USN-7472-1: Micropython vulnerabilities

Junwha Hong and Wonil Jang discovered that Micropython incorrectly handled the length of a buffer in mpvfsumount, leading to a heap-based buffer overflow vulnerability. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Micropython vulnerabilities (USN-7472-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7472-1 advisory. Junwha Hong and Wonil Jang discovered that Micropython incorrectly handled the length of a buffer in mpvfsumount, leading...

Fedora 41 : micropython (2024-cd5c1dfa94)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-cd5c1dfa94 advisory. Update to 1.23.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 41 : micropython (2024-9f2a705459)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9f2a705459 advisory. Automatic update for micropython-1.22.2-1.fc41. Changelog Fri Mar 22 2024 Charalampos Stratakis - 1.22.2-1 - Update to 1.22.2 - Security fixes for...

Fedora 39 : micropython (2024-9c81ad492a)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9c81ad492a advisory. Update to 1.23.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 40 : micropython (2024-f9ca680ecd)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f9ca680ecd advisory. Update to 1.23.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...