Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 31: 2020-193da8cf44 Critical: arpwatch Buffer Overflow Fix

fedora
Calendar Grey November 4, 2020
Dist Fedora Esm H88
A high severity buffer overflow vulnerability in Arpwatch may allow attackers to execute arbitrary code via crafted ARP packets. Update ASAP to secure your system
Fix a buffer overflow from long hostnames (#1563939).

Summary

The arpwatch package contains arpwatch and arpsnmp. Arpwatch and

arpsnmp are both network monitoring tools. Both utilities monitor

Ethernet or FDDI network traffic and build databases of Ethernet/IP

address pairs, and can report certain changes via email.

Install the arpwatch package if you need networking monitoring devices

which will automatically keep track of the IP addresses on your

network.

Fix a buffer overflow from long hostnames (#1563939).

* Tue Oct 27 2020 Benjamin A. Beasley - 14:2.1a15-48

- fix arpwatch buffer overflow (#1563939)

* Mon Jul 27 2020 Fedora Release Engineering - 14:2.1a15-47

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Tue Jan 28 2020 Fedora Release Engineering - 14:2.1a15-46

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[ 1 ] Bug #1563939 - arpwatch buffer overflow on long DNS name

https://bugzilla.redhat.com/show_bug.cgi?id=1563939

su -c 'dnf upgrade --advisory FEDORA-2020-193da8cf44' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 31
Version: 2.1a15
Release: 48.fc31
Summary: Network monitoring tools for tracking IP addresses on a network

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here