Here a roundup of last week's Linux security updates for AlmaLinux, Arch Linux, CentOS, Debian GNU/Linux, Fedora Linux, Gentoo Linux, Oracle Linux, Red Hat Enterprise Linux, SUSE Linux, and Ubuntu Linux.
AlmaLinux
- ALSA-2021:2308 Important: microcode_ctl security, bug fix and enhancement update
- ALSA-2021:2352 Important: .NET Core 3.1 security and bugfix update
- ALSA-2021:2353 Important: .NET 5.0 security and bugfix update
- ALSA-2021:2354 Important: libwebp security update
- ALSA-2021:2359 Important: dhcp security update
- ALSA-2021:2360 Important: postgresql:9.6 security update
- ALSA-2021:2361 Important: postgresql:10 security update
- ALSA-2021:2363 Important: gupnp security update
- ALSA-2021:2370 Important: container-tools:3.0 security update
- ALSA-2021:2371 Important: container-tools:rhel8 security update
- ALSA-2021:2372 Important: postgresql:12 security update
- ALSA-2021:2566 Moderate: fwupd security update
- ALSA-2021:2569 Moderate: libxml2 security update
- ALSA-2021:2570 Important: kernel security and bug fix update
- ALSA-2021:2574 Moderate: rpm security update
- ALSA-2021:2575 Moderate: lz4 security update
- ALSA-2021:2583 Moderate: python38:3.8 and python38-devel:3.8 security update
- ALSA-2021:2584 Moderate: ruby:2.7 security, bug fix, and enhancement update
- ALSA-2021:2587 Moderate: ruby:2.5 security, bug fix, and enhancement update
- ALSA-2021:2591 Moderate: edk2 security update
- ALSA-2021:2595 Moderate: 389-ds:1.4 security and bug fix update
- ALBA-2021:1878 squid:4 bug fix and enhancement update
- ALBA-2021:2565 tuned bug fix and enhancement update
- ALBA-2021:2568 kexec-tools bug fix and enhancement update
- ALBA-2021:2571 sssd bug fix and enhancement update
- ALBA-2021:2572 systemd bug fix and enhancement update
- ALBA-2021:2573 sanlock bug fix and enhancement update
- ALBA-2021:2576 NetworkManager bug fix and enhancement update
- ALBA-2021:2577 subscription-manager bug fix and enhancement update
- ALBA-2021:2578 unzip bug fix and enhancement update
- ALBA-2021:2579 nvme-cli bug fix and enhancement update
- ALBA-2021:2580 firewalld bug fix and enhancement update
- ALBA-2021:2581 openldap bug fix and enhancement update
- ALBA-2021:2585 osbuild-composer bug fix update
- ALBA-2021:2586 rsyslog bug fix and enhancement update
- ALBA-2021:2589 nmstate bug fix update
- ALBA-2021:2590 cloud-init bug fix and enhancement update
- ALBA-2021:2592 idm:DL1 bug fix update
- ALBA-2021:2593 cmake bug fix and enhancement update
- ALBA-2021:2594 go-toolset:rhel8 bug fix and enhancement update
- ALBA-2021:2598 resource-agents bug fix and enhancement update
- ALEA-2021:2421 libpq bug fix and enhancement update
- ALEA-2021:2596 gnome-session bug fix and enhancement update
Arch Linux
- ASA-202107-11: python-django: insufficient validation
- ASA-202107-19: ruby-addressable: denial of service
- ASA-202107-18: gitlab: multiple issues
- ASA-202107-17: rabbitmq: cross-site scripting
- ASA-202107-14: openexr: arbitrary code execution
- ASA-202107-13: nodejs: multiple issues
- ASA-202107-12: spice: multiple issues
CentOS
Debian GNU/Linux
- DLA 2703-1: ieee-data crash fix
- ELA-455-1 libxstream-java security update
- DSA 4936-1: libuv1 security update
- DSA 4935-1: php7.3 security update
- DLA 2704-1: libxstream-java security update
