Fedora 36 : mingw-libtasn1 (2022-3c933ffaca)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3c933ffaca advisory. Update to 4.19.0, fixes CVE-2021-46848. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 36 : nodejs (2022-52dec6351a)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-52dec6351a advisory. November 2022 Security Updates https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/ ---- September Security Updates for Node.js...

Fedora 36 : libmodsecurity (2022-afa1e7b6c4)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-afa1e7b6c4 advisory. Update to maintenance release 3.0.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 36 : java-latest-openjdk (2022-e8698f2e5e)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e8698f2e5e advisory. New in release OpenJDK 19.0.1 2022-10-18 Full release notes CVEs Fixed - CVE-2022-21618 - CVE-2022-21619 - CVE-2022-21624 - CVE-2022-21628 -...

Fedora 36 : wavpack (2022-ca2f721916)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ca2f721916 advisory. Security fix for CVE-2022-2476 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 36 : dotnet3.1 (2022-f9ca76e479)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f9ca76e479 advisory. This is the October 2022 release of .NET Core 3.1 This updates .NET Core 3.1 SDK to 3.1.424 and Runtime to 3.1.30. This includes fixes for CVE-2022-41032...

Fedora 36 : ghc-cmark-gfm (2022-6bcee2cc93)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6bcee2cc93 advisory. updates the C library to 0.29.0.gfm.6 which fixes CVE-2022-39209 Tenable has extracted the preceding description block directly from the Fedora...

Fedora 36 : unbound (2022-164cf7837e)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-164cf7837e advisory. - Fix CVE-2022-3204 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 36 : seamonkey (2022-a758e9293f)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a758e9293f advisory. Some stability fixes. ---- Update to 2.53.14 Note that besides the ordinary builds for the current Fedora and EPEL branches, there is an additional...

Fedora 36 : rust-capnp / rust-sequoia-octopus-librnp (2022-fd7eeedd02)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-fd7eeedd02 advisory. Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application...

Fedora 36 : mingw-python3 (2022-d1682fef04)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d1682fef04 advisory. Update to python-3.10.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 36 : php-Smarty (2022-52154efd61)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-52154efd61 advisory. 3.1.47 - 2022-09-14 Security - Applied appropriate javascript and html escaping in mailto plugin to counter injection attacks 454 Fixed - Fixed use ...

Fedora 36 : mingw-gcc (2022-c9a1fd5370)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c9a1fd5370 advisory. Backport fixes for CVE-2021-3826 and CVE-2022-27943. Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 36 : rubygem-nokogiri (2022-acff3f54b2)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-acff3f54b2 advisory. A potential bug was found on nokogiri on or before 1.13.9 overlooked some return values from functions used internally. This can lead to raise some illegal...

Fedora 36 : mediawiki (2022-185482f0a7)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-185482f0a7 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/thread/DMQKMFSH4K7KLBXWZTDBGI2PWLLHJHJZ/...

[SECURITY] Fedora 36 Update: samba-4.16.8-0.fc36

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

[SECURITY] Fedora 36 Update: snakeyaml-1.32-1.fc36

SnakeYAML features: a complete YAML 1.1 parser. In particular, SnakeYAML can parse all examples from the specification. Unicode support including UTF-8/UTF-16 input/output. high-level API for serializing and deserializing native Java objects. support for all types from the YAML types repository...

[SECURITY] Fedora 36 Update: xrdp-0.9.21-1.fc36

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora: Security Advisory for snakeyaml (FEDORA-2022-8a4e8aa190)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 36 : nginx (2022-b0f5bc2175)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b0f5bc2175 advisory. Security: processing of a specially crafted mp4 file by the ngxhttpmp4module might cause a worker process crash, worker process memory disclosure, o...