August 2017 - Arch-security - lists.archlinux.org

[arch-security] [ASA-201708-18] thunderbird: multiple issues
by Levente Polyak 23 Aug '17

23 Aug '17

Arch Linux Security Advisory ASA-201708-18 ========================================== Severity: Critical Date : 2017-08-23 CVE-ID : CVE-2017-7753 CVE-2017-7779 CVE-2017-7784 CVE-2017-7785 CVE-2017-7786 CVE-2017-7787 CVE-2017-7791 CVE-2017-7792 CVE-2017-7800 CVE-2017-7801 CVE-2017-7802 CVE-2017-7803 CVE-2017-7807 CVE-2017-7809 Package : thunderbird Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-385 Summary ======= The package thunderbird before version 52.3.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, information disclosure, same-origin policy bypass and access restriction bypass. Resolution ========== Upgrade to 52.3.0-1. # pacman -Syu "thunderbird>=52.3.0-1" The problems have been fixed upstream in version 52.3.0. Workaround ========== None. Description =========== - CVE-2017-7753 (information disclosure) An out-of-bounds read has been found in firefox < 55.0 and thunderbird < 52.3, when applying style rules to pseudo-elements, such as ::first- line, using cached style data. - CVE-2017-7779 (arbitrary code execution) Several memory safety bugs have been found in firefox < 55.0 and thunderbird < 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. - CVE-2017-7784 (arbitrary code execution) A use-after-free issue has been found in firefox < 55.0 and thunderbird < 52.3, when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. - CVE-2017-7785 (arbitrary code execution) A buffer overflow has been found in firefox < 55.0 and thunderbird < 52.3, when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. - CVE-2017-7786 (arbitrary code execution) A buffer overflow has been found in firefox < 55.0 and thunderbird < 52.3, when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. - CVE-2017-7787 (same-origin policy bypass) Same-origin policy protections can be bypassed in firefox < 55.0 and thunderbird < 52.3, on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page and leading to information disclosure. - CVE-2017-7791 (content spoofing) A content spoofing issue has been found in firefox < 55.0 and thunderbird < 52.3. On pages containing an iframe, the data: protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. - CVE-2017-7792 (arbitrary code execution) A buffer overflow has been found in firefox < 55.0 and thunderbird < 52.3, when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. - CVE-2017-7800 (arbitrary code execution) A use-after-free issue has been found in firefox < 55.0 and thunderbird < 52.3, in WebSockets, when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. - CVE-2017-7801 (arbitrary code execution) A use-after-free issue has been found in firefox < 55.0 and thunderbird < 52.3, while re-computing layout for a marquee element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. - CVE-2017-7802 (arbitrary code execution) A use-after-free vulnerability has been found in firefox < 55.0 and thunderbird < 52.3, when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. - CVE-2017-7803 (access restriction bypass) A security issue has been found in firefox < 55.0 and thunderbird < 52.3. When a page’s content security policy (CSP) header contains a sandbox directive, other directives are ignored. This results in the incorrect enforcement of CSP. - CVE-2017-7807 (content spoofing) A domain hijacking flaw has been found in firefox < 55.0 and thunderbird < 52.3. A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. - CVE-2017-7809 (arbitrary code execution) A use-after-free issue has been found in firefox < 55.0 and thunderbird < 52.3, when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. Impact ====== A remote attacker can access sensitive information, bypass security restrictions, crash the application or execute arbitrary code on the affected host. References ========== https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7753 https://bugzilla.mozilla.org/show_bug.cgi?id=1353312 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7779 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903… https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7784 https://bugzilla.mozilla.org/show_bug.cgi?id=1376087 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7785 https://bugzilla.mozilla.org/show_bug.cgi?id=1356985 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7786 https://bugzilla.mozilla.org/show_bug.cgi?id=1365189 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7787 https://bugzilla.mozilla.org/show_bug.cgi?id=1322896 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7791 https://bugzilla.mozilla.org/show_bug.cgi?id=1365875 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7792 https://bugzilla.mozilla.org/show_bug.cgi?id=1368652 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7800 https://bugzilla.mozilla.org/show_bug.cgi?id=1374047 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7801 https://bugzilla.mozilla.org/show_bug.cgi?id=1371259 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7802 https://bugzilla.mozilla.org/show_bug.cgi?id=1378147 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7803 https://bugzilla.mozilla.org/show_bug.cgi?id=1377426 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7807 https://bugzilla.mozilla.org/show_bug.cgi?id=1376459 https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7809 https://bugzilla.mozilla.org/show_bug.cgi?id=1380284 https://security.archlinux.org/CVE-2017-7753 https://security.archlinux.org/CVE-2017-7779 https://security.archlinux.org/CVE-2017-7784 https://security.archlinux.org/CVE-2017-7785 https://security.archlinux.org/CVE-2017-7786 https://security.archlinux.org/CVE-2017-7787 https://security.archlinux.org/CVE-2017-7791 https://security.archlinux.org/CVE-2017-7792 https://security.archlinux.org/CVE-2017-7800 https://security.archlinux.org/CVE-2017-7801 https://security.archlinux.org/CVE-2017-7802 https://security.archlinux.org/CVE-2017-7803 https://security.archlinux.org/CVE-2017-7807 https://security.archlinux.org/CVE-2017-7809