- DSA 4937-1: apache2 security update
- DLA 2705-1: scilab security update
- DLA 2706-1: apache2 security update
- ELA-456-1 apache2 security update
Fedora Linux
- Fedora 33 Update: dovecot-2.3.15-1.fc33
- Fedora 34 Update: dovecot-2.3.15-1.fc34
- Fedora 33 Update: rabbitmq-server-3.8.18-1.fc33
- Fedora 34 Update: rabbitmq-server-3.8.18-1.fc34
- Fedora 33 Update: glibc-2.32-8.fc33
- Fedora 33 Update: kernel-5.12.14-200.fc33
- Fedora 33 Update: php-7.4.21-1.fc33
- Fedora 34 Update: kernel-5.12.14-300.fc34
- Fedora 34 Update: php-7.4.21-1.fc34
- Fedora 34 Update: perl-Mojolicious-8.73-2.fc34
- Fedora 34 Update: chromium-91.0.4472.114-1.fc34
- Fedora 33 Update: perl-Mojolicious-8.73-2.fc33
- Fedora 34 Update: suricata-6.0.3-1.fc34
- Fedora 33 Update: suricata-5.0.7-1.fc33
- Fedora 33 Update: djvulibre-3.5.27-28.fc33
- Fedora 34 Update: djvulibre-3.5.27-30.fc34
Gentoo Linux
- GLSA 202107-04 : Graphviz: Multiple vulnerabilities
- GLSA 202107-03 : libqb: Insecure temporary file
- GLSA 202107-02 : FreeImage: Multiple vulnerabilities
- GLSA 202107-01 : corosync: Denial of service
- GLSA 202107-07 : glibc: Multiple vulnerabilities
- GLSA 202107-08 : PostSRSd: Denial of service
- GLSA 202107-06 : Chromium, Google Chrome: Multiple vulnerabilities
- GLSA 202107-05 : libxml2: Multiple vulnerabilities
- GLSA 202107-10 : TCG TPM2 Software Stack: Information disclosure
- GLSA 202107-13 : GLib: Multiple vulnerabilities
- GLSA 202107-12 : Schism Tracker: Multiple vulnerabilities
- GLSA 202107-11 : OpenDoas: Insufficient environment filtering
- GLSA 202107-09 : Mozilla Firefox: Multiple vulnerabilities
- GLSA 202107-19 : Jinja: Denial of service
- GLSA 202107-16 : Privoxy: Multiple vulnerabilities
- GLSA 202107-18 : BladeEnc: Buffer overflow
- GLSA 202107-15 : blktrace: Buffer overflow
- GLSA 202107-17 : Mechanize: Command injection
- GLSA 202107-14 : rclone: Weak random number generation
- GLSA 202107-22 : InspIRCd: Information disclosure
- GLSA 202107-21 : Wireshark: Multiple vulnerabilities
- GLSA 202107-20 : Redis: Multiple vulnerabilities
- GLSA 202107-25 : Tor: Multiple vulnerabilities
- GLSA 202107-26 : runC: Container breakout
- GLSA 202107-24 : Binutils: Multiple vulnerabilities
- GLSA 202107-23 : Docker: Multiple vulnerabilities
- GLSA 202107-27 : OpenEXR: Multiple vulnerabilities
Oracle Linux
- New Ksplice updates for UEKR4 4.1.12 on OL6 and OL7 (ELSA-2021-9346)
- New Ksplice updates for RHCK 8 (ELSA-2021-2570)
- ELSA-2021-2658 Important: Oracle Linux 7 linuxptp security update (aarch64)
- ELSA-2021-2658 Important: Oracle Linux 7 linuxptp security update
- ELBA-2021-9347 Oracle Linux 8 libxml2 bug fix update
- ELSA-2021-2660 Important: Oracle Linux 8 linuxptp security update
- ELBA-2021-9331 Oracle Linux 7 btrfs-progs bug fix update (aarch64)
- ELBA-2021-9348 Oracle Linux 7 libxml2 bug fix update (aarch64)
- ELBA-2021-9348 Oracle Linux 7 libxml2 bug fix update
- ELSA-2021-2584 Moderate: Oracle Linux 8 ruby:2.7 security, bug fix, and enhancement update
- ELBA-2021-2592 Oracle Linux 8 idm:DL1 bug fix update
- ELSA-2021-2588 Moderate: Oracle Linux 8 ruby:2.6 security, bug fix, and enhancement update
Red Hat Enterprise Linux
- RHSA-2021:2555-01: Important: OpenShift Container Platform 4.7.19 packages and security update
