This update contains patches for the BleedingTooth CVEs.

----

The 5.8.15 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libdnf 0.54.2-2

  - Increase needed conflicting dnf version

dnf 4.4.0-2

  - Increase required libdnf version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.17.7 -- https://www.claws-mail.org/news.php

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update contains patches for the BleedingTooth CVEs.

----

The 5.8.15 stable kernel update contains a number of important fixes across the tree.

----

The 5.8.14 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Prosody 0.11.7 ==============

This is a security release for the 0.11.x stable branch. It is strongly recommended that all users upgrade to this release, especially those whose deployments have enabled `mod_websocket`.

As well as upgrading, we recommend all public deployments to review and configure the `c2s_stanza_size_limit` and `s2s_stanza_size_limit` options to values they are comfortable with. The value is specified in bytes, and the XMPP specification requires values to be at least 10000 bytes, however it also recommends against just setting the limit to 10000 bytes. We are working to obtain data on real-world stanza sizes in order to determine sensible defaults suitable for a future release.

Security ========

  - mod_websocket: Enforce size limits on received frames     (fixes #1593)

Fixes and improvements ======================

  - mod_c2s, mod_s2s: Make stanza size limits configurable

  - Add configuration options to control Lua garbage     collection parameters

  - net.http: Backport SNI support for outgoing HTTP     requests (#409)

  - mod_websocket: Process all data in the buffer on close     frame and connection errors (fixes #1474, #1234)

  - util.indexedbheap: Fix heap data structure corruption,     causing some timers to fail after a reschedule (fixes     #1572)

Prosody 0.11.6 ==============

This release brings a collection of fixes and improvements added since the 0.11.5 release improving security, performance, usability and interoperability.

This version continues the deprecation of using `prosodyctl` to start/stop Prosody.

Fixes and improvements ======================

  - mod_storage_internal: Fix error in time limited queries     on items without &lsquo;when&rsquo; field, fixes #1557

  - mod_carbons: Fix handling of incoming MUC PMs #1540

  - mod_csi_simple: Consider XEP-0353: Jingle Message     Initiation important

  - mod_http_files: Avoid using inode in etag, fixes #1498:
    Fail to download file on FreeBSD

  - mod_admin_telnet: Create a DNS resolver per console     session (fixes #1492: Telnet console DNS commands     reduced usefulness)

  - core.certmanager: Move EECDH ciphers before EDH in     default cipherstring (fixes #1513)

  - mod_s2s: Escape invalid XML in loggin (same way as     mod_c2s) (fixes #1574: Invalid XML input on s2s     connection is logged unescaped)

  - mod_muc: Allow control over the     server-admins-are-room-owners feature (see #1174)

  - mod_muc_mam: Remove spoofed archive IDs before archiving     (fixes #1552: MUC MAM may strip its own archive id)

  - mod_muc_mam: Fix stanza id filter event name, fixes     #1546: mod_muc_mam does not strip spoofed stanza ids

  - mod_muc_mam: Fix missing advertising of XEP-0359, fixes     #1547: mod_muc_mam does not advertise stanza-id

Minor changes =============

  - net.http API: Add `request:cancel()` method

  - net.http API: Fix traceback on invalid URL passed to     request()

  - MUC: Persist affiliation_data in new MUC format

  - mod_websocket: Fire event on session creation (thanks     Aaron van Meerten)

  - MUC: Always include     &lsquo;affiliation&rsquo;/&lsquo;role&rsquo; attributes,     defaulting to &lsquo;none&rsquo; if nil

  - mod_tls: Log when certificates are (re)loaded

  - mod_vcard4: Report correct error condition (fixes #1521:
    mod_vcard4 reports wrong error)

  - net.http: Re-expose `destroy_request()` function (fixes     unintentional API breakage)

  - net.http.server: Strip port from Host header in IPv6     friendly way (fix #1302)

