x86 pv: Crash when handling guest access to MSR_MISC_ENABLE [XSA-333, CVE-2020-25602] (#1881619) Missing unlock in XENMEM_acquire_resource error path [XSA-334, CVE-2020-25598] (#1881616) race when migrating timers between x86 HVM vCPU-s [XSA-336, CVE-2020-25604] (#1881618) PCI passthrough code reading back hardware registers [XSA-337, CVE-2020-25595] (#1881587) once valid event channels may not turn invalid [XSA-338, CVE-2020-25597] (#1881588) x86 pv guest kernel DoS via SYSENTER [XSA-339, CVE-2020-25596] (#1881617) Missing memory barriers when accessing/allocating an event channel [XSA-340, CVE-2020-25603] (#1881583) out of bounds event channels available to 32-bit x86 domains [XSA-342, CVE-2020-25600] (#1881582) races with evtchn_reset() [XSA-343, CVE-2020-25599] (#1881581) lack of preemption in evtchn_reset() / evtchn_destroy() [XSA-344, CVE-2020-25601] (#1881586)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

rebuild

----

Autobuilt 0.15

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This release fixes CVE-2020-14392 (a memory corruption in XS functions when Perl stack is reallocated), CVE-2019-20919 (a NULL profile dereference in dbi_profile()), a documentation that old API functions are vulnerable to an overflow, and CVE-2020-14393 (a buffer overlfow on an overlong DBD class name). It also adds a missing dependency on FileHandle Perl module.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

grub2 updates for boothole vulnerabilities in f31/f32.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.107

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upgrade to upstream 3.6.3.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Add fix for CVE-2020-24977 (RHBZ#1877788).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- New upstream version (81.0)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 2.16.8

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2020-25219

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fixes for CVE-2020-1472

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for #1876738 and #1876689

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

We missed a few upstream releases but there's not breaking changes as far as I know. Lot of bug fixes and minor changes.

----

Addresses CVE-2020-11054: After a certificate error was overridden by the user, qutebrowser displays the URL as yellow (colors.statusbar.url.warn.fg). However, when the affected website was subsequently loaded again, the URL was mistakenly displayed as green (colors.statusbar.url.success_https). While the user already has seen a certificate error prompt at this point (or set content.ssl_strict to false which is not recommended), this could still provide a false sense of security. This is now fixed.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Add fix for CVE-2020-24977 (RHBZ#1877788, RHBZ#1877789).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update Chromium to 85.0.4183.102. Fix issue where unpackaged components prevented hardware accelerated rendering from working. Also fixes the following security issues: CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-15959

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to cryptsetup 2.3.4. Security fix for CVE-2020-14382

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to upstream version 5.1.3

----

  - update to new upstream version

----

  - fixes CVE-2020-12667

----

new upstream release https://www.knot-resolver.cz/2020-04-29-knot-resolver-5.1.0.html

----

  - bugfix for 5.0.0 release

----

  - see     https://knot-resolver.readthedocs.io/en/stable/upgrading     .html

  - version 5.0 no longer support network interface     configuration via systemd sockets and manual upgrade of     configuration file is required for upgrades

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.53.4

Lightning, Chatzilla and DOM Inspector are now provided in the same way as for themes and language packs (ie. as 'application global' addons). Previously, they were copied into the user profile on each update, which led to some issues. The old copies of those addons are automatically deleted from the user profile at update time (except a case when it was copied by hand, or has more recent version).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to the new upstream 3.6.15 release.

----

  - Fix memory leak when serializing iovec_t (#1845083)

  - Fix automatic libraries sonames detection (#1845806)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update updates .NET Core 3.1 to SDK 3.1.108 and Runtime 3.1.8.

This update includes a fix for CVE-2020-1045

Release Notes:
https://github.com/dotnet/core/blob/master/release-notes/3.1/3.1.8/3.1 .8.md

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 3.0.9

  - Force tests to pass

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.8.9 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

[Python 3.5.10](https://www.python.org/downloads/release/python-3510/).
[Changelog](https://docs.python.org/3.5/whatsnew/changelog.html#python
-3-5-10).