- RHSA-2021:2657-01: Important: linuxptp security update
- RHSA-2021:2659-01: Important: linuxptp security update
- RHSA-2021:2660-01: Important: linuxptp security update
- RHSA-2021:2658-01: Important: linuxptp security update
- RHSA-2021:2664-01: Important: Ansible security and bug fix update (2.9.23)
- RHSA-2021:2663-01: Important: Ansible security and bug fix update (2.9.23)
- RHSA-2021:2465-01: Moderate: Red Hat build of Eclipse Vert.x 4.1.0 security update
- RHSA-2021:2666-01: Important: kernel security and bug fix update
- RHSA-2021:2668-01: Important: kpatch-patch security update
SUSE Linux
- openSUSE-SU-2021:0973-1: important: Security update for libqt5-qtwebengine
- openSUSE-SU-2021:2242-1: important: Security update for clamav-database
- openSUSE-SU-2021:0974-1: important: Security update for roundcubemail
- openSUSE-SU-2021:0977-1: important: Security update for virtualbox
- openSUSE-SU-2021:1914-1: moderate: Security update for libopenmpt
- openSUSE-SU-2021:2011-1: important: Security update for xterm
- openSUSE-SU-2021:2213-1: moderate: Security update for qemu
- openSUSE-SU-2021:1016-1: important: Security update for libqt5-qtwebengine
- openSUSE-SU-2021:1014-1: important: Security update for roundcubemail
- openSUSE-SU-2021:1012-1: important: Security update for gstreamer-plugins-bad
- openSUSE-SU-2021:1884-1: important: Security update for MozillaFirefox
- openSUSE-SU-2021:2003-1: important: Security update for MozillaThunderbird
- openSUSE-SU-2021:1994-1: moderate: Security update for postgresql12
- openSUSE-SU-2021:1933-1: important: Security update for ucode-intel
- openSUSE-SU-2021:2012-1: important: Security update for python-urllib3
- openSUSE-SU-2021:1762-1: moderate: Security update for curl
- openSUSE-SU-2021:1815-1: important: Security update for nginx
- openSUSE-SU-2021:1825-1: important: Security update for lz4
- openSUSE-SU-2021:1834-1: important: Security update for ceph
- openSUSE-SU-2021:1651-1: critical: Security update for graphviz
- openSUSE-SU-2021:2163-1: moderate: Security update for bouncycastle
- openSUSE-SU-2021:2118-1: important: Security update for ovmf
- openSUSE-SU-2021:1989-1: moderate: Security update for java-1_8_0-openjdk
- openSUSE-SU-2021:2123-1: important: Security update for dovecot23
- openSUSE-SU-2021:1897-1: important: Security update for libX11
- openSUSE-SU-2021:1958-1: moderate: Security update for libjpeg-turbo
- openSUSE-SU-2021:1666-1: moderate: Security update for java-1_8_0-openj9
- openSUSE-SU-2021:1826-1: important: Security update for bind
- openSUSE-SU-2021:1755-1: moderate: Security update for libu2f-host
- openSUSE-SU-2021:1664-1: moderate: Security update for libass
- openSUSE-SU-2021:1860-1: critical: Security update for libwebp
- openSUSE-SU-2021:1970-1: moderate: Security update for postgresql10
- openSUSE-SU-2021:2196-1: moderate: Security update for lua53
- openSUSE-SU-2021:1854-1: moderate: Security update for MozillaThunderbird
- openSUSE-SU-2021:2136-1: important: Security update for cryptctl
- openSUSE-SU-2021:1954-1: important: Security update for containerd, docker, runc
- openSUSE-SU-2021:2127-1: important: Security update for apache2
- openSUSE-SU-2021:1019-1: moderate: Security update for solo
- openSUSE-SU-2021:2125-1: important: Security update for wireshark