Fedora 35 : python3.11 (2022-a04a020e48)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-a04a020e48 advisory. The final release of Python 3.11.0. Contains security fix for CVE-2022-42919. Tenable has extracted the preceding description block directly from th...

Fedora 35 : unbound (2022-204ee3da84)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-204ee3da84 advisory. - Fix CVE-2022-3204 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 35 : bash (2022-5b644a935b)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-5b644a935b advisory. Add a null check in parameterbracetransform function Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 35 : ruby (2022-b9b710f199)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b9b710f199 advisory. Upgrade to Ruby 3.0.5. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 35 : chromium (2022-3ca063941b)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3ca063941b advisory. Update to chromium-105.0.5195.125. This package only has minor changes... ah, just kidding. Here is the pile of security issues it fixes:...

Fedora 35 : ntfs-3g (2022-14f11bfc73)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-14f11bfc73 advisory. Update to 2022.10.3. Fixes CVE-2022-40284 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 35 : libetpan (2022-df2f4923ea)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-df2f4923ea advisory. A potential bug is found on libetpan that when IMAP client receives invalid STATUS response, an invalid free can occur on mailimapmailboxdatastatusfree. This...

Fedora 35 : xen (2022-53a4a5dd11)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-53a4a5dd11 advisory. update to xen-4.15.4 adjust xen.canonicalize.patch remove or adjust patches now included or superceded upstream x86: Multiple speculative security issues...

Fedora 35 : dotnet3.1 (2022-847c67b3cd)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-847c67b3cd advisory. Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This...

Fedora 35 : firefox (2022-cba606724f)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-cba606724f advisory. - Updated to 106.0.3 ---- - New upstream version 106.0.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 35 : java-latest-openjdk (2022-ec7de69ceb)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ec7de69ceb advisory. New in release OpenJDK 19.0.1 2022-10-18 Full release notes This update depends on FEDORA-2022-10bb6f119e CVEs Fixed - CVE-2022-21618 - CVE-2022-216...

Fedora 35 : thunderbird (2022-1454bee2fa)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-1454bee2fa advisory. Update to 102.3.1 https://www.mozilla.org/en-US/security/advisories/mfsa2022-43/ https://www.thunderbird.net/en-US/thunderbird/102.3.1/releasenotes/ ----...

Fedora 35 : xorg-x11-server-Xwayland (2022-5495b36bed)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-5495b36bed advisory. Security fix for CVE-2022-3550, CVE-2022-3551 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 35 : kernel (2022-b36cd53dca)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b36cd53dca advisory. The 6.0.11 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

Fedora 35 : php-twig3 (2022-e915614918)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e915614918 advisory. Version 3.4.3 2022-09-28 Fix a security issue on filesystem loader possibility to load a template outside a configured directory Tenable has extracted the...

Fedora 35 : galera / mariadb (2022-333df1c4aa)

The remote Fedora 35 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-333df1c4aa advisory. MariaDB 10.5.18 & Galera 26.4.13 Release notes: https://mariadb.com/kb/en/mdb-10-5-18-rn/ Tenable has extracted the preceding description block...

Fedora 35 : admesh (2022-07dd239d6c)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-07dd239d6c advisory. Security fix for TALOS-2022-1594. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 35 : seamonkey (2022-c170581b99)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c170581b99 advisory. Some stability fixes. ---- Update to 2.53.14 Note that besides the ordinary builds for the current Fedora and EPEL branches, there is an additional...

Fedora 35 : sfnt2woff-zopfli (2022-458378be7a)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-458378be7a advisory. Fix a possible double free in woffEncode Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 35 : drupal7-link (2022-74fe01686a)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-74fe01686a advisory. - https://www.drupal.org/project/link/releases/7.x-1.11 - SA-CONTRIB-2022-034 - https://www.drupal.org/project/link/releases/7.x-1.10 -...