  - util.prosodyctl: Tell prosody do daemonize via command     line flag (fixes #1514)

  - SASL: Apply saslprep where necessary, fixes #1560: Login     fails if password contains special chars

  - net.http.server: Fix reporting of missing Host header

  - util.datamanager API: Fix iterating over     &ldquo;users&rdquo; (thanks marc0s)

  - net.resolvers.basic: Default conn_type to     &lsquo;tcp&rsquo; consistently if unspecified (thanks     marc0s)

  - mod_storage_sql: Fix check for deletion limits (fixes     #1494)

  - mod_admin_telnet: Handle unavailable cipher info (fixes     #1510: mod_admin_telnet backtrace)

  - Log warning when using `prosodyctl start/stop/restart`

  - core.certmanager: Look for `privkey.pem` to go with     `fullchain.pem` (fixes #1526)

  - mod_storage_sql: Add index covering sort_id to improve     performance (fixes #1505)

  - mod_mam,mod_muc_mam: Allow other work to be performed     during archive cleanup (fixes #1504)

  - mod_muc_mam: Don&rsquo;t strip MUC tags, fix #1567: MUC     tags stripped by mod_muc_mam

  - mod_pubsub, mod_pep: Ensure correct number of children     of (fixes #1496)

  - mod_register_ibr: Add FORM_TYPE as required by XEP-0077     (fixes #1511)

  - mod_muc_mam: Fix traceback saving message from     non-occupant (fixes #1497)

  - util.startup: Remove duplicated initialization of     logging (fix #1527: startup: Logging initialized twice)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Backport fix for CVE-2020-26159

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-8927

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

autobuilt v2.1.0,Security fix for CVE-2020-14370

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Make dnsmasq listen in default configuration only on localhost device.
bind-dynamic is not required, because localhost should not change during the life of dnsmasq.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**PHP version 7.4.11** (01 Oct 2020)

**Core:**

  - Fixed bug php#79699 (PHP parses encoded cookie names so     malicious `__Host-` cookies can be sent).
    (**CVE-2020-7070**) (Stas)

  - Fixed bug php#79979 (passing value to by-ref param via     CUFA crashes). (cmb, Nikita)

  - Fixed bug php#80037 (Typed property must not be accessed     before initialization when __get() declared). (Nikita)

  - Fixed bug php#80048 (Bug php#69100 has not been fixed     for Windows). (cmb)

  - Fixed bug php#80049 (Memleak when coercing integers to     string via variadic argument). (Nikita)

**Calendar:**

  - Fixed bug php#80007 (Potential type confusion in     unixtojd() parameter parsing). (Andy Postnikov)

**OPcache:**

  - Fixed bug php#80002 (calc free space for new interned     string is wrong). (t-matsuno)

  - Fixed bug php#80046 (FREE for SWITCH_STRING optimized     away). (Nikita)

  - Fixed bug php#79825 (opcache.file_cache causes SIGSEGV     when custom opcode handlers changed). (SammyK)

**OpenSSL:**

  - Fixed bug php#79601 (Wrong ciphertext/tag in AES-CCM     encryption for a 12 bytes IV). (**CVE-2020-7069**)     (Jakub Zelenka)

**PDO:**

  - Fixed bug php#80027 (Terrible performance using     $query->fetch on queries with many bind parameters     (Matteo)

**Standard:**

  - Fixed bug php#79986 (str_ireplace bug with diacritics     characters). (cmb)

  - Fixed bug php#80077 (getmxrr test bug). (Rainer Jung)

  - Fixed bug php#72941 (Modifying bucket->data by-ref has     no effect any longer). (cmb)

  - Fixed bug php#80067 (Omitting the port in bindto setting     errors). (cmb)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

2020.09.26, Version 1.40.0 (Stable)

Changes since version 1.39.0 :

  - udp: add UV_UDP_MMSG_FREE recv_cb flag (Ryan Liptak)

