Security fix for CVE-2020-14002.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security update for CVE-2020-12695 (CallStranger)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Remmina 1.4.7 and FreeRDP 2.1.2 to fix many bugs and CVEs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Coturn 4.5.1.3 ==============

  - merge PR #575: Fix rpm packaging

  - merge PR #576: Tell tar to not include the metadata into     release

  - merge PR #574: Change Docker `turnserver.conf` to latest     `turnserver.conf`

  - merge PR #566: Remove reference to SSLv3

  - merge PR #579: Ignore MD5 for BoringSSL

  - merge PR #577: Build RPM from local folder instead of     Git repo

  - Fix for CVE-2020-4067: STUN response buffer not     initialized properly (issue found and reported #583 by     Felix D&ouml;rre)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

FIx CVE-2019-20454

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is a security fix release that includes fixes for the following local buffer overflow vulnerability.

  - CVE-2022-4044: Local users can perform a buffer overflow     attack against the xrdp-sesman service and then     impersonate it

This update is recommended for all xrdp users.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.5.6 upstream bugfix and security update. Fixes CVE-2018-16516

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 26, a bugfix and security release. FIxes CVE-2020-14148.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 83.0.4103.116. Fixes CVE-2020-6509.

----

Black Lives Matter. Saying this does not mean that other lives do not matter. It should not be controversial to say this. If I say Chromium updates matter, it does not mean that other Fedora packages do not matter, it means that a Chromium update is needed to fix this giant pile of severe security vulnerabilities, here, today, now :

CVE-2020-6463 CVE-2020-6465 CVE-2020-6466 CVE-2020-6467 CVE-2020-6468 CVE-2020-6469 CVE-2020-6470 CVE-2020-6471 CVE-2020-6472 CVE-2020-6473 CVE-2020-6474 CVE-2020-6475 CVE-2020-6476 CVE-2020-6478 CVE-2020-6479 CVE-2020-6480 CVE-2020-6481 CVE-2020-6482 CVE-2020-6483 CVE-2020-6484 CVE-2020-6485 CVE-2020-6486 CVE-2020-6487 CVE-2020-6488 CVE-2020-6489 CVE-2020-6490 CVE-2020-6491 CVE-2020-6505 CVE-2020-6506 CVE-6507

In making that analogy, I do not intend to trivialize BLM. In no way do I mean to compare the lives of people to a silly web browser update. People are infinitely important than software. But since I'm here to push this software update out, I am also choosing to say clearly and unambiguously that Black Lives Matter. 

Open Source proves that many voices, many contributions, together can change the world. It depends on it. This is my voice.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2019-12360.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2020-12695 (UPnP SUBSCRIBE misbehavior in hostapd WPS AP)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Samba 4.12.5

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-10753 ceph: radosgw: HTTP header injection via CORS ExposeHeader tag

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes CVE-2020-10177, CVE-2020-10994, CVE-2020-10379, CVE-2020-11538 and CVE-2020-10378.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-June/000 252.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

# Python 3.6.11

Python 3.6.11 is the latest security fix release of Python 3.6.

  - bpo-39073: Disallow CR or LF in     email.headerregistry.Address arguments to guard against     header injection attacks.

  - bpo-38576: Disallow control characters in hostnames in     http.client, addressing CVE-2019-18348. Such potentially     malicious header injection URLs now cause a InvalidURL     to be raised.

  - bpo-39503: CVE-2020-8492: The AbstractBasicAuthHandler     class of the urllib.request module uses an inefficient     regular expression which can be exploited by an attacker     to cause a denial of service. Fix the regex to prevent     the catastrophic backtracking. Vulnerability reported by     Ben Caller and Matt Schwager.

Also fix a regression with `distutils.sysconfig.get_config_var('LIBPL')` value in Fedora specific patches.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

3.48.1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-14954

----

Minor update

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-14954

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a security issue causing a memory leak when an AES-CMAC key is enabled for authentication.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 83.0.4103.116. Fixes CVE-2020-6509.

----

Black Lives Matter. Saying this does not mean that other lives do not matter. It should not be controversial to say this. If I say Chromium updates matter, it does not mean that other Fedora packages do not matter, it means that a Chromium update is needed to fix this giant pile of severe security vulnerabilities, here, today, now :

CVE-2020-6463 CVE-2020-6465 CVE-2020-6466 CVE-2020-6467 CVE-2020-6468 CVE-2020-6469 CVE-2020-6470 CVE-2020-6471 CVE-2020-6472 CVE-2020-6473 CVE-2020-6474 CVE-2020-6475 CVE-2020-6476 CVE-2020-6478 CVE-2020-6479 CVE-2020-6480 CVE-2020-6481 CVE-2020-6482 CVE-2020-6483 CVE-2020-6484 CVE-2020-6485 CVE-2020-6486 CVE-2020-6487 CVE-2020-6488 CVE-2020-6489 CVE-2020-6490 CVE-2020-6491 CVE-2020-6505 CVE-2020-6506 CVE-2020-6507

In making that analogy, I do not intend to trivialize BLM. In no way do I mean to compare the lives of people to a silly web browser update. People are infinitely important than software. But since I'm here to push this software update out, I am also choosing to say clearly and unambiguously that Black Lives Matter. 

