[SECURITY] Fedora 38 Update: shim-15.8-2

Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments. This package contains the version signed by the UEFI signing service...

Fedora 38 : freeimage / mingw-freeimage (2024-e6a35cd250)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-e6a35cd250 advisory. Add downstream fixes for CVE-2023-47995 and CVE-2023-47997. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 38 : mingw-expat (2024-40b98c9ced)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-40b98c9ced advisory. Update to 2.6.1, backport fix for CVE-2024-28757. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

[SECURITY] Fedora 38 Update: python3.6-3.6.15-27.fc38

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 38 Update: rust-routinator-0.13.2-1.fc38

An RPKI relying party software...

Fedora 38 : chromium (2024-ac1eb810c5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ac1eb810c5 advisory. upstream security release 122.0.6261.128 - High CVE-2024-2400: Use after free in Performance Manager Tenable has extracted the preceding description block...

Fedora 38 : opensc (2024-b92d44f141)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b92d44f141 advisory. New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454 Tenable has extracted the preceding description block directly from the...

Fedora 38 : python3.6 (2024-ebb3c95344)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ebb3c95344 advisory. Security fix for CVE-2007-4559. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 38 : baresip (2024-a15fe3f120)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a15fe3f120 advisory. Baresip v3.10.1 2024-03-12 Security Release possible Denial of Service: A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang...

Fedora 38 : rust-routinator (2024-28a151028a)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-28a151028a advisory. from changelog: Fix the RTR listener so that Routinator wont exit if an incoming RTR connection is closed again too quickly. 937, reported by Yohei Nishimura...

[SECURITY] Fedora 38 Update: kernel-6.7.9-100.fc38

The kernel meta package...

[SECURITY] Fedora 38 Update: liblas-1.8.2-0.12.gitf1da555.fc38

libLAS is a C/C++ library for reading and writing the very common LAS LiDAR format. The ASPRS LAS format is a sequential binary format used to store data from LiDAR sensors and by LiDAR processing software for data interchange and archival...

Fedora 38 : thunderbird (2024-325c1d1fce)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-325c1d1fce advisory. Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects...

Fedora 38 : xen (2024-0da80aa623)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0da80aa623 advisory. x86: shadow stack vs exceptions from emulation stubs - XSA-451, CVE-2023-46841 2266326 Tenable has extracted the preceding description block directl...

Fedora 38 : python-fastapi / python-multipart (2024-09c7f715c9)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-09c7f715c9 advisory. python-multipart 0.0.7 2024-02-03 Refactor header option parser to use the standard library instead of a custom RegEx 75. Fixes a denial of service...

Fedora 38 : liblas (2024-ef8c8a8b37)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ef8c8a8b37 advisory. Update to git f1da555, fixes CVE-2024-27507. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Fedora 38 : kernel (2024-5db5954a5e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5db5954a5e advisory. The 6.7.9 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

Fedora 38 : freeipa (2024-bbfef02415)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bbfef02415 advisory. - Security release: CVE-2024-1481 - Resolves: rhbz2265129 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora: Security Advisory for wpa_supplicant (FEDORA-2024-36d2be00d0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for qpdf (FEDORA-2024-daa7df59d6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...