The following security advisories has been published for Arch Linux:

ASA-201802-11: phpmyadmin: cross-site scripting
ASA-201802-12: wavpack: arbitrary code execution
ASA-201802-13: lib32-wavpack: arbitrary code execution
ASA-201802-14: unixodbc: arbitrary code execution

ASA-201802-11: phpmyadmin: cross-site scripting

Arch Linux Security Advisory ASA-201802-11
==========================================

Severity: Medium
Date : 2018-02-23
CVE-ID : CVE-2018-7260
Package : phpmyadmin
Type : cross-site scripting
Remote : Yes
Link : https://security.archlinux.org/AVG-630

Summary
=======

The package phpmyadmin before version 4.7.8-1 is vulnerable to cross-
site scripting.

Resolution
==========

Upgrade to 4.7.8-1.

# pacman -Syu "phpmyadmin>=4.7.8-1"

The problem has been fixed upstream in version 4.7.8.

Workaround
==========

None.

Description
===========

Cross-site scripting (XSS) vulnerability in db_central_columns.php in
phpMyAdmin before 4.7.8 allows remote authenticated users to inject
arbitrary web script or HTML via a crafted URL.

Impact
======

A remote authenticated attacker is able to inject arbitrary javascript
via a crafted URL.

References
==========

https://udiniya.wordpress.com/2018/02/21/a-tale-of-stealing-session-cookie-in-phpmyadmin/
https://www.phpmyadmin.net/security/PMASA-2018-1/
https://github.com/phpmyadmin/phpmyadmin/commit/d2886a3e8745e8845633ae8a0054b5ee4d8babd5
https://security.archlinux.org/CVE-2018-7260

ASA-201802-12: wavpack: arbitrary code execution

Arch Linux Security Advisory ASA-201802-12
==========================================

Severity: High
Date : 2018-02-23
CVE-ID : CVE-2018-6767 CVE-2018-7253 CVE-2018-7254
Package : wavpack
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-631

Summary
=======

The package wavpack before version 5.1.0-2 is vulnerable to arbitrary
code execution.

Resolution
==========

Upgrade to 5.1.0-2.

# pacman -Syu "wavpack>=5.1.0-2"

The problems have been fixed upstream in version 5.1.0.

Workaround
==========

None.

Description
===========

- CVE-2018-6767 (arbitrary code execution)

A stack-based buffer over-read in the ParseRiffHeaderConfig function of
cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a
denial-of-service attack or possibly have unspecified other impact via
a maliciously crafted RF64 file.

- CVE-2018-7253 (arbitrary code execution)

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of
WavPack 5.1.0 allows a remote attacker to cause a denial-of-service
(heap-based buffer over-read) or possibly overwrite the heap via a
maliciously crafted DSDIFF file.

- CVE-2018-7254 (arbitrary code execution)

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack
5.1.0 allows a remote attacker to cause a denial-of-service (global
buffer over-read), or possibly trigger a buffer overflow or incorrect
memory allocation, via a maliciously crafted CAF file.

Impact
======

A remote attacker is able to execute arbitrary code on the affected
host via maliciously crafted files.

References
==========

https://bugs.archlinux.org/task/57609
https://github.com/dbry/WavPack/commit/d5bf76b5a88d044a1be1d5656698e3ba737167e5
https://github.com/dbry/WavPack/issues/27
https://github.com/dbry/WavPack/commit/36a24c7881427d2e1e4dc1cef58f19eee0d13aec
https://github.com/dbry/WavPack/issues/28
https://github.com/dbry/WavPack/commit/8e3fe45a7bac31d9a3b558ae0079e2d92a04799e
https://github.com/dbry/WavPack/issues/26
https://security.archlinux.org/CVE-2018-6767
https://security.archlinux.org/CVE-2018-7253
https://security.archlinux.org/CVE-2018-7254

ASA-201802-13: lib32-wavpack: arbitrary code execution

Arch Linux Security Advisory ASA-201802-13
==========================================

Severity: High
Date : 2018-02-23
CVE-ID : CVE-2018-6767 CVE-2018-7253 CVE-2018-7254
Package : lib32-wavpack
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-634

Summary
=======

The package lib32-wavpack before version 5.1.0-2 is vulnerable to
arbitrary code execution.

Resolution
==========

Upgrade to 5.1.0-2.

# pacman -Syu "lib32-wavpack>=5.1.0-2"

The problems have been fixed upstream in version 5.1.0.

Workaround
==========

None.

Description
===========

- CVE-2018-6767 (arbitrary code execution)

A stack-based buffer over-read in the ParseRiffHeaderConfig function of
cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a
denial-of-service attack or possibly have unspecified other impact via
a maliciously crafted RF64 file.

- CVE-2018-7253 (arbitrary code execution)

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of
WavPack 5.1.0 allows a remote attacker to cause a denial-of-service
(heap-based buffer over-read) or possibly overwrite the heap via a
maliciously crafted DSDIFF file.

- CVE-2018-7254 (arbitrary code execution)

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack
5.1.0 allows a remote attacker to cause a denial-of-service (global
buffer over-read), or possibly trigger a buffer overflow or incorrect
memory allocation, via a maliciously crafted CAF file.

Impact
======

A remote attacker is able to execute arbitrary code on the affected
host via maliciously crafted files.

References
==========

https://bugs.archlinux.org/task/57609
https://github.com/dbry/WavPack/commit/d5bf76b5a88d044a1be1d5656698e3ba737167e5
https://github.com/dbry/WavPack/issues/27
https://github.com/dbry/WavPack/commit/36a24c7881427d2e1e4dc1cef58f19eee0d13aec
https://github.com/dbry/WavPack/issues/28
https://github.com/dbry/WavPack/commit/8e3fe45a7bac31d9a3b558ae0079e2d92a04799e
https://github.com/dbry/WavPack/issues/26
https://security.archlinux.org/CVE-2018-6767
https://security.archlinux.org/CVE-2018-7253
https://security.archlinux.org/CVE-2018-7254

ASA-201802-14: unixodbc: arbitrary code execution

Arch Linux Security Advisory ASA-201802-14
==========================================

Severity: High
Date : 2018-02-23
CVE-ID : CVE-2018-7409
Package : unixodbc
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-627

Summary
=======

The package unixodbc before version 2.3.5-1 is vulnerable to arbitrary
code execution.

Resolution
==========

Upgrade to 2.3.5-1.

# pacman -Syu "unixodbc>=2.3.5-1"

The problem has been fixed upstream in version 2.3.5.

Workaround
==========

None.

Description
===========

In unixODBC before 2.3.5, there is a buffer overflow in the
unicode_to_ansi_copy() function in DriverManager/__info.c possibly
leading to arbitrary code execution.

Impact
======

A remote attacker is able to execute arbitrary code on the affected
host.

References
==========

https://security.archlinux.org/CVE-2018-7409