  - include: re-map UV__EPROTO from 4046 to -4046 (YuMeiJie)

  - doc: correct UV_UDP_MMSG_FREE version added (cjihrig)

  - doc: add uv_metrics_idle_time() version metadata (Ryan     Liptak)

  - win,tty: pass through utf-16 surrogate pairs (Mustafa M)

  - unix: fix DragonFly BSD build (Aleksej Lebedev)

  - win,udp: fix error code returned by connect() (Santiago     Gimeno)

  - src: suppress user_timeout maybe-uninitialized (Daniel     Bevenius)

  - test: fix compiler warning (Vladim&iacute;r     &#x10C;un&aacute;t)

  - build: fix the Haiku cmake build (David Carlier)

  - linux: fix i386 sendmmsg/recvmmsg support (Ben     Noordhuis)

  - build: add libuv-static pkg-config file (Nikolay Mitev)

  - unix,win: add uv_timer_get_due_in() (Ulrik Strid)

  - build,unix: add QNX support (Elad Lahav)

  - include: remove incorrect UV__ERR() for EPROTO (cjihrig)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**PHP version 7.3.23** (01 Oct 2020)

**Core:**

  - Fixed bug php#80048 (Bug php#69100 has not been fixed     for Windows). (cmb)

  - Fixed bug php#80049 (Memleak when coercing integers to     string via variadic argument). (Nikita)

  - Fixed bug php#79699 (PHP parses encoded cookie names so     malicious `__Host-` cookies can be sent).
    (**CVE-2020-7070**) (Stas)

**Calendar:**

  - Fixed bug php#80007 (Potential type confusion in     unixtojd() parameter parsing). (Andy Postnikov)

**OPcache:**

  - Fixed bug php#80002 (calc free space for new interned     string is wrong). (t-matsuno)

  - Fixed bug php#79825 (opcache.file_cache causes SIGSEGV     when custom opcode handlers changed). (SammyK)

**OpenSSL:**

  - Fixed bug php#79601 (Wrong ciphertext/tag in AES-CCM     encryption for a 12 bytes IV). (**CVE-2020-7069**)     (Jakub Zelenka)

**PDO:**

  - Fixed bug php#80027 (Terrible performance using     $query->fetch on queries with many bind parameters     (Matteo)

**Standard:**

  - Fixed bug php#79986 (str_ireplace bug with diacritics     characters). (cmb)

  - Fixed bug php#80077 (getmxrr test bug). (Rainer Jung)

  - Fixed bug php#72941 (Modifying bucket->data by-ref has     no effect any longer). (cmb)

  - Fixed bug php#80067 (Omitting the port in bindto setting     errors). (cmb)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Mumble 1.3.2. ===

Client

  - Fixed: Overlay not starting (#4282)

Server

  - Fixed: keychain-error on macOS for custom certificates     (#4345)

Known issues

  - Overlay blocked by BattleEye. A request to whitelist it     has been made.

  - Overlay blocked by CS:GO Trusted Mode

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.14.0

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 85.0.4183.121. Why? Because security, that's why. It fixes these CVEs :

CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966

It also has a fix for an issue where networking... uh... didn't.

----

Update Chromium to 85.0.4183.102. Fix issue where unpackaged components prevented hardware accelerated rendering from working. Also fixes the following security issues: CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-15959

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Rebase to latest upstream version.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upgrade to Ruby on Rails 6.0.3.3. Fixes CVEs: #1877568 #1831529 #1852381

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

tpm2-tss 3.0.1 changed or fixed :

&bull; Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly

&bull; Note that all TPM object created with a PolicyPCR with the currentPcrs

&bull; and currentPcrsAndBank options have been created with an incorrect policy

&bull; that ommits PCR checks. All these objects have to be recreated!

