Here a roundup of last week's Linux security updates for Arch Linux, CentOS, Debian GNU/Linux, Fedora Linux, Gentoo Linux, Oracle Linux, Red Hat Enterprise Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux.
Arch Linux
- ASA-202101-24: atftp: denial of service
- ASA-202101-23: wavpack: arbitrary code execution
- ASA-202101-22: mediawiki: multiple issues
- ASA-202101-21: coturn: insufficient validation
- ASA-202101-20: vivaldi: multiple issues
- ASA-202101-19: nvidia-utils: multiple issues
- ASA-202101-18: opensmtpd: multiple issues
- ASA-202101-17: thunderbird: arbitrary code execution
- ASA-202101-16: nodejs: multiple issues
- ASA-202101-15: nodejs-lts-fermium: multiple issues
- ASA-202101-14: nodejs-lts-erbium: multiple issues
- ASA-202101-13: nodejs-lts-dubnium: multiple issues
- ASA-202101-12: python-cairosvg: denial of service
- ASA-202101-11: python-pillow: multiple issues
- ASA-202101-10: gitlab: multiple issues
- ASA-202101-9: php: insufficient validation
- ASA-202101-8: mdbook: cross-site scripting
- ASA-202101-7: mbedtls: private key recovery
- ASA-202101-6: chromium: multiple issues
- ASA-202101-5: firefox: arbitrary code execution
CentOS
- CESA-2021:0087 Critical CentOS 7 thunderbird Security Update
- CESA-2021:0053 Critical CentOS 7 firefox Security Update
Debian GNU/Linux
- USN-4688-1: JasPer vulnerabilities
- ELA-344-1 apt security update
- DSA 4829-1: coturn security update
- DLA 2523-1: imagemagick security update
- ELA-345-1 imagemagick security update
- DLA 2522-1: coturn security update
- DLA 2524-1: spice-vdagent security update
- ELA-346-1 wavpack security update
- DSA 4830-1: flatpak security update
- DLA 2526-1: ruby-redcarpet security update
- DLA 2525-1: wavpack security update
- DSA 4831-1: ruby-redcarpet security update
- ELA-347-1 ruby-redcarpet security update
- DSA 4832-1: chromium security update
Fedora Linux
- Fedora 33 Update: sympa-6.2.60-1.fc33
- Fedora 33 Update: roundcubemail-1.4.10-1.fc33
- Fedora 32 Update: sympa-6.2.60-1.fc32
- Fedora 32 Update: roundcubemail-1.4.10-1.fc32
- Fedora 32 Update: ocp-0.1.22-0.28.git849cc42.fc32
- Fedora 32 Update: audacious-plugins-3.10.1-7.fc32
- Fedora 32 Update: adplug-2.3.3-1.fc32
- Fedora 32 Update: python-lxml-4.4.1-5.fc32
- Fedora 33 Update: cpu-x-4.1.0-3.fc33
- Fedora 33 Update: kernel-headers-5.10.6-200.fc33
- Fedora 33 Update: kernel-5.10.6-200.fc33
- Fedora 33 Update: php-7.4.14-1.fc33
- Fedora 33 Update: audacious-plugins-4.0.5-3.fc33
- Fedora 33 Update: adplug-2.3.3-1.fc33
- Fedora 33 Update: ocp-0.1.22-0.28.git849cc42.fc33
- Fedora 33 Update: python-lxml-4.5.1-3.fc33
- Fedora 33 Update: dia-0.97.3-16.fc33
- Fedora 32 Update: mingw-openjpeg2-2.3.1-11.fc32
- Fedora 32 Update: openjpeg2-2.3.1-10.fc32
- Fedora 33 Update: flatpak-1.10.0-1.fc33
- Fedora 33 Update: kernel-headers-5.10.7-200.fc33
- Fedora 33 Update: kernel-5.10.7-200.fc33
- Fedora 33 Update: python-cairosvg-2.4.2-6.fc33
- Fedora 32 Update: kernel-headers-5.10.7-100.fc32
- Fedora 32 Update: kernel-5.10.7-100.fc32
- Fedora 32 Update: python-cairosvg-2.4.2-4.fc32
- Fedora 32 Update: nodejs-12.20.1-1.fc32
- Fedora 32 Update: php-7.4.14-1.fc32