1 0

[arch-security] [ASA-201708-17] salt: directory traversal
by Levente Polyak 23 Aug '17

23 Aug '17

Arch Linux Security Advisory ASA-201708-17 ========================================== Severity: Medium Date : 2017-08-23 CVE-ID : CVE-2017-12791 Package : salt Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-383 Summary ======= The package salt before version 2017.7.1-1 is vulnerable to directory traversal. Resolution ========== Upgrade to 2017.7.1-1. # pacman -Syu "salt>=2017.7.1-1" The problem has been fixed upstream in version 2017.7.1. Workaround ========== None. Description =========== It has been discovered that maliciously crafted minion IDs can cause unwanted directory traversals on the salt-master. The flaw is within the minion id validation which could allow certain minions to authenticate to a master despite not having the correct credentials. To exploit the vulnerability, an attacker must create a salt-minion with an ID containing characters that will cause a directory traversal. Impact ====== An unauthenticated attacker is able to craft a malicious minion ID to cause a directory traversal on the salt-master. References ========== https://groups.google.com/forum/#!topic/salt-announce/3e5bNantdJk https://security.archlinux.org/CVE-2017-12791

1 0

[arch-security] [ASA-201708-16] curl: information disclosure
by Santiago Torres-Arias 22 Aug '17

22 Aug '17

Arch Linux Security Advisory ASA-201708-16 ========================================== Severity: Medium Date : 2017-08-22 CVE-ID : CVE-2017-1000099 CVE-2017-1000100 CVE-2017-1000101 Package : curl Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-370 Summary ======= The package curl before version 7.55-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 7.55-1. # pacman -Syu "curl>=7.55-1" The problems have been fixed upstream in version 7.55. Workaround ========== None. Description =========== - CVE-2017-1000099 (information disclosure) An information disclosure issue has been found in curl < 7.55.0. When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (stdout or the application's provide callback), which could lead to other private data from the heap to get inadvertently displayed. The wrong buffer was an uninitialized memory area allocated on the heap and if it turned out to not contain any zero byte, it would continue and display the data following that buffer in memory. - CVE-2017-1000100 (information disclosure) An information disclosure issue has been found in curl < 7.55.0. When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The sendto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. - CVE-2017-1000101 (information disclosure) A heap-based read buffer overflow has been found in curl < 7.55.0. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be http://ur%20[0-60000000000000000000. This flaw only affects the curl command line tool, not the libcurl library. Impact ====== An attacker is able to read sensitive information by asking curl to retrieve a maliciously crafted URL. References ========== https://curl.haxx.se/docs/adv_20170809C.html https://curl.haxx.se/CVE-2017-1000099.patch https://curl.haxx.se/docs/adv_20170809B.html https://curl.haxx.se/CVE-2017-1000100.patch https://curl.haxx.se/docs/adv_20170809A.html https://curl.haxx.se/CVE-2017-1000101.patch https://security.archlinux.org/CVE-2017-1000099 https://security.archlinux.org/CVE-2017-1000100 https://security.archlinux.org/CVE-2017-1000101

1 0

[arch-security] [ASA-201708-15] newsbeuter: arbitrary code execution
by Jelle van der Waa 21 Aug '17

21 Aug '17

Arch Linux Security Advisory ASA-201708-15 ========================================== Severity: High Date : 2017-08-20 CVE-ID : CVE-2017-12904 Package : newsbeuter Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-384 Summary ======= The package newsbeuter before version 2.9-7 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 2.9-7. # pacman -Syu "newsbeuter>=2.9-7" The problem has been fixed upstream but no release is available yet. Workaround ========== Don't bookmark items. Description =========== An attacker can craft an RSS item with shell code in the title and/or URL. When such an item is bookmarked, the shell will execute that code. The vulnerability is triggered when bookmark-cmd is called. Impact ====== A remote attacker can execute an arbitrary command on the affected host by tricking a user into bookmarking a specially crafted RSS item. References ========== https://github.com/akrennmair/newsbeuter/issues/591 https://groups.google.com/forum/#!topic/newsbeuter/iFqSE7Vz-DE https://security.archlinux.org/CVE-2017-12904

