Huawei EulerOS: Security Advisory for gcc (EulerOS-SA-2023-3296)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel security and bug fix update

4.18.0-513.9.19.OL8 - media: dvb-core: Fix use-after-free due to race at dvbregisterdevice Mauro Carvalho Chehab CVE-2022-45884 - cifs: Fix UAF in cifsdemultiplexthread Zhang Xiaoxu CVE-2023-1192 - nvmet-tcp: Fix a possible UAF in queue intialization setup Sagi Grimberg CVE-2023-5178 - net: tun:...

com.diffplug.durian:durian-swt (>=3.0.0 <=5.2.0), com.diffplug.durian:durian-swt.cocoa.macosx.aarch64 (>=3.6.1 <=5.2.0) +179 more potentially affected by CVE-2023-4218 via org.eclipse.platform:org.eclipse.jface (>=3.12.2 <=3.30.0)

org.eclipse.platform:org.eclipse.jface MAVEN version =3.12.2, =3.0.0, =3.6.1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.31, =1.0.0, =1.0.0, =0.1.0, =1.0.1 and more Source cves: CVE-2023-4218 Source advisory: OSV:GHSA-J24H-XCPC-9JW8...

Buffer Overflow

gcc is vulnerable to Buffer Overflow. The vulnerability is caused due to fstack-protector feature in GCC-based toolchains that target AArch64 architecture which has an existing buffer overflow flaw in dynamically-sized local variables without being detected. An attacker can exploit this without...

Debian dla-3677 : gimp-dds - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3677 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3677-1 [email protected] https://www.debian.org/lts/security/...

thunderbird security update

115.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 115.5.0-1 - Update to 115.5.0 build1...

Oracle Linux 8 : edk2 (ELSA-2023-6919)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6919 advisory. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019...

SUSE SLES12: cpp13 / cross-nvptx-gcc13 / cross-nvptx-newlib13-devel / gcc13 / etc (SUSE-SU-2023:4480-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4480-1 advisory. This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise ...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt (CVE-2022-32149)

The version of application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the...

Fedora 38 : tor (2023-29cafcbf4a)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-29cafcbf4a advisory. update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155 Tenable has extracted the preceding description block directl...

SUSE SLED15: cpp13 / cross-nvptx-gcc13 / cross-nvptx-newlib13-devel / gcc13 / etc (SUSE-SU-2023:4458-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4458-1 advisory. This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are...

RHEL 8 : edk2 (RHSA-2023:6919)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6919 advisory. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues...

Huawei EulerOS: Security Advisory for gcc (EulerOS-SA-2023-3209)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : gcc13 (SUSE-SU-2023:4287-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4287-1 advisory. - A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer...

thunderbird security update

115.4.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 115.4.1-1 - Update to 115.4.1 build1 115.4.0-3 - Update to 115.4.0 build3 115.4.0-2 - Update to 115.4.0 build2 115.4.0-1 - Update to 115.4.0 build1...

grub2 security update

2.02-0.87.0.26.el79.9 - Enable common subpackage for aarch64 - Do not sign aarch64 efi binaries Orabug: 32670043 - Remove aarch64 deps on shim Orabug: 32670043 - Restore versioned certificate provide for aarch64 package to satisfy shim Orabug: 32670043 2.02-0.87.0.24.el79.9 - Replace...

Important: python3

Issue Overview: A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The...

SUSE SLED15: cpp13 / cross-nvptx-gcc13 / cross-nvptx-newlib13-devel / gcc13 / etc (SUSE-SU-2023:4162-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4162-1 advisory. This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are...

Medium: libreswan

Issue Overview: A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer...

SUSE SLES15 / openSUSE 15 Security Update : cni-plugins (SUSE-SU-2023:4075-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4075-1 advisory. - rebuild the package with the go 1.21 security release bsc1212475. Tenable has extracted the preceding description block...