Fedora: Security Advisory for raptor2 (FEDORA-2021-5752e07eb6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 32 : raptor2 (2021-5752e07eb6)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5752e07eb6 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Fedora 32 : glibc (2021-6e581c051a)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-6e581c051a advisory. - The iconv program in the GNU C Library aka glibc or libc6 2.31 and earlier, when invoked with multiple suffixes in the destination encoding...

Fedora 32 : 1:dovecot (2021-c90cb486f7)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c90cb486f7 advisory. - An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled...

Fedora 32 : python-cairosvg (2021-8537865fb5)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-8537865fb5 advisory. - security fix for GHSA-hq37-853p-g5cf: Regular Expression Denial of Service REDoS, rated as moderate severity published 17 hours ago by liZe...

Fedora 32 : 1:nodejs (2021-d5b2c18fe6)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d5b2c18fe6 advisory. - Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers wi...

Fedora 32 : coturn (2021-32d0068851)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-32d0068851 advisory. - Coturn is free open source implementation of TURN and STUN Server. Coturn before version 4.5.2 by default does not allow peers to connect and rela...

Fedora 32 : php (2021-ca0e53d310)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-ca0e53d310 advisory. - In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filtervar$url, FILTERVALIDATEURL, PHP will accept...

Fedora 32 : flatpak (2021-f807eb480a)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-f807eb480a advisory. - This is a security update that fixes a sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of...

Fedora 32 : kernel / kernel-headers (2021-082e638d02)

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-082e638d02 advisory. - In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by...

Fedora: Security Advisory for flatpak (FEDORA-2021-f807eb480a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: golang-github-buger-jsonparser-1.1.1-1.fc32

Alternative JSON parser for Go. It does not require you to know the structure of the payload eg. create structs, and allows accessing fields by providing the path to them. It is up to 10 times faster than standard encoding/json package depending on payload s ize and usage, allocates no memory...

Fedora: Security Advisory for golang-github-buger-jsonparser (FEDORA-2021-b670727349)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: kernel-5.10.7-100.fc32

The kernel meta package...

[SECURITY] Fedora 32 Update: python-cairosvg-2.4.2-4.fc32

CairoSVG is a SVG 1.1 to PNG, PDF, PS and SVG converter which can also be u sed as a Python library...

Fedora: Security Advisory for php (FEDORA-2021-ca0e53d310)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mingw-openjpeg2 (FEDORA-2020-d32853a28d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 32 : mingw-openjpeg2 / openjpeg2 (2020-d32853a28d)

This update backports patches for CVE-2020-27841, CVE-2020-27842, CVE-2020-27843, CVE-2020-27845. ---- This update backports patches for CVE-2020-27824 and CVE-2020-27823. ---- Backport patch for CVE-2020-27814. Note that Tenable Network Security has extracted the preceding description block...

[SECURITY] Fedora 32 Update: audacious-plugins-3.10.1-7.fc32

This package provides essential plugins for the Audacious audio player...

[SECURITY] Fedora 32 Update: adplug-2.3.3-1.fc32

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...