Fedora 41 : python3.11 (2024-d3d904cb56)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d3d904cb56 advisory. Automatic update for python3.11-3.11.9-5.fc41. Changelog Thu Aug 15 2024 Charalampos Stratakis - 3.11.9-5 - Security fix for CVE-2024-4032 rhbz22933...

Fedora 37 : pypy (2022-f4f9328607)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f4f9328607 advisory. Automatic update for pypy-7.3.9-2.fc37. Changelog Tue Jun 28 2022 Charalampos Stratakis - 7.3.9-2 - Security fix for CVE-2015-20107 - Fixes: rhbz2075390...

Fedora 37 : pypy3.8 (2022-8691216b9b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8691216b9b advisory. Automatic update for pypy3.8-7.3.9-2.3.8.fc37. Changelog Tue Jun 28 2022 Charalampos Stratakis - 7.3.9-2.3.8 - Security fix for CVE-2015-20107 - Fixes:...

Fedora 37 : ceph (2022-d832fd2f45)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d832fd2f45 advisory. ceph 17.2.5 GA ---- ceph-17.2.4 Security fix for CVE-2021-3979 Note: fix was actually included in ceph-17.2.3 Tenable has extracted the preceding...

Fedora 38 : cloudcompare (2022-d0be6938e2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d0be6938e2 advisory. Automatic update for cloudcompare-2.11.3-4.fc38. Changelog Thu Aug 25 2022 Miro Hronok - 2.11.3-4 - Security fix for CVE-2021-21897 - Fixes: rhbz2080986...

Fedora 41 : python3.6 (2024-96ed485f6d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-96ed485f6d advisory. Automatic update for python3.6-3.6.15-35.fc41. Changelog Fri Aug 16 2024 Tom Hrniar - 3.6.15-35 - Security fix for CVE-2024-6923 rhbz2303161 Tenable has...

Fedora 41 : ghc-base64 / ghc-hakyll / ghc-isocline / gitit / pandoc / etc (2024-d62088b505)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-d62088b505 advisory. pandoc-cli replaces pandoc binary package Security fix for CVE-2023-35936 and CVE-2023-35936 newly packaged ghc-base64 and ghc-isocline Tenable has...

Fedora 38 : python3.8 (2022-eda83be115)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-eda83be115 advisory. Automatic update for python3.8-3.8.15-2.fc38. Changelog Mon Nov 14 2022 Miro Hronok - 3.8.15-2 - CVE-2022-37454: Fix buffer overflows in sha3 module Related:...

fontforge security update

20201107-6 - Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws...

Fedora 37 : python3.6 (2022-0f9ef05c85)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-0f9ef05c85 advisory. Automatic update for python3.6-3.6.15-9.fc37. Changelog Fri Jun 10 2022 Charalampos Stratakis - 3.6.15-9 - Security fix for CVE-2015-20107 Resolves:...

Fedora 41 : python-quart (2024-2f78bf0769)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2f78bf0769 advisory. Security fix for GHSA-q34m-jh98-gwm2. 0.19.8 2024-10-25 - Bugfix: Fix missing check that caused the previous fix to raise an error. 0.19.7 2024-10-25 -...

Fedora 38 : python3.6 (2022-f321e2cec0)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f321e2cec0 advisory. Automatic update for python3.6-3.6.15-15.fc38. Changelog Mon Dec 19 2022 Charalampos Stratakis - 3.6.15-15 - Security fix for CVE-2022-45061: CPU denial of...

Fedora 38 : python3.7 (2022-792bd23738)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-792bd23738 advisory. Automatic update for python3.7-3.7.15-2.fc38. Changelog Mon Nov 14 2022 Miro Hronok - 3.7.15-2 - CVE-2022-37454: Fix buffer overflows in sha3 module Related:...

Fedora 37 : capnproto / fastnetmon / librime / rr / sonic-visualiser (2022-18023b665f)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-18023b665f advisory. Update capnproto to version 0.9.2 to address CVE-2022-46149. Dependent packages were rebuilt for both the fix for the security issue and the capnproto SONAME...

Fedora 41 : python3.6 (2024-19882248ad)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-19882248ad advisory. Automatic update for python3.6-3.6.15-27.fc41. Changelog Thu Feb 29 2024 Charalampos Stratakis - 3.6.15-27 - Security fix for CVE-2007-4559 - Fixes:...

ALSA-2024:9636 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: Use after free in ANGLE CVE-2024-4558 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-40789 webkitgtk:...

CVE-2024-45594 Decidim allows cross-site scripting (XSS) in the online or hybrid meeting embeds

Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0...

CVE-2024-52291 Craft has a Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution

Craft is a content management system CMS. A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme e.g., file://file:////. This enables the attacker to specify sensitive folders as the file system, leading to potential file...

CVE-2024-52300

The CVE-2024-52300 issue affects the XWiki macro-pdfviewer (PDF Viewer Macro) that uses Mozilla pdf.js. The width parameter is not properly escaped, enabling cross-site scripting (XSS) when an admin can edit a page, potentially impacting confidentiality, integrity, and availability of the entire ...

CVE-2024-48900 Moodle: idor when accessing list of badge recipients

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to...