Fedora 32 : python36 (2021-3352c1c802)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-3352c1c802 advisory. - Python 3.x through 3.9.1 has a buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution in certain Python...

Fedora 32 : radare2 (2021-e3c95619c1)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e3c95619c1 advisory. - radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parsetypedef in typedwarf.c via a malformed DWATnam...

Fedora 32 : php-horde-Horde-Text-Filter (2021-cbfa969c98)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-cbfa969c98 advisory. - HordeTextFilter 2.3.7 mjr SECURITY: Fix XSS via Text2Html filter Reported by: Alex Birnberg, CVE 2021-26929 FEDORA-2021-cbfa969c98 Note that Nessus has not...

Fedora 32 : prosody (2021-54d3af6388)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-54d3af6388 advisory. - Prosody 0.11.8 ============== This is a new minor release for the 0.11.x stable branch, it includes bug fixes and performance improvements! Upstream would...

Fedora 32 : mingw-flac (2021-a48ccc6754)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a48ccc6754 advisory. - An error in the readmetadatavorbiscomment function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to cause a memory leak via a...

Fedora 32 : mingw-wavpack (2021-2e2fc2eac6)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2e2fc2eac6 advisory. - WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some...

[SECURITY] Fedora 32 Update: keylime-6.0.0-1.fc32

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution...

[SECURITY] Fedora 32 Update: prosody-0.11.8-1.fc32

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

[SECURITY] Fedora 32 Update: mingw-flac-1.3.3-1.fc32

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

[SECURITY] Fedora 32 Update: mingw-c-ares-1.17.1-1.fc32

c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...

redis -- Integer overflow on 32-bit systems

Redis Development team reports: Redis 4.0 or newer uses a configurable limit for the maximum supported bulk input size. By default, it is 512MB which is a safe value for all platforms. If the limit is significantly increased, receiving a large request from a client may trigger several integer...

Fedora 32 : 1:wpa_supplicant (2021-1a2443baa0)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-1a2443baa0 advisory. - In p2pcopyclientinfo of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if...

Fedora 32 : subversion (2021-16e51e39a6)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-16e51e39a6 advisory. - Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client...

[SECURITY] Fedora 32 Update: wpa_supplicant-2.9-5.fc32

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

[SECURITY] Fedora 32 Update: libntlm-1.6-1.fc32

A library for authenticating with Microsoft NTLMV1 challenge-response, derived from Samba sources...

Fedora: Security Advisory for libntlm (FEDORA-2020-1f643c272c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: snapd-2.49-1.fc32

Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...

Fedora: Security Advisory for spice-vdagent (FEDORA-2021-510977db25)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 32 : snapd (2021-2e14fd7c2d)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-2e14fd7c2d advisory. - Highlights of snapd 2.49 release - Detection/abort of very slow downloads - Fix snap try inside lxd containers - Add new install-mode: disable option...

[SECURITY] Fedora 32 Update: spice-vdagent-0.21.0-1.fc32

Spice agent for Linux guests offering the following features: Features: Client mouse mode no need to grab mouse by client, no mouse lag this is handled by the daemon by feeding mouse events into the kernel via uinput. This will only work if the active X-session is running a spice-vdagent process ...