- Fedora 33 Update: chromium-87.0.4280.141-1.fc33
Gentoo Linux
- GLSA 202101-05 : Chromium, Google Chrome: Multiple vulnerabilities
- GLSA 202101-04 : Mozilla Firefox: Remote code execution
- GLSA 202101-03 : ipmitool: Multiple vulnerabilities
- GLSA 202101-01 : Dovecot: Multiple vulnerabilities
- GLSA 202101-02 : Firejail: Multiple vulnerabilities
- GLSA 202101-07 : NodeJS: Multiple vulnerabilities
- GLSA 202101-06 : Ark: Symlink vulnerability
- GLSA 202101-10 : Asterisk: Multiple vulnerabilities
- GLSA 202101-09 : VirtualBox: Multiple vulnerabilities
Oracle Linux
- ELSA-2021-0053 Critical: Oracle Linux 7 firefox security update
- ELSA-2021-0053 Critical: Oracle Linux 7 firefox security update (aarch64)
- ELSA-2021-0052 Critical: Oracle Linux 8 firefox security update
- ELSA-2021-9009 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
- ELSA-2021-9007 Important: Oracle Linux 7 Unbreakable Enterprise kernel-container security update
- ELSA-2021-9005 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
- ELSA-2021-9007 Important: Oracle Linux 8 Unbreakable Enterprise kernel-container security update
- ELSA-2021-9006 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
- ELSA-2021-9006 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
- ELSA-2021-9009 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
- ELSA-2021-9005 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update (aarch64)
- New Ksplice updates for UEKR6 5.4.17 on OL7 and OL8 (CVE-2020-28374)
- New Ksplice updates for UEKR4 4.1.12 on OL6 and OL7 (CVE-2020-28374)
- New Ksplice updates for UEKR5 4.14.35 on OL7 (CVE-2020-28374)
- ELSA-2021-0087 Critical: Oracle Linux 7 thunderbird security update
- ELSA-2021-0095 Important: Oracle Linux 8 dotnet3.1 security and bugfix update
- ELSA-2021-0087 Critical: Oracle Linux 7 thunderbird security update (aarch64)
Red Hat Enterprise Linux
- RHSA-2021:0050-01: Moderate: Red Hat Quay v3.3.3 bug fix and security update
- RHSA-2021:0072-01: Moderate: OpenShift Serverless 1.9.0 release and security update
- RHSA-2021:0055-01: Critical: firefox security update
- RHSA-2021:0056-01: Important: openssl security update
- RHSA-2021:0054-01: Critical: firefox security update
- RHSA-2021:0052-01: Critical: firefox security update
- RHSA-2021:0057-01: Important: libpq security update
- RHSA-2021:0053-01: Critical: firefox security update
- RHSA-2021:0073-01: Moderate: kernel security and bug fix update
- RHSA-2021:0083-01: Important: Red Hat Ceph Storage 4.2 security and bug fix update
- RHSA-2021:0081-01: Important: Red Hat Ceph Storage 4.2 Security and Bug Fix update
- RHSA-2021:0084-01: Moderate: Red Hat build of Quarkus 1.7.6 release and security update
- RHSA-2021:0087-01: Critical: thunderbird security update
- RHSA-2021:0088-01: Critical: thunderbird security update
- RHSA-2021:0089-01: Critical: thunderbird security update
- RHSA-2021:0106-01: Important: Red Hat Decision Manager 7.9.1 security update
- RHSA-2021:0105-01: Important: Red Hat Process Automation Manager 7.9.1 security update
- RHSA-2021:0095-01: Important: dotnet3.1 security and bugfix update
