Fix for CVE-2021-28831.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2021-27807 and CVE-2021-27906

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A possible security related issue is found on rubygem-kramdown where kramdown does not restrict custom Rouge formatters within Rouge::Formatters namespace. This issue is now assigned as CVE-2021-28834. This new rpm should fix this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upgrade to version 1.1.1.k

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2021-3421, CVE-2021-20271 and CVE-2021-20266.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-28591

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includes the backported upstream fix and should resolve the security issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream version (87.0) Release notes are available here - https://www.mozilla.org/en-US/firefox/87.0/releasenotes/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.11.10 stable kernel update contains a 'quick revert' of some 5.11.9 commits that caused noisy warnings to show up in the kernel log of some systems.

----

The 5.11.9 stable update contains a number of important fixes across the tree.

----

The 5.11.8 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

HVM soft-reset crashes toolstack [XSA-368, CVE-2021-28687] (#1940610)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is the monthly .NET Core 3.1 update for March 2021. Release notes:
https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.13/3.1.
13.md

This update includes a fix for CVE-2021-26701: .NET Core Remote Code Execution Vulnerability

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to latest upstream release (with security fixes!)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is the monthly .NET update for March 2021. Release notes:
https://github.com/dotnet/core/blob/main/release-notes/5.0/5.0.4/5.0.4 .md

This update also contains fixes for CVE-2021-26701.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2021-21772.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release CGAL-5.1.3.

Security fix for CVE-2020-28601, CVE-2020-28636, CVE-2020-35628, CVE-2020-35636.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security update for CVE-2021-3443

----

New upstream release 2.0.26

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.11.9 stable update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.11.8 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fixes for multiple CVEs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2021-20285

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

With the upgrade of python-cryptography in f33+, the PKCS7_get0_clients api was dropped. It has been replaced by a cleaner and easier api, which roca-detect now uses.

The consequence was that PKCS7 keys would be silently ignored. To test, run 

$ roca-detect /usr/lib/python3.*/site-packages/roca/tests/data/pkcs701.p7s

It should see 1 PKCS7 key.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Hi there. This is the latest release of the browser that Google doesn't want you to use.

It fixes a bag full of security issues: CVE-2021-21162 CVE-2021-21180 CVE-2021-21164 CVE-2021-21170 CVE-2021-21181 CVE-2021-21166 CVE-2021-21160 CVE-2021-21179 CVE-2021-21187 CVE-2021-21173 CVE-2021-21174 CVE-2021-21183 CVE-2021-21161 CVE-2021-21171 CVE-2021-21178 CVE-2021-21169 CVE-2021-21163 CVE-2021-21175 CVE-2021-21177 CVE-2021-21185 CVE-2021-21190 CVE-2021-21184 CVE-2021-21168 CVE-2021-21167 CVE-2021-21188 CVE-2021-21172 CVE-2021-21182 CVE-2021-21176 CVE-2021-21159 CVE-2021-21186 CVE-2021-21165 CVE-2021-21189

----

Fix issue with swiftshader where symbols were not properly generated for the dlopened shared objects, preventing proper functionality.

----

Update to 88.0.4324.182. 

Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

flatpak 1.10.2 release.

This is a security update which fixes a potential attack where a flatpak application could use custom formated .desktop files to gain access to files on the host system.

Other changes :

  - Fix memory leaks

  - Some test fixes

  - Documentation updates

  - G_BEGIN/END_DECLS added to library headders for c++ use

  - Fix for X11 cookies on OpenSUSE

  - Spawn portal better handles non-utf8 filenames

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

glib 2.66.8 release, fixing a security issue when using `g_file_replace()` with `G_FILE_CREATE_REPLACE_DESTINATION`.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2021-20179: unprivileged users can renew any certificate

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.11.7 stable kernel update contains a number if important fixes across the tree.

----

The 5.10.23 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2021-20179: Unprivileged users can renew any certificate

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.11.7 stable kernel update contains a number if important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 2.3.5, which addresses CVE-2021-21367.

Release notes:
https://github.com/elementary/switchboard-plug-bluetooth/releases/tag/ 2.3.5

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Backporting upstream fixes

  - Fixes CVE: CVE-2020-13574 CVE-2020-13575 CVE-2020-13577     CVE-2020-13578

  - Fixes CVE: CVE-2020-13576

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 0.5.0 Security fix for CVE-2021-23351

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2021-21300

A specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive file system such as NTFS, HFS+ or APFS. Note that clean/smudge filters have to be configured in advance, in the system-wide or global user configuration for this bug to be exploited.

This issue does not affect Fedora in default configurations.

