Fedora 37 : openssl (2022-1c20b4dde2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-1c20b4dde2 advisory. Automatic update for openssl-3.0.5-1.fc37. Changelog Tue Jul 5 2022 Clemens Lang - 1:3.0.5-1 - Rebase to upstream version 3.0.5 Related: rhbz2099972...

Fedora 37 : python3.9 (2022-607efb9e65)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-607efb9e65 advisory. The release you're looking at is Python 3.9.15, a security bugfix release for the legacy 3.9 series...

Fedora 37 : qpress (2022-dacf699829)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-dacf699829 advisory. Security fix for CVE-2022-45866 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : grub2 (2022-dec4cdacd7)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-dec4cdacd7 advisory. Two font-related CVE updates CVE-2022-2601 and CVE-2022-3775. For more information, see upstream's disclosure or the patches themselves. Tenable has...

Fedora 37 : libopenmpt (2022-16a2e11a27)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-16a2e11a27 advisory. libopenmpt 0.6.6 2022-09-25 - Sec Possible crash when playing manipulated IT / MPTM files with a T00 command. - MTM: In MultiTracker, setting speed and tempo...

Fedora 37 : advancecomp (2022-9032cacb56)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9032cacb56 advisory. Security fix for CVE-2022-35014, CVE-2022-35015, CVE-2022-35016, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020 Tenable has extracte...

Fedora 37 : python3.8 (2022-a35baa23e8)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a35baa23e8 advisory. Automatic update for python3.8-3.8.13-3.fc37. Changelog Fri Jun 10 2022 Charalampos Stratakis - 3.8.13-3 - Security fix for CVE-2015-20107 Resolves:...

Fedora 37 : fribidi (2022-ec66fe614d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ec66fe614d advisory. Automatic update for fribidi-1.0.11-3.fc37. Changelog Fri Apr 1 2022 Akira TAGOH - 1.0.11-3 - Fix security issues, CVE-2022-25308, CVE-2022-25309,...

Fedora 37 : rsyslog (2022-f2c4c83cc1)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f2c4c83cc1 advisory. Automatic update for rsyslog-8.2204.0-1.fc37. Changelog Mon May 9 2022 Attila Lakatos - 8.2204.0-1 - rebase to 8.2204.0 resolves: rhbz1951970 - CVE-2022-2490...

Fedora 37 : ruby (2022-f0f6c6bec2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f0f6c6bec2 advisory. Upgrade to Ruby 3.1.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : nginx (2022-12721789aa)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-12721789aa advisory. Security: processing of a specially crafted mp4 file by the ngxhttpmp4module might cause a worker process crash, worker process memory disclosure, o...

Fedora 37 : pipenv (2022-8a01f4e871)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8a01f4e871 advisory. Automatic update for pipenv-2021.5.29-7.fc37. Changelog Thu Feb 24 2022 Tomas Orsava - 2021.5.29-7 - Fix for CVE-2022-21668 Resolves: rhbz2039830 Tenable has...

Fedora 37 : grafana (2022-8f60426b65)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8f60426b65 advisory. Automatic update for grafana-9.0.2-2.fc37. Changelog Wed Jul 13 2022 Andreas Gerstmayr 9.0.2-2 - use systemd-sysusers to create the Grafana user and group...

Fedora 37 : kitty (2022-04bc7cd075)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-04bc7cd075 advisory. Fixed KITTYINSTALLATIONDIR in scripts ---- version 0.26.3 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 37 : nheko (2022-959b529587)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-959b529587 advisory. Updated to version 0.10.2 with CVE fix. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 37 : moby-engine (2022-2c33bba286)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2c33bba286 advisory. - Update to 20.10.20. - Mitigates CVE-2022-39253 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : libetpan (2022-f092bc8f7b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f092bc8f7b advisory. A potential bug is found on libetpan that when IMAP client receives invalid STATUS response, an invalid free can occur on mailimapmailboxdatastatusfree. This...

Fedora 37 : protobuf (2022-25f35ed634)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-25f35ed634 advisory. Selected notes from packaging changes and improvements: 3.19.6 fixes CVE-2022-3171 3.19.5 fixes CVE-2022-1941 License updated to SPDX Unnecessary...

Fedora 37 : xorg-x11-server (2022-3d88188071)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-3d88188071 advisory. Fix buggy patch to CVE-2022-46340 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : OpenImageIO / ctk / dcmtk (2022-73bf8ee661)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-73bf8ee661 advisory. Security fix for CVE-2021-41688, CVE-2021-41690, CVE-2021-41687, CVE-2021-41689 Tenable has extracted the preceding description block directly from...