[SECURITY] Fedora 37 Update: python3.9-3.9.15-1.fc37

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

[SECURITY] Fedora 37 Update: python3.6-3.6.15-13.fc37

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

CentOS 8 : fribidi (CESA-2022:7514)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7514 advisory. - fribidi: Stack based buffer overflow CVE-2022-25308 - fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 - fribidi: SEGV in...

CentOS 8 : freetype (CESA-2022:7745)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7745 advisory. - FreeType: Buffer overflow in sfntinitface CVE-2022-27404 - FreeType: Segmentation violation via FNTSizeRequest CVE-2022-27405 - Freetype: Segmentatio...

CentOS 8 : dnsmasq (CESA-2022:7633)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7633 advisory. - dnsmasq: Heap use after free in dhcp6norelay CVE-2022-0934 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : container-tools:3.0 (CESA-2022:7529)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7529 advisory. - golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - cri-o: memory exhaustion on the node when access to the kube api...

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2022:7592)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7592 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : libtiff (CESA-2022:7585)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7585 advisory. - libtiff: Denial of Service via crafted TIFF file CVE-2022-0561 - libtiff: Null source pointer lead to Denial of Service via crafted TIFF file...

CentOS 8 : yajl (CESA-2022:7524)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7524 advisory. - yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Note that Nessus has not tested for this issue but has...

CentOS 8 : Image Builder (CESA-2022:7548)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7548 advisory. - golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service CVE-2022-32189...

CentOS 8 : wavpack (CESA-2022:7558)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7558 advisory. - wavpack: Heap out-of-bounds read in WavpackPackSamples CVE-2021-44269 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : php:7.4 (CESA-2022:7628)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7628 advisory. - php: Special character breaks path in xml parsing CVE-2021-21707 - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 -...

CentOS 8 : poppler (CESA-2022:7594)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7594 advisory. - poppler: A logic error in the Hints::Hints function can cause denial of service CVE-2022-27337 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : openjpeg2 (CESA-2022:7645)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7645 advisory. - openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : container-tools:4.0 (CESA-2022:7469)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7469 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 - golang: crash in a golang.org/x/crypto/ssh server CVE-2022-27191 -...

CentOS 8 : grafana (CESA-2022:7519)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7519 advisory. - sanitize-url: XSS due to improper sanitization in sanitizeUrl function CVE-2021-23648 - golang: net/http: improper sanitization of Transfer-Encoding...

CentOS 8 : dovecot (CESA-2022:7623)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7623 advisory. - dovecot: Privilege escalation when similar master and non-master passdbs are used CVE-2022-30550 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : php:8.0 (CESA-2022:7624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7624 advisory. - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625...

CentOS 8 : flatpak-builder (CESA-2022:7458)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7458 advisory. - flatpak: flatpak-builder --mirror-screenshots-url can access files outside the build directory CVE-2022-21682 Note that Nessus has not tested for this issue b...

CentOS 8 : libldb (CESA-2022:7730)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7730 advisory. - samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request CVE-2022-32746 Note that Nessus has not tested for this...