Fedora 37 : libetpan (2022-f092bc8f7b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f092bc8f7b advisory. A potential bug is found on libetpan that when IMAP client receives invalid STATUS response, an invalid free can occur on mailimapmailboxdatastatusfree. This...

Fedora 37 : thunderbird (2022-c6922f983b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c6922f983b advisory. Update to 102.5.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/ ; https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes/ ;...

Fedora 37 : pcs (2022-28e171f780)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-28e171f780 advisory. Automatic update for pcs-0.11.3-1.fc37. Changelog Tue Jun 28 2022 Miroslav Lisik - 0.11.3-1 - Rebased to latest upstream sources see CHANGELOG.md - Updated...

Fedora 37 : rsyslog (2022-f2c4c83cc1)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f2c4c83cc1 advisory. Automatic update for rsyslog-8.2204.0-1.fc37. Changelog Mon May 9 2022 Attila Lakatos - 8.2204.0-1 - rebase to 8.2204.0 resolves: rhbz1951970 - CVE-2022-2490...

Fedora 37 : rust-capnp / rust-sequoia-octopus-librnp (2022-7002ec8b22)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-7002ec8b22 advisory. Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application...

Fedora 37 : OpenImageIO / ctk / dcmtk (2022-73bf8ee661)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-73bf8ee661 advisory. Security fix for CVE-2021-41688, CVE-2021-41690, CVE-2021-41687, CVE-2021-41689 Tenable has extracted the preceding description block directly from...

Fedora 37 : kitty (2022-04bc7cd075)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-04bc7cd075 advisory. Fixed KITTYINSTALLATIONDIR in scripts ---- version 0.26.3 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 37 : pipenv (2022-8a01f4e871)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8a01f4e871 advisory. Automatic update for pipenv-2021.5.29-7.fc37. Changelog Thu Feb 24 2022 Tomas Orsava - 2021.5.29-7 - Fix for CVE-2022-21668 Resolves: rhbz2039830 Tenable has...

Fedora 37 : kernel (2022-e4460c41bc)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e4460c41bc advisory. The 6.0.11 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

Fedora 37 : trafficserver (2022-62b61a8542)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-62b61a8542 advisory. Update to 9.1.4, resolves CVE-2022-32749, CVE-2022-37392, CVE-2022-40743 Tenable has extracted the preceding description block directly from the...

Fedora 37 : grafana (2022-8f60426b65)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8f60426b65 advisory. Automatic update for grafana-9.0.2-2.fc37. Changelog Wed Jul 13 2022 Andreas Gerstmayr 9.0.2-2 - use systemd-sysusers to create the Grafana user and group...

Fedora 37 : thunderbird (2022-096dc55d51)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-096dc55d51 advisory. Update to 102.5.1 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-50/ ; https://www.thunderbird.net/en-US/thunderbird/102.5.1/releasenotes/...

Fedora 37 : firefox (2022-b58437c302)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-b58437c302 advisory. - Updated to latest upstream 107.0.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 37 : nginx (2022-12721789aa)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-12721789aa advisory. Security: processing of a specially crafted mp4 file by the ngxhttpmp4module might cause a worker process crash, worker process memory disclosure, o...

Fedora 37 : nheko (2022-959b529587)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-959b529587 advisory. Updated to version 0.10.2 with CVE fix. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 37 : fribidi (2022-ec66fe614d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ec66fe614d advisory. Automatic update for fribidi-1.0.11-3.fc37. Changelog Fri Apr 1 2022 Akira TAGOH - 1.0.11-3 - Fix security issues, CVE-2022-25308, CVE-2022-25309,...

Fedora 37 : llhttp (2022-9e7f967d20)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-9e7f967d20 advisory. Update to v6.0.10 - Disable chunked on obs https://github.com/nodejs/llhttp/pull/196 https://github.com/nodejs/llhttp/compare/v6.0.9...v6.0.10 Tenable has...

Fedora 37 : tomcat (2022-30ce1cbe6e)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-30ce1cbe6e advisory. Automatic update for tomcat-9.0.59-1.fc37. Changelog Wed Mar 2 2022 Sonia Xu - 1:9.0.59-1 - Update to 9.0.59 - Resolves: rhbz2047419 - CVE-2022-23181 tomcat:...

Fedora 37 : ruby (2022-f0f6c6bec2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f0f6c6bec2 advisory. Upgrade to Ruby 3.1.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : python-notebook (2022-f9e459c893)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f9e459c893 advisory. Automatic update for python-notebook-6.4.11-3.fc37. Changelog Wed Jul 13 2022 Miro Hronok - 6.4.11-3 - Fix CVE-2022-24785 and CVE-2022-31129 in...