RHEL 7 : java-1.8.0-openjdk (RHSA-2022:1487)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1487 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

CVE-2020-10713 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-10713 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2021-3418 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2021-3418 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2021-20233 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2021-20233 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2020-14311 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-14311 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2020-14308 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-14308 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2020-27779 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-27779 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2020-14372 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-14372 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2020-14310 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-14310 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2020-14309 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-14309 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2020-25647 affecting package grub2 for versions less than 2.06~rc1-7

CVE-2020-25647 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...

CVE-2017-3606 affecting package libdb for versions less than 5.3.28-7

CVE-2017-3606 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

CVE-2017-3610 affecting package libdb for versions less than 5.3.28-7

CVE-2017-3610 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

CVE-2017-3614 affecting package libdb for versions less than 5.3.28-7

CVE-2017-3614 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

CVE-2017-3617 affecting package libdb for versions less than 5.3.28-7

CVE-2017-3617 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

CVE-2017-3612 affecting package libdb for versions less than 5.3.28-7

CVE-2017-3612 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

CVE-2020-2981 affecting package libdb for versions less than 5.3.28-7

CVE-2020-2981 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

CVE-2017-3608 affecting package libdb for versions less than 5.3.28-7

CVE-2017-3608 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

What will be the consequence of this disputed vulnerability in 7-ZIP?

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here The zero-day vulnerability in 7- Zip software, tracked as CVE-2022-29072 is marked as disputed by the National Vulnerability DatabaseNVD, and sparked discussions over its consequences. This started when a researcher published ...

Debian DSA-5124-1 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5124 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable, Inc. The...