AlmaLinux 8 : tigervnc (ALSA-2023:2830)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2830 advisory. - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in...

Debian DSA-5406-1 : texlive-bin - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5406 advisory. - LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets t...

Oracle Linux 9 : firefox (ELSA-2023-3143)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3143 advisory. 102.11.0-2.0.1 - Updated homepages to use https Orabug: 34648274 102.11.0-2 - Update to 102.11.0 build2 102.11.0-1 - Update to 102.11.0 build1 Tenable...

Fedora 37 : rust-ybaas / rust-yubibomb (2023-80ab942675)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-80ab942675 advisory. - Update yubibomb to version 0.2.12. - Update ybaas to version 0.0.16. Tenable has extracted the preceding description block directly from the Fedora securit...

Oracle Linux 9 : gdk-pixbuf2 (ELSA-2023-2216)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2216 advisory. - Backport fixes for CVE-2021-46829 and CVE-2021-44648 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHEL 9 : toolbox (RHSA-2023:2236)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2236 advisory. Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman...

Fedora 38 : community-mysql (2023-06a49d4fb6)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-06a49d4fb6 advisory. MySQL 8.0.33 Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html Tenable has extracted the preceding description block directly from...

Fedora 37 : java-11-openjdk-portable (2023-0ab3a5423f)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0ab3a5423f advisory. Updatings portables to ajva April security update, with few enhancements be properly repacked. Tenable has extracted the preceding description block directly...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby regression (USN-6055-2)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6055-2 advisory. USN-6055-1 fixed a vulnerability in Ruby. Unfortunately it introduced a regression. This update reverts the patches applied to...

RHEL 8 : openvswitch2.15 (RHSA-2023:1824)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1824 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

RHEL 9 : pcs (RHSA-2023:1981)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1981 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rubygem-rack: Denial ...

FreeBSD : jellyfin -- Multiple vulnerabilities (4ee322e9-e363-11ed-b934-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4ee322e9-e363-11ed-b934-b42e991fc52e advisory. - Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10...

Fedora 38 : insight (2023-8a6a30c142)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8a6a30c142 advisory. Disable stringop-overflow warnings. Patch bfd-CVE-2023-1972 fixes a security issue in bfd library. Tenable has extracted the preceding description...

Fedora 37 : mingw-freetype (2023-ddc617c87f)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ddc617c87f advisory. Backport fix for CVE-2023-2004. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 38 : dr_libs (2023-494ae331b6)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-494ae331b6 advisory. Update to 4b3d078 drwav 0.13.8: fix a possible null-pointer dereference and a crash when loading files with badly-formed metadata. Tenable has extracted the...

Fedora 38 : golang (2023-611d06c2a5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-611d06c2a5 advisory. go1.20.3 released 2023-04-04 includes security fixes to the go/parser, html/template, mime/multipart, net/http, and net/textproto packages, as well as bug...

Debian DSA-5385-1 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5385 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing. For th...

Wireshark 3.6.x < 3.6.13 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.13 advisory. - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet...

KB5025272: Windows Server 2012 Security Update (April 2023)

The remote Windows host is missing security update 5025272. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

GitLab 13.6 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0319)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1, allowing...