For further details, please refer to the [upstream advisory](https://github.com/git/git/security/advisories/GHSA-8prw-h3c q-mghm).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to 3.0.13, fix CVE-2021-23336 (rhbz#1931542)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix open redirect vulnerability which may lead to     confidentiality and integrity compromise.

  - Fix crafted input which may cause a regular expression     DoS.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix crafted input which may cause a regular expression DoS.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to python3-3.8.8, see https://www.python.org/downloads/release/python-388/ for details.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
148253	Fedora 33 : 1:busybox (2021-d20c8a4730)	medium
148238	Fedora 33 : pdfbox (2021-8b17a2725e)	medium
148232	Fedora 33 : rubygem-kramdown (2021-4c57a892d1)	medium
148231	Fedora 32 : pdfbox (2021-dc83ae690a)	medium
148230	Fedora 32 : rubygem-kramdown (2021-edc673e864)	medium
148229	Fedora 33 : openssl (2021-d049f32a82)	high
148228	Fedora 33 : rpm (2021-8d52a8a999)	high
148214	Fedora 33 : slic3r (2021-473e880567)	medium
148213	Fedora 33 : 1:qt (2021-e0f30b4500)	high
148208	Fedora 32 : firefox (2021-9fac28274f)	high
148205	Fedora 32 : kernel (2021-9503fffad9)	high
148204	Fedora 32 : slic3r (2021-1d72d8cea2)	medium
148202	Fedora 33 : xen (2021-0b784a4d02)	high
148199	Fedora 32 : xen (2021-a468f36bbe)	high
148198	Fedora 32 : dotnet3.1 (2021-265a3c7cb9)	high
148197	Fedora 33 : dotnet3.1 (2021-3da33cdc80)	high
148178	Fedora 32 : tor (2021-7cd0c1fb70)	high
148174	Fedora 32 : dotnet5.0 (2021-138728e59b)	high
148163	Fedora 32 : lib3mf (2021-6945629745)	medium
148161	Fedora 33 : lib3mf (2021-b73f9c96ee)	medium
148158	Fedora 33 : CGAL (2021-9de542ab4c)	high
148157	Fedora 32 : jasper (2021-26cb56b3cb)	medium
148156	Fedora 33 : kernel (2021-68b0dd2373)	high
148154	Fedora 33 : firefox (2021-c504fa63be)	high
148087	Fedora 33 : tor (2021-e68317166d)	medium
148085	Fedora 33 : jasper (2021-51b2657092)	medium
148051	Fedora 33 : kernel (2021-e49da8a226)	low
147959	Fedora 32 : moodle (2021-50f63a0161)	medium
147958	Fedora 33 : moodle (2021-431b232659)	medium
147957	Fedora 33 : dotnet5.0 (2021-1b22f31541)	high
147945	Fedora 33 : upx (2021-4b43992608)	high
147943	Fedora 33 : roca-detect (2021-acd448b558)	high
147942	Fedora 32 : upx (2021-dff7e97510)	high
147941	Fedora 32 : chromium (2021-c88a96bd4b)	medium
147940	Fedora 33 : flatpak (2021-26ad138ffa)	medium
147939	Fedora 33 : glib2 (2021-a1f51fc418)	medium
147935	Fedora 33 : pki-core (2021-6c412a4601)	medium
147934	Fedora 32 : kernel / kernel-headers / kernel-tools (2021-14f6642aa6)	high
147933	Fedora 32 : pki-core (2021-344dd24c84)	medium
147932	Fedora 33 : kernel / kernel-headers / kernel-tools (2021-bb755ed5e3)	high
147873	Fedora 32 : switchboard-plug-bluetooth (2021-7d55c00267)	medium
147859	Fedora 33 : switchboard-plug-bluetooth (2021-3dedd41a06)	medium
147856	Fedora 33 : gsoap (2021-faea36a9c3)	high
147854	Fedora 33 : qt5-qtsvg (2021-6167e8e205)	high
147847	Fedora 33 : golang-github-pires-proxyproto (2021-e01c1fe4cc)	medium
147815	Fedora 32 : git (2021-ffd0b2108d)	medium
147803	Fedora 32 : python-django (2021-ef83e8525a)	medium
147802	Fedora 33 : 1:rubygem-actionpack / 1:rubygem-activerecord (2021-b571fca1b8)	medium
147798	Fedora 32 : 1:rubygem-activerecord (2021-def0e32233)	medium
147795	Fedora 32 : mingw-python3 (2021-309bc2e727)	medium

Fedora Local Security Checks Family for Nessus

medium

medium

medium

medium

medium

high

high

medium

high

high

high

medium

high

high

high

high

high

high

medium

medium

high

medium

high

high

medium

medium

low

medium

medium

high

high

high

high

medium

medium

medium

medium

high

medium

high

medium

medium

high

high

medium

medium

medium

medium

medium

medium