Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 37: FEDORA-2022-a36ba48049 Moderate: Binwalk Symlink Issue

fedora
Calendar Grey January 5, 2023
Dist Fedora Esm H88
Essential vulnerability patch for binwalk targets directory traversal in Fedora 37, striving to safeguard against potential exploits.
Security fix for CVE-2021-4287

Summary

Binwalk is a tool for searching a given binary image for embedded files and

executable code. Specifically, it is designed for identifying files and code

embedded inside of firmware images. Binwalk uses the python-magic library, so

it is compatible with magic signatures created for the Unix file utility.

Security fix for CVE-2021-4287

* Tue Dec 27 2022 Scott Talbert - 2.3.3-1

- Update to new upstream release 2.3.3 (#2003337 #2156566)

[ 1 ] Bug #2156565 - CVE-2021-4287 binwalk: symlink directory traversal vulnerability

https://bugzilla.redhat.com/show_bug.cgi?id=2156565

su -c 'dnf upgrade --advisory FEDORA-2022-a36ba48049' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Product: Fedora 37
Version: 2.3.3
Release: 1.fc37
Summary: Firmware analysis tool

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here