- RHSA-2021:0094-01: Important: dotnet5.0 security and bugfix update
- RHSA-2021:0096-01: Important: .NET 5.0 on Red Hat Enterprise Linux security and bugfix update
- RHSA-2021:0030-01: Moderate: OpenShift Container Platform 4.4.32 packages and security update
- RHSA-2021:0110-01: Important: Red Hat Integration Tech-Preview 2 Camel K security update
- RHSA-2021:0114-01: Important: .NET Core 3.1 on Red Hat Enterprise Linux security and bugfix update
- RHSA-2021:0136-01: Moderate: kernel-rt security and bug fix update
- RHSA-2021:0145-01: Moderate: Red Hat OpenShift Serverless Client kn 1.12.0
- RHSA-2021:0146-01: Moderate: Release of OpenShift Serverless 1.12.0
Slackware Linux
SUSE Linux
- openSUSE-SU-2021:0043-1: moderate: Security update for tomcat
- openSUSE-SU-2021:0041-1: important: Security update for chromium
- openSUSE-SU-2021:0040-1: important: Security update for chromium
- openSUSE-SU-2021:0045-1: moderate: Security update for rpmlint
- openSUSE-SU-2021:0046-1: moderate: Security update for cobbler
- openSUSE-SU-2021:0048-1: important: Security update for chromium
- openSUSE-SU-2021:0047-1: important: Security update for chromium
- openSUSE-SU-2021:0054-1: important: Security update for hawk2
- openSUSE-SU-2021:0056-1: important: Security update for MozillaFirefox
- openSUSE-SU-2021:0055-1: important: Security update for crmsh
- openSUSE-SU-2021:0060-1: important: Security update for the Linux Kernel
- openSUSE-SU-2021:0059-1: moderate: Security update for libzypp, zypper
- openSUSE-SU-2021:0058-1: moderate: Security update for cobbler
- openSUSE-SU-2021:0066-1: moderate: Security update for nodejs14
- openSUSE-SU-2021:0064-1: moderate: Security update for nodejs12
- openSUSE-SU-2021:0063-1: important: Security update for MozillaFirefox
- openSUSE-SU-2021:0065-1: moderate: Security update for nodejs10
- openSUSE-SU-2021:0076-1: important: Security update for vlc
- openSUSE-SU-2021:0081-1: moderate: Security update for tomcat
- openSUSE-SU-2021:0084-1: moderate: Security update for viewvc
- openSUSE-SU-2021:0073-1: important: Security update for crmsh
- openSUSE-SU-2021:0082-1: moderate: Security update for nodejs10
- openSUSE-SU-2021:0079-1: moderate: Security update for ceph
- openSUSE-SU-2021:0074-1: important: Security update for hawk2
- openSUSE-SU-2021:0078-1: moderate: Security update for python-jupyter_notebook
- openSUSE-SU-2021:0075-1: important: Security update for the Linux Kernel
- openSUSE-SU-2021:0072-1: important: Security update for dovecot23
- openSUSE-SU-2021:0093-1: important: Security update for MozillaThunderbird
- openSUSE-SU-2021:0091-1: important: Security update for vlc
- openSUSE-SU-2021:0089-1: important: Security update for open-iscsi
Ubuntu Linux
- USN-4668-4: python-apt vulnerability
- USN-4667-2: APT vulnerability
- USN-4689-2: Linux kernel vulnerabilities
- USN-4688-1: JasPer vulnerabilities
- USN-4689-1: NVIDIA graphics drivers vulnerabilities
- USN-4649-2: xdg-utils regression
- USN-4690-1: coTURN vulnerability
- USN-4691-1: Open vSwitch vulnerabilities
- USN-4692-1: tar vulnerabilities
- USN-4694-1: Linux kernel vulnerability
- USN-4693-1: Ampache vulnerabilities