Open Source proves that many voices, many contributions, together can change the world. It depends on it. This is my voice.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.0.0 (rhbz #1848716), fixes CVE-2020-13882 / CVE-2019-13033

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release

  - Important security fixes: CVE-2017-9103 CVE-2017-9104     CVE-2017-9105 CVE-2017-9109: &#9;Vulnerable     applications: all adns callers. Exploitable by: the     local recursive resolver. &#9;Likely worst case: Remote     code execution. CVE-2017-9106: &#9;Vulnerable     applications: those that make SOA queries. Exploitable     by: upstream DNS data sources. &#9;Likely worst case:
    DoS (crash of the adns-using application) CVE-2017-9107:
    &#9;Vulnerable applications: those that use     adns_qf_quoteok_query. Exploitable by: sources of query     domain names. &#9;Likely worst case: DoS (crash of the     adns-using application) CVE-2017-9108: &#9;Vulnerable     applications: adnshost. Exploitable by: code responsible     for framing the input. Likely worst case: DoS (adnshost     crashes at EOF). All found by AFL 2.35b. Thanks to the     University of Cambridge Department of Applied     Mathematics for computing facilities.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This release fixes security issue CVE-2020-13999 .

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.8.1 Fix CVE-2020-13775 possible crash/NULL pointer dereference

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2020-13625 vulnerability.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.0.0 (rhbz #1848716), Fixes CVE-2020-13882 / CVE-2019-13033

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Special Register Buffer speculative side channel [XSA-320]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2020-12803 limit forms to http[s]

  - CVE-2020-12802 improve docx steathmode import

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- avoid overwriting a local file with -J (CVE-2020-8177)

  - fix partial password leak over DNS on HTTP redirect     (CVE-2020-8169)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to last release, including security fix. Upstream [Release notes](https://downloads.isc.org/isc/bind9/9.11.20/doc/arm/Bv9ARM.html )

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This release fixes a number of issues found in the 4.1 branch.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
138244	Fedora 31 : putty (2020-f4dba093f1)	Medium
138243	Fedora 31 : gssdp / gupnp (2020-e538e3e526)	High
138242	Fedora 31 : 2:freerdp / remmina (2020-dd8c133829)	High
138241	Fedora 32 : coturn (2020-d946f64eea)	Medium
138240	Fedora 31 : mingw-pcre2 (2020-b11cf352bd)	Medium
138239	Fedora 32 : 2:freerdp / remmina (2020-a3ef998a70)	High
138238	Fedora 31 : coturn (2020-9eadf517de)	Medium
138237	Fedora 31 : 1:xrdp (2020-9c26a458ae)	High
138236	Fedora 32 : 1:xrdp (2020-9666e4c9cd)	High
138235	Fedora 32 : putty (2020-35442ce9b7)	Medium
138198	Fedora 32 : python-flask-admin (2020-e8f384af5f)	Medium
138197	Fedora 32 : ngircd (2020-e6d1d849c5)	Medium
138196	Fedora 31 : ngircd (2020-8c33e3a771)	Medium
138195	Fedora 31 : firefox (2020-8ba9376229)	High
138194	Fedora 31 : chromium (2020-77f89ab772)	Medium
138193	Fedora 31 : python-flask-admin (2020-4aaf6e6d7c)	Medium
138164	Fedora 32 : gst (2020-9e6f5b3ae2)	High
138163	Fedora 31 : gst (2020-3d23d3ea02)	High
138122	Fedora 31 : alpine (2020-f822ea9330)	Medium
138121	Fedora 32 : 1:xpdf (2020-f34d97b1fd)	Medium
138120	Fedora 32 : hostapd (2020-df3e1cfde9)	High
138119	Fedora 31 : 1:xpdf (2020-de27bb80af)	Medium
138118	Fedora 32 : 2:samba / libldb (2020-ccd9bdb2eb)	High
138117	Fedora 32 : 2:ceph (2020-c9bff9688e)	High
138116	Fedora 32 : python-pillow (2020-c52106e48a)	Medium
138115	Fedora 32 : mediawiki (2020-9c97633708)	Medium
138114	Fedora 32 : python36 (2020-8bdd3fd7a4)	Medium
138113	Fedora 32 : filezilla / libfilezilla (2020-74dd64990b)	High
138112	Fedora 32 : firefox (2020-55077d678a)	High
138111	Fedora 32 : alpine (2020-386249cec2)	Medium
138110	Fedora 31 : 5:mutt (2020-31af2ac7fd)	Medium
138109	Fedora 32 : gssdp / gupnp (2020-1f7fc0d0c9)	High
138108	Fedora 32 : 5:mutt (2020-1cb4c3697b)	Medium
138070	Fedora 32 : ntp (2020-a0b39d58db)	High
138069	Fedora 32 : chromium (2020-08561721ad)	Medium
137929	Fedora 32 : lynis (2020-f251753b0f)	Low
137928	Fedora 31 : adns (2020-e59bcaf702)	High
137927	Fedora 32 : libEMF (2020-964e46d289)	Medium
137926	Fedora 32 : adns (2020-530188bf36)	High
137925	Fedora 31 : libEMF (2020-4407a1983d)	Medium
137924	Fedora 31 : znc (2020-12237dbae2)	Low
137923	Fedora 31 : php-PHPMailer (2020-0bbe6304e3)	Medium
137922	Fedora 32 : php-PHPMailer (2020-06e87e71fe)	Medium
137921	Fedora 31 : lynis (2020-059e1591d6)	Low
137920	Fedora 32 : znc (2020-0091083d6d)	Low
137868	Fedora 31 : xen (2020-e49a911382)	High
137867	Fedora 31 : 1:libreoffice (2020-8922773bc4)	Medium
137866	Fedora 32 : curl (2020-6af1dd2936)	High
137865	Fedora 31 : 32:bind (2020-5f8da4b260)	Medium
137847	Fedora 31 : suricata (2020-cd84e46e68)	High

Fedora Local Security Checks Family for Nessus