----

Update to 3.5.10rc1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 0.9.5

- https://www.libssh.org/2020/09/10/libssh-0-9-5/

  - Fixes CVE-2020-16135

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/drupal/releases/7.72

  - [Drupal core - Critical - Cross Site Request Forgery -     SA-CORE-2020-004](https://www.drupal.org/sa-core-2020-00     4) / CVE-2020-13663

- https://www.drupal.org/project/drupal/releases/7.71

- https://www.drupal.org/project/drupal/releases/7.70

  - [Drupal core - Moderately critical - Cross Site     Scripting -     SA-CORE-2020-002](https://www.drupal.org/sa-core-2020-00     2) / CVE-2020-11022 / CVE-2020-11023

  - [Drupal core - Moderately critical - Open Redirect -     SA-CORE-2020-003](https://www.drupal.org/sa-core-2020-00     3) / CVE-2020-13662

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update built with the new CMake settings Number of files which should have been owned by the testsuite subpackage are now owned by it Started building MeCab plugin

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to .NET Core SDK 3.1.107 and Runtime 3.1.7.

This fixes CVE-2020-1597

  - Release Notes:
    https://github.com/dotnet/core/blob/master/release-notes     /3.1/3.1.7/3.1.7.md

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New F31 selinux-policy build

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/drupal/releases/8.9.5

- https://www.drupal.org/project/drupal/releases/8.9.4

- https://www.drupal.org/project/drupal/releases/8.9.3

- https://www.drupal.org/project/drupal/releases/8.9.2

- https://www.drupal.org/project/drupal/releases/8.9.1

  - [Drupal core - Critical - Cross Site Request Forgery -     SA-CORE-2020-004](https://www.drupal.org/sa-core-2020-00     4)

  - [Drupal core - Critical - Arbitrary PHP code execution -     SA-CORE-2020-005](https://www.drupal.org/sa-core-2020-00     5)

  - [Drupal core - Less critical - Access bypass -     SA-CORE-2020-006](https://www.drupal.org/sa-core-2020-00     6)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to 3.0.10, fixes CVE-2020-24583, CVE-2020-24584

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Chromium 85.0.4183.83. Bugs fixed, security holes patched, and features added. Hold on to your butts.

List of CVEs resolved with this update: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 CVE-2020-6556 CVE-2020-6559 CVE-2020-6560 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 CVE-2020-6565 CVE-2020-6566 CVE-2020-6567 CVE-2020-6568 CVE-2020-6569 CVE-2020-6570 CVE-2020-6571

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to 2.2.16, CVE-2020-24583, CVE-2020-24584

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

8u265 update, disable LTO

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**Version 4.4.13** (2020-09-02)

  - security **CVE-2020-15094** Remove headers with internal     meaning from HttpClient responses (mpdude)

  - bug #38024 [Console] Fix undefined index for     inconsistent command name definition (chalasr)

  - bug #38023 [DI] fix inlining of non-shared services     (nicolas-grekas)

  - bug #38020 [PhpUnitBridge] swallow deprecations (xabbuh)

  - bug #38010 [Cache] Psr16Cache does not handle Proxy     cache items (alex-dev)

  - bug #37937 [Serializer] fixed fix encoding of cache keys     with anonymous classes (michaelzangerle)

----

**Version 4.4.12** (2020-08-31)

  - bug #37966 [HttpClient][MockHttpClient][DX] Throw when     the response factory callable does not return a valid     response (fancyweb)

  - bug #37971 [PropertyInfo] Backport support for typed     properties (PHP 7.4) (dunglas)

  - bug #37970 [PhpUnitBridge] Polyfill new phpunit 9.1     assertions (phpfour)

  - bug #37960 [PhpUnit] Add polyfill for     assertMatchesRegularExpression() (dunglas)

  - bug #37949 [Yaml] fix more numeric cases changing in PHP     8 (xabbuh)

  - bug #37921 [Yaml] account for is_numeric() behavior     changes in PHP 8 (xabbuh)