1 0

[arch-security] [ASA-201708-14] subversion: arbitrary command execution
by Remi Gacogne 15 Aug '17

15 Aug '17

Arch Linux Security Advisory ASA-201708-14 ========================================== Severity: Critical Date : 2017-08-15 CVE-ID : CVE-2017-9800 Package : subversion Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-379 Summary ======= The package subversion before version 1.9.7-1 is vulnerable to arbitrary command execution. Resolution ========== Upgrade to 1.9.7-1. # pacman -Syu "subversion>=1.9.7-1" The problem has been fixed upstream in version 1.9.7. Workaround ========== None. Description =========== A security issue has been found in subversion < 1.9.7. A Subversion client sometimes connects to URLs provided by the repository. This happens in two primary cases: during 'checkout', 'export', 'update', and 'switch', when the tree being downloaded contains svn:externals properties; and when using 'svnsync sync' with one URL argument. A maliciously constructed svn+ssh:// URL would cause Subversion clients to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://. Impact ====== A remote attacker can execute arbitrary command on the affected host by tricking a user into executing a subversion command. References ========== http://subversion.apache.org/security/CVE-2017-9800-advisory.txt https://mail-archives.apache.org/mod_mbox/subversion-announce/201708.mbox/%… https://security.archlinux.org/CVE-2017-9800

1 0

[arch-security] [ASA-201708-13] strongswan: denial of service
by Christian Rebischke 15 Aug '17

15 Aug '17

Arch Linux Security Advisory ASA-201708-13 ========================================== Severity: Low Date : 2017-08-14 CVE-ID : CVE-2017-11185 Package : strongswan Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-382 Summary ======= The package strongswan before version 5.5.3-4 is vulnerable to denial of service. Resolution ========== Upgrade to 5.5.3-4. # pacman -Syu "strongswan>=5.5.3-4" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation when verifying RSA signatures, which requires decryption with the operation m^e mod n, where m is the signature, and e and n are the exponent and modulus of the public key. The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this. So if m equals n the calculation results in 0, in which case mpz_export() returns NULL. This result wasn't handled properly causing a null-pointer dereference. Impact ====== The attacker is able to crash the application via a specially crafted RSA signature. References ========== https://wiki.strongswan.org/versions/66 https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-(cve-20… https://security.archlinux.org/CVE-2017-11185

1 0

[arch-security] [ASA-201708-12] spice: arbitrary code execution
by Remi Gacogne 15 Aug '17

15 Aug '17

Arch Linux Security Advisory ASA-201708-12 ========================================== Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-7506 Package : spice Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-349 Summary ======= The package spice before version 0.12.8+8+ga957a90b-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 0.12.8+8+ga957a90b-1. # pacman -Syu "spice>=0.12.8+8+ga957a90b-1" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== Two security issues have been found in spice <= 0.12.8, allowing a remote, authenticated user to get access to memory content by sending a number of monitors bigger than the number of items, and to trigger an integer overflow of the buffer_size variable, leading to a potentially exploitable buffer overflow. Impact ====== A remote, authenticated attacker can access sensitive information or execute arbitrary code on the affected host. References ========== https://bugs.archlinux.org/task/54808 https://bugzilla.redhat.com/show_bug.cgi?id=1452606 https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=f1e7ec03e26ab6b8… https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=ec6229c79abe05d7… https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=a957a90baf2c62d3… https://security.archlinux.org/CVE-2017-7506

1 0

[arch-security] [ASA-201708-11] xorg-server: multiple issues
by Remi Gacogne 15 Aug '17

15 Aug '17

Arch Linux Security Advisory ASA-201708-11 ========================================== Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-10971 CVE-2017-10972 Package : xorg-server Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-341 Summary ======= The package xorg-server before version 1.19.3-3 is vulnerable to multiple issues including arbitrary code execution and information disclosure. Resolution ========== Upgrade to 1.19.3-3. # pacman -Syu "xorg-server>=1.19.3-3" The problems have been fixed upstream but no release is available yet. Workaround ========== None. Description =========== - CVE-2017-10971 (arbitrary code execution) In the X.Org X server on v.1.19.3, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events. - CVE-2017-10972 (information disclosure) Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server on v1.19.3 and before allowed authenticated malicious users to access potentially privileged data from the X server. Impact ====== A remote attacker can access sensitive information or execute arbitrary code on the affected host. References ========== https://bugzilla.suse.com/show_bug.cgi?id=1035283 https://cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b1… https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992e… https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b1364869… https://cgit.freedesktop.org/xorg/xserver/commit/?id=05442de962d3dc624f79fc… https://security.archlinux.org/CVE-2017-10971 https://security.archlinux.org/CVE-2017-10972

