Fedora: Security Advisory for kernel-headers (FEDORA-2021-620fb40359)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : 1:dia (2020-1fe0e08c8d)

Added upstream patch to avoid infinite loop on filenames with invalid encoding CVE-2019-19451, 1778767 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

[SECURITY] Fedora 33 Update: kernel-5.10.6-200.fc33

The kernel meta package...

[SECURITY] Fedora 33 Update: golang-github-russellhaering-goxmldsig-1.1.0-1.fc33

Pure Go implementation of XML Digital Signatures...

[SECURITY] Fedora 33 Update: audacious-plugins-4.0.5-3.fc33

This package provides essential plugins for the Audacious audio player...

Fedora: Security Advisory for ocp (FEDORA-2021-64168929e4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cpu-x (FEDORA-2021-9b7b3599be)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for php (FEDORA-2021-8dac5c39f3)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for adplug (FEDORA-2021-64168929e4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : adplug / audacious-plugins / ocp (2021-64168929e4)

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-64168929e4 advisory. - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor'...

Fedora: Security Advisory for python-lxml (FEDORA-2020-0e055ea503)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : golang-github-russellhaering-goxmldsig (2021-a2a7673da2)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a2a7673da2 advisory. - In goxmldsig XML Digital Signatures implemented in pure Go before version 1.1.0, with a carefully crafted XML file, an attacker can completely...

Fedora 33 : php (2021-8dac5c39f3)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-8dac5c39f3 advisory. - In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filtervar$url, FILTERVALIDATEURL, PHP will accept...

Fedora 33 : cpu-x (2021-9b7b3599be)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-9b7b3599be advisory. - build: dmidecode - apply upstream patch & remove -Wno-format-security flag FEDORA-2021-9b7b3599be Note that Nessus has not tested for this issue but has...

Fedora 33 : python-lxml (2020-0e055ea503)

This update fixes mXSS security vulnerability due to the use of improper parser CVE-2020-27783 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 33 : kernel / kernel-headers (2021-3465ada1ca)

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-3465ada1ca advisory. - mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execut...

Fedora: Security Advisory for roundcubemail (FEDORA-2021-73359af51c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for sympa (FEDORA-2021-11cb6626e2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : sympa (2021-11cb6626e2)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-11cb6626e2 advisory. - Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as...

Fedora 33 : roundcubemail (2021-73359af51c)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-73359af51c advisory. - An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text...