  - bug #37912 [ExpressionLanguage] fix passing arguments to     call_user_func_array() on PHP 8 (xabbuh)

  - bug #37907 [Messenger] stop using the deprecated schema     synchronizer API (xabbuh)

  - bug #37900 [Mailer] Fixed mandrill api header structure     (wulff)

  - bug #37888 [Mailer] Reorder headers used to determine     Sender (cvmiert)

  - bug #37872 [Sendgrid-Mailer] Fixed envelope recipients     on sendgridApiTransport (arendjantetteroo)

  - bug #37860 [Serializer][ClassDiscriminatorMapping] Fix     getMappedObjectType() when a discriminator child extends     another one (fancyweb)

  - bug #37853 [Validator] ensure that the validator is a     mock object for backwards-compatibility (xabbuh)

  - bug #36340 [Serializer] Fix configuration of the cache     key (dunglas)

  - bug #36810 [Messenger] Do not stack retry stamp     (jderusse)

  - bug #37849 [FrameworkBundle] Add missing mailer     transports in xsd (l-vo)

  - bug #37586 [ErrorHandler][DebugClassLoader] Add mixed     and static return types support (fancyweb)

  - bug #37845 [Serializer] Fix variadic support when using     type hints (fabpot)

  - bug #37841 [VarDumper] Backport handler lock when using     VAR_DUMPER_FORMAT (ogizanagi)

  - bug #37725 [Form] Fix Guess phpdoc return type     (franmomu)

  - bug #37771 Use PHPUnit 9.3 on php 8 (derrabus)

  - bug #36140 [Validator] Add BC layer for     notInRangeMessage when min and max are set (l-vo)

  - bug #35843 [Validator] Add target guards for Composite     nested constraints (ogizanagi)

  - bug #37803 Fix for issue #37681 (Rav)

  - bug #37744 [Yaml] Fix for #36624; Allow PHP constant as     first key in block (jnye)

  - bug #37767 [Form] fix mapping errors from unmapped forms     (xabbuh)

  - bug #37731 [Console] Table: support cells with newlines     after a cell with colspan >= 2 (GMTA)

  - bug #37791 Fix redis connect with empty password     (alexander-schranz)

  - bug #37790 Fix deprecated libxml_disable_entity_loader     (fabpot)

  - bug #37763 Fix deprecated libxml_disable_entity_loader     (jderusse)

  - bug #37774 [Console] Make sure we pass a numeric array     of arguments to call_user_func_array() (derrabus)

  - bug #37729 [FrameworkBundle] fail properly when the     required service is not defined (xabbuh)

  - bug #37701 [Serializer] Fix that it will never reach     DOMNode (TNAJanssen)

  - bug #37671 [Cache] fix saving no-expiry items with     ArrayAdapter (philipp-kolesnikov)

  - bug #37102 [WebProfilerBundle] Fix error with custom     function and web profiler routing tab (JakeFr)

  - bug #37560 [Finder] Fix GitIgnore parser when dealing     with (sub)directories and take order of lines into     account (Jeroeny)

  - bug #37700 [VarDumper] Improve previous fix on light     array coloration (l-vo)

  - bug #37705 [Mailer] Added the missing reset tag to     mailer.logger_message_listener (vudaltsov)

  - bug #37697 [Messenger] reduce column length for MySQL     5.6 compatibility (xabbuh)

----

  - fix path of doctrine/persistence 2 in autoloader

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

https://lists.gnupg.org/pipermail/gnutls-help/2020-September/004669.ht ml

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to upstream bugfix and security release 2.9.13.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.8.6 stable kernel update contains a number of important fixes across the tree.

----

The 5.7.17 stable kernel update contains a number of important fixes across the tree.

