Fedora 38 : libxml2 (2023-a521b917c8)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a521b917c8 advisory. Update to 2.10.4 Fix CVE-2023-29469 Fix CVE-2023-28484 Tenable has extracted the preceding description block directly from the Fedora security...

Fortinet Addresses Security Flaws Across Multiple Products

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Fortinet releases security updates for multiple products, including a significant FortiPresence vulnerability patch. To receive real-time threat advisories, please follow HiveForce Labs on LinkedI...

Fedora 38 : dnsmasq (2023-eeca11a4df)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-eeca11a4df advisory. According to DNS flag day set default packet size to 1232 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 38 : polkit (2023-41bdb7dba8)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-41bdb7dba8 advisory. config file permission change to increase security of polkitd Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 38 : mediawiki (2023-9d6ab5ebf2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9d6ab5ebf2 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/message/6UQBHI5FWLATD7QO7DI4YS54U7XSSLAN/ Tenable has extracted the...

Fedora 38 : dpdk / openvswitch (2023-a633c4273f)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-a633c4273f advisory. dpdk updated to 22.11.1 and openvswitch updated to 3.1.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 36 : firefox (2023-50f9eb7aca)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-50f9eb7aca advisory. - New upstream update 112.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 38 : libyang (2023-93d978c182)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-93d978c182 advisory. Rebase to version 2.1.55 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 38 : zchunk (2023-86dce75007)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-86dce75007 advisory. Fix several low severity security bugs. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read

This CVE was assigned by Mitre. Some Microsoft products consume Lau open-source software. The purpose of this document is to attest to the fact that the products listed in the Security Updates table have been updated to protect against this vulnerability...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting Junos OSlink is external, Paragon Active Assurance PAAlink is external, and Juniper Secure Analytics JSA Serieslink is external. An attacker could exploit some of these vulnerabilities to take control of an affect...

Microsoft Addresses Zero-Day and Wormable Vulnerabilities

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Microsofts April 2023 Patch Tuesday and security updates address one actively exploited the zero-day vulnerability and a total of 97 flaws, consisting of 7 critical and 90 important vulnerabilitie...

Fedora 37 : polkit (2023-4936e4e7f1)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4936e4e7f1 advisory. config file permission change to increase security of polkitd Tenable has extracted the preceding description block directly from the Fedora security advisor...

Microsoft Security Update Validation Report April 2023

Microsoft’s April 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Security Updates for Microsoft .NET core (April 2023)

A remote code execution vulnerability exists in .NET core 6.0 6.0.16 and .NET Core 7.0 7.0.5. This vulnerability exists due to how .NET running on Windows where a runtime DLL can be loaded from an unexpected location, resulting in remote code execution. Note that Nessus has not tested for this...

Fedora 37 : firefox (2023-1749adc275)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1749adc275 advisory. - New upstream update 112.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 37 : thunderbird (2023-d365f19e05)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d365f19e05 advisory. Update to 102.10.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/ ;...

HP Device Manager Security Updates

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges. HP has released HP Device Manager 5.0.10, which includes updates to mitigate these potential vulnerabilities. All the identified vulnerabilities listed previously...

Update now! April’s Patch Tuesday includes a fix for one zero-day

Its Patch Tuesday again. Microsoft and other vendors have released their monthly updates. Among a total of 97 patched vulnerabilities there is one actively exploited zero-day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix...

SUSE-SU-2023:1823-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 bsc1208480: Security fixes: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization bsc1207249. - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections bsc1207246. -...