1 0

[arch-security] [ASA-201708-10] libytnef: arbitrary code execution
by Remi Gacogne 15 Aug '17

15 Aug '17

Arch Linux Security Advisory ASA-201708-10 ========================================== Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-9058 Package : libytnef Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-275 Summary ======= The package libytnef before version 1.9.2-2 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 1.9.2-2. # pacman -Syu "libytnef>=1.9.2-2" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== A heap-buffer-overflow vulnerability has been found in the libytnef in the lib/ytnef.c module. Impact ====== A remote attacker can execute arbitrary code on the affected host via a crafted tnef file. References ========== https://github.com/bingosxs/fuzzdata/blob/master/ytnef-1.9/TNEFFreeMapiProp… https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556 https://security.archlinux.org/CVE-2017-9058

1 0

[arch-security] [ASA-201708-9] audiofile: multiple issues
by Remi Gacogne 15 Aug '17

15 Aug '17

Arch Linux Security Advisory ASA-201708-9 ========================================= Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838 CVE-2017-6839 Package : audiofile Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-205 Summary ======= The package audiofile before version 0.3.6-4 is vulnerable to multiple issues including arbitrary code execution, arbitrary command execution and denial of service. Resolution ========== Upgrade to 0.3.6-4. # pacman -Syu "audiofile>=0.3.6-4" The problems have been fixed upstream but no release is available yet. Workaround ========== None. Description =========== - CVE-2017-6827 (arbitrary code execution) Heap-based buffer overflow in msdapcmInitializeCoefficients (msadcpcm.cpp) could lead to arbitrary code execution. - CVE-2017-6828 (arbitrary code execution) Heap-based buffer overflow in readValue (filehandle.cpp) could lead to arbitrary code execution. - CVE-2017-6829 (arbitrary code execution) Global buffer overflow in decodesample (ima.cpp) that could lead to arbitrary code execution - CVE-2017-6830 (arbitrary code execution) Heap-based buffer overflow in alaw2linear_buf that could lead to arbitrary code execution. - CVE-2017-6831 (arbitrary code execution) Heap-based buffer overflow in IMA::decodeBlockWAVE (IMA.cpp) that could lead to arbitrary code execution. - CVE-2017-6832 (arbitrary code execution) Heap-based buffer overflow in MSADPCM::decodeBlock (MSADPCM.cpp) that could lead to arbitrary code execution. - CVE-2017-6833 (denial of service) Divide-by-zero triggers a crash in BlockCodec::runPull (BlockCodec.cpp) - CVE-2017-6834 (arbitrary code execution) Heap-based buffer overflow in ulaw2linear_buf (G711.cpp) - CVE-2017-6835 (denial of service) Divide-by-zero triggers crash in BlockCodec::reset1 (BlockCodec.cpp) - CVE-2017-6836 (arbitrary command execution) audiofile: heap-based buffer overflow in Expand3To4Module::run (SimpleModule.h) - CVE-2017-6837 (denial of service) Integer overflow triggering an assertion on the WAVE module using sfconvert. - CVE-2017-6838 (denial of service) Integer overflow with the sfconvert command. - CVE-2017-6839 (denial of service) Integer overflow in sfconvert with the MSADPCM module. Impact ====== An attacker can cause a denial of service, or execute arbitrary code or command on the affected host via a crafted audio file. References ========== https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflo… https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflo… https://blogs.gentoo.org/ago/2017/02/20/audiofile-global-buffer-overflow-in… https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflo… https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflo… https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflo… https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockco… https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflo… https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockco… https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflo… https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/ https://security.archlinux.org/CVE-2017-6827 https://security.archlinux.org/CVE-2017-6828 https://security.archlinux.org/CVE-2017-6829 https://security.archlinux.org/CVE-2017-6830 https://security.archlinux.org/CVE-2017-6831 https://security.archlinux.org/CVE-2017-6832 https://security.archlinux.org/CVE-2017-6833 https://security.archlinux.org/CVE-2017-6834 https://security.archlinux.org/CVE-2017-6835 https://security.archlinux.org/CVE-2017-6836 https://security.archlinux.org/CVE-2017-6837 https://security.archlinux.org/CVE-2017-6838 https://security.archlinux.org/CVE-2017-6839

1 0