----

The 5.7.16 stable kernel updates contain a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.8.7 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libX11 1.6.12 (CVE-2020-14363, CVE 2020-14344)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
141102	Fedora 32 : xen (2020-f668e579be)	Low
141101	Fedora 31 : crun (2020-83d03bdb76)	High
140817	Fedora 31 : perl-DBI (2020-f30298614a)	Low
140816	Fedora 31 : 1:grub2 (2020-e19b87f4f5)	High
140815	Fedora 32 : xawtv (2020-cd5ad916e4)	Low
140814	Fedora 31 : singularity (2020-c1c4cb96d3)	High
140813	Fedora 32 : singularity (2020-22ab822e3b)	High
140812	Fedora 31 : libxml2 (2020-20ab468a33)	Medium
140763	Fedora 32 : firefox (2020-bb7ff551ce)	High
140762	Fedora 32 : mbedtls (2020-8b0d59bac6)	Low
140761	Fedora 32 : libproxy (2020-2407cb0512)	Medium
140760	Fedora 32 : 2:samba (2020-0be2776ed3)	High
140759	Fedora 32 : zeromq (2020-08402f4071)	Medium
140676	Fedora 32 : qutebrowser (2020-f0812d6aad)	Medium
140675	Fedora 32 : mingw-libxml2 (2020-b60dbdd538)	Medium
140674	Fedora 32 : chromium (2020-9b9e8e5306)	Medium
140673	Fedora 31 : mingw-libxml2 (2020-7dd29dacad)	Medium
140672	Fedora 31 : cryptsetup (2020-5ed5af6275)	Medium
140671	Fedora 31 : knot-resolver (2020-52e28feab6)	Medium
140670	Fedora 31 : seamonkey (2020-3813e1317b)	High
140669	Fedora 31 : gnutls (2020-30cd8d9ad6)	High
140668	Fedora 32 : seamonkey (2020-15999f707a)	High
140625	Fedora 32 : dotnet3.1 (2020-e2deb72e0f)	Medium
140624	Fedora 31 : python-flask-cors (2020-863fc5c796)	High
140623	Fedora 31 : kernel (2020-5920a7a0b2)	Low
140622	Fedora 31 : python35 (2020-4cf7c3910b)	High
140621	Fedora 31 : mbedtls (2020-48a1ae610c)	Low
140620	Fedora 32 : kernel (2020-3c6fedeb83)	Low
140619	Fedora 32 : libxml2 (2020-35087800be)	Medium
140618	Fedora 32 : python35 (2020-16167a66a2)	High
140609	Fedora 32 : libssh (2020-f4f5e49cb8)	Medium
140608	Fedora 32 : 1:grub2 (2020-41e57d7649)	High
140557	Fedora 31 : drupal7 (2020-fbb94073a1)	Medium
140556	Fedora 31 : community-mysql (2020-d5b2e71a17)	Medium
140555	Fedora 32 : dotnet-build-reference-packages / dotnet3.1 (2020-cad5d17c6d)	Medium
140554	Fedora 31 : selinux-policy (2020-b2d6cffc6f)	High
140553	Fedora 32 : drupal8 (2020-a064e7dd38)	High
140552	Fedora 32 : community-mysql (2020-9c27be9396)	Medium
140551	Fedora 32 : python-django (2020-94407454d7)	Medium
140550	Fedora 31 : chromium (2020-88bf0a76d1)	High
140549	Fedora 31 : python-django (2020-6941c0a65b)	Medium
140548	Fedora 32 : 1:java-1.8.0-openjdk-aarch32 (2020-43901402db)	High
140547	Fedora 31 : 1:java-1.8.0-openjdk-aarch32 (2020-3379860d5e)	High
140546	Fedora 32 : php-symfony4 (2020-16eb328853)	High
140545	Fedora 32 : drupal7 (2020-0b32a59b54)	Medium
140544	Fedora 32 : mingw-gnutls (2020-0ab6656303)	Medium
140543	Fedora 31 : ansible (2020-0450cfd7e3)	High
140542	Fedora 31 : kernel / kernel-headers / kernel-tools (2020-00e872744f)	High
140508	Fedora 32 : kernel (2020-b858b48b23)	High
140507	Fedora 31 : libX11 (2020-9a0b272cc1)	Medium

Fedora Local Security Checks Family for Nessus