&bull; Fix bug in FAPI NV creation with custom index values

&bull; Cleanup of leftover sessions in error cases in FAPI

&bull; Better error messages in several FAPI errors

&bull; Add checks to FAPI policy paths

&bull; Add checks if FAPI is correctly provisioned

&bull; Fix execution of FAPI policies in some cases

&bull; Allow 0x prefixes for TPMU_HA in JSON encoding

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Patch for CVE-2020-24890

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

x86 pv: Crash when handling guest access to MSR_MISC_ENABLE [XSA-333, CVE-2020-25602] (#1881619) Missing unlock in XENMEM_acquire_resource error path [XSA-334, CVE-2020-25598] (#1881616) race when migrating timers between x86 HVM vCPU-s [XSA-336, CVE-2020-25604] (#1881618) PCI passthrough code reading back hardware registers [XSA-337, CVE-2020-25595] (#1881587) once valid event channels may not turn invalid [XSA-338, CVE-2020-25597] (#1881588) x86 pv guest kernel DoS via SYSENTER [XSA-339, CVE-2020-25596] (#1881617) Missing memory barriers when accessing/allocating an event channel [XSA-340, CVE-2020-25603] (#1881583) out of bounds event channels available to 32-bit x86 domains [XSA-342, CVE-2020-25600] (#1881582) races with evtchn_reset() [XSA-343, CVE-2020-25599] (#1881581) lack of preemption in evtchn_reset() / evtchn_destroy() [XSA-344, CVE-2020-25601] (#1881586)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2020-26116: prevent HTTP request method CRLF     injection in httplib

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 4.3.1

  - PowerDNS Security Advisory 2020-05 (CVE-2020-17482)

Release notes:
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1

Security Advisory:
https://docs.powerdns.com/authoritative/security-advisories/powerdns-a dvisory-2020-05.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Samba 4.13.0

----

Security fixes for CVE-2020-1472

----

Update to Samba 4.13.0rc4

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Add fix for PAC buffer overflow

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-Septembe r/000260.html

https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-Septembe r/000262.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update updates .NET Core 3.1 to SDK 3.1.108 and Runtime 3.1.8.

This update includes a fix for CVE-2020-1045

Release Notes:
https://github.com/dotnet/core/blob/master/release-notes/3.1/3.1.8/3.1 .8.md

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-5238

  - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled     cmark-gfm to 0.29.0.gfm.1

https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5
-hc85

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

tpm2-tss 2.4.3 changed or fixed :

&bull; Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly &bull; Note that all TPM object created with a PolicyPCR with the currentPcrs &bull; and currentPcrsAndBank options have been created with an incorrect policy &bull; that ommits PCR checks. All these objects have to be recreated! &bull; Fix bug in FAPI NV creation with custom index values &bull; Cleanup of leftover sessions in error cases in FAPI &bull; Better error messages in several FAPI errors &bull; Add checks to FAPI policy paths &bull; Add checks if FAPI is correctly provisioned &bull; Fix execution of FAPI policies in some cases &bull;
Allow 0x prefixes for TPMU_HA in JSON encoding

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-5238

  - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled     cmark-gfm to 0.29.0.gfm.1

  - also update hakyll to 4.13.4.0

https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5
-hc85

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix PAC buffer overflow

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 85.0.4183.121. Why? Because security, that's why. It fixes these CVEs :

CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966

It also has a fix for an issue where networking... uh... didn't.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fixes for CVE-2020-1472

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.107

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2020-25219

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

autobuilt v2.1.0, Security fix for CVE-2020-14370

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
141487	Fedora 32 : kernel (2020-e288acda9a)	High
141486	Fedora 32 : dnf / libdnf (2020-47a7fbf50d)	High
141485	Fedora 32 : claws-mail (2020-67d9661fe2)	Medium
141484	Fedora 31 : kernel (2020-ad980d282f)	High
141392	Fedora 32 : prosody (2020-a48bf86c27)	High
141386	Fedora 31 : oniguruma (2020-d53469eceb)	High
141384	Fedora 31 : prosody (2020-1e1b527524)	High
141381	Fedora 31 : golang-github-andybalholm-brotli (2020-e21bd401ad)	Medium
141376	Fedora 32 : oniguruma (2020-952c499e9d)	High
141375	Fedora 32 : golang-github-andybalholm-brotli (2020-c663fbc46c)	Medium
141317	Fedora 31 : 2:podman / crun (2020-3a4b8fca5e)	Medium
141300	Fedora 33 : dnsmasq (2020-54760174b6)	High
141299	Fedora 33 : php (2020-4573f0e03a)	Medium
141298	Fedora 33 : 1:libuv (2020-8dd4252dbe)	High
141297	Fedora 33 : oniguruma (2020-bc758654d1)	High
141296	Fedora 32 : php (2020-4fe6b116e5)	Medium
141295	Fedora 31 : php (2020-94763cb98b)	Medium
141292	Fedora 33 : mumble (2020-f869e01557)	Medium
141290	Fedora 33 : f2fs-tools (2020-a0b24e9377)	Medium
141289	Fedora 33 : chromium (2020-2d994b986d)	Medium
141288	Fedora 33 : thunderbird (2020-f5ba8be492)	High
141285	Fedora 33 : 1:rubygem-actionmailer / 1:rubygem-actionpack / etc (2020-4dd34860a3)	Medium
141283	Fedora 33 : golang-github-andybalholm-brotli (2020-22d278923a)	Medium
141282	Fedora 33 : tpm2-tss (2020-1d3fcce2a3)	High
141280	Fedora 33 : LibRaw (2020-2d9d628dd2)	Low
141278	Fedora 31 : xen (2020-d46fe34349)	Medium
141277	Fedora 33 : python2.7 (2020-221823ebdd)	Medium
141275	Fedora 33 : prosody (2020-9f354ec1ad)	High
141274	Fedora 33 : pdns (2020-7b1541266c)	Medium
141273	Fedora 33 : 2:samba (2020-77c15664b0)	High
141270	Fedora 33 : xen (2020-306b84fd07)	Medium
141269	Fedora 33 : libproxy (2020-15b775b07e)	Medium
141268	Fedora 33 : mediawiki (2020-6e64e9d79e)	High
141267	Fedora 33 : dotnet3.1 (2020-48fa1ad65c)	Medium
141249	Fedora 31 : ghc-cmark-gfm / ghc-hakyll / gitit / pandoc / pandoc-citeproc / etc (2020-fe299b3fa3)	Medium
141248	Fedora 32 : tpm2-tss (2020-bb8e3c5548)	High
141245	Fedora 32 : ghc-cmark-gfm / ghc-hakyll / gitit / pandoc / pandoc-citeproc / etc (2020-1eaffe0013)	Medium
141244	Fedora 31 : 1:libuv (2020-bc0050aa3d)	High
141190	Fedora 32 : libproxy (2020-941b563a80)	Medium
141189	Fedora 32 : thunderbird (2020-8b14250809)	High
141188	Fedora 32 : mumble (2020-8372f6bae4)	Medium
141187	Fedora 32 : 1:libuv (2020-77b758d6dc)	High
141186	Fedora 32 : chromium (2020-214865ce21)	Medium
141146	Fedora 31 : mumble (2020-ca26a3f832)	Medium
141145	Fedora 31 : chromium (2020-aea86f913e)	Medium
141144	Fedora 31 : 2:samba (2020-a1d139381a)	High
141143	Fedora 31 : xawtv (2020-93db553bb7)	Low
141142	Fedora 32 : pdns (2020-7e9234058f)	Medium
141141	Fedora 31 : libproxy (2020-7e1e9abf77)	Medium
141140	Fedora 32 : 2:podman / crun (2020-76fcd0ba34)	Medium

Fedora Local Security Checks Family for Nessus