[SECURITY] Fedora 36 Update: python3.6-3.6.15-14.fc36

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 36 Update: python3.9-3.9.15-3.fc36

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

[SECURITY] Fedora 35 Update: python3.9-3.9.15-2.fc35

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

CentOS 8 : python39:3.9 (CESA-2022:8492)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:8492 advisory. - python: local privilege escalation via the multiprocessing forkserver start method CVE-2022-42919 Note that Nessus has not tested for this issue but has inste...

Internet Bug Bounty: Leak of sensitive values to Airflow rendered template

I’m just getting started with Airflow, but seem to have got into a situation where sensitive values e.g. connection passwords end up in my task’s rendered template. Here’s how my DAG starts, having set up a connection called “secret” with a password specified: t1 = BashOperator...

[SECURITY] Fedora 37 Update: python3.9-3.9.15-1.fc37

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

[SECURITY] Fedora 37 Update: python3.6-3.6.15-13.fc37

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

CentOS 8 : php:7.4 (CESA-2022:7628)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7628 advisory. - php: Special character breaks path in xml parsing CVE-2021-21707 - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 -...

CentOS 8 : Image Builder (CESA-2022:7548)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7548 advisory. - golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service CVE-2022-32189...

CentOS 8 : poppler (CESA-2022:7594)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7594 advisory. - poppler: A logic error in the Hints::Hints function can cause denial of service CVE-2022-27337 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : container-tools:3.0 (CESA-2022:7529)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7529 advisory. - golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - cri-o: memory exhaustion on the node when access to the kube api...

CentOS 8 : libtiff (CESA-2022:7585)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7585 advisory. - libtiff: Denial of Service via crafted TIFF file CVE-2022-0561 - libtiff: Null source pointer lead to Denial of Service via crafted TIFF file...

CentOS 8 : yajl (CESA-2022:7524)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7524 advisory. - yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Note that Nessus has not tested for this issue but has...

CentOS 8 : wavpack (CESA-2022:7558)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7558 advisory. - wavpack: Heap out-of-bounds read in WavpackPackSamples CVE-2021-44269 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : container-tools:4.0 (CESA-2022:7469)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7469 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 - golang: crash in a golang.org/x/crypto/ssh server CVE-2022-27191 -...

CentOS 8 : openjpeg2 (CESA-2022:7645)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7645 advisory. - openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : fribidi (CESA-2022:7514)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7514 advisory. - fribidi: Stack based buffer overflow CVