bypassed via a malicious .desktop file.

update to 3.0.13, fix CVE-2021-23336 (rhbz#1931542)

The container ses/7/rook/ceph was updated. The following patches have been included in this update:

The container ses/7/cephcsi/csi-snapshotter was updated. The following patches have been included in this update:

The container suse/sle-micro/5.0/toolbox was updated. The following patches have been included in this update:

An update for wpa_supplicant is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Red Hat OpenShift Container Platform release 4.5.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release also includes a security update for Red Hat OpenShift Container Platform 4.5.

An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Two security issues have been detected in zeromq3. CVE-2021-20234

The container suse-sles-15-sp2-chost-byos-v20210304-hvm-ssd-x86_64 was updated. The following patches have been included in this update:

The container suse-sles-15-sp2-chost-byos-v20210304-gen2 was updated. The following patches have been included in this update:

The container sles-15-sp2-chost-byos-v20210304 was updated. The following patches have been included in this update:

The container sles-15-sp1-chost-byos-v20210304 was updated. The following patches have been included in this update:

The container suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64 was updated. The following patches have been included in this update:

The container suse-sles-15-sp1-chost-byos-v20210304-gen2 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

tpm2: CryptSym: fix AES output IV; a CVE has been filed for this issue

3.0.32