Lucene search
+L

Fedora: Security Advisory for liferea (FEDORA-2023-5a91738e22)

🗓️ 23 Mar 2023 00:00:00Reported by Copyright (C) 2023 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 9 Views

Fedora Security Advisory for liferea. The 'liferea' package(s) on Fedora 38 is missing an update. Liferea is an RSS/RDF feed reader

Related
Refs
Code
ReporterTitlePublishedViews
Family
CNNVD
Liferea 操作系统命令注入漏洞
11 Mar 202300:00
cnnvd
CVE
CVE-2023-1350
11 Mar 202308:20
cve
Cvelist
CVE-2023-1350 liferea Feed Enrichment update.c update_job_run os command injection
11 Mar 202308:20
cvelist
Debian CVE
CVE-2023-1350
11 Mar 202308:20
debiancve
EUVD
EUVD-2023-23608
3 Oct 202520:07
euvd
Fedora
[SECURITY] Fedora 37 Update: liferea-1.14.1-1.fc37
23 Mar 202301:33
fedora
Fedora
[SECURITY] Fedora 36 Update: liferea-1.14.1-1.fc36
23 Mar 202301:24
fedora
Fedora
[SECURITY] Fedora 38 Update: liferea-1.14.1-1.fc38
23 Mar 202300:18
fedora
Tenable Nessus
Fedora 37 : liferea (2023-1ba7a77530)
23 Mar 202300:00
nessus
Tenable Nessus
Fedora 38 : liferea (2023-5a91738e22)
22 Mar 202300:00
nessus
Rows per page
# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.827353");
  script_version("2026-06-25T06:55:31+0000");
  script_cve_id("CVE-2023-1350");
  script_tag(name:"cvss_base", value:"6.5");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:P/I:P/A:P");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2023-03-11 09:15:10 +0000 (Sat, 11 Mar 2023)");
  script_tag(name:"last_modification", value:"2026-06-25 06:55:31 +0000 (Thu, 25 Jun 2026)");
  script_tag(name:"creation_date", value:"2023-03-23 02:04:49 +0000 (Thu, 23 Mar 2023)");
  script_name("Fedora: Security Advisory for liferea (FEDORA-2023-5a91738e22)");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2023 Greenbone AG");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC38");

  script_xref(name:"Advisory-ID", value:"FEDORA-2023-5a91738e22");
  script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RX6Z4YEJCLGYDVOHOCFCZH3TKMWR4W7Q");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'liferea'
  package(s) announced via the FEDORA-2023-5a91738e22 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"Liferea (Linux Feed Reader) is an RSS/RDF feed reader.
It&#39, s intended to be a clone of the Windows-only FeedReader.
It can be used to maintain a list of subscribed feeds,
browse through their items, and show their contents.");

  script_tag(name:"affected", value:"'liferea' package(s) on Fedora 38.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "FC38") {

  if(!isnull(res = isrpmvuln(pkg:"liferea", rpm:"liferea~1.14.1~1.fc38", rls:"FC38"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Jun 2026 00:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.16.3 - 9.8
CVSS 26.5
CVSS 36.3
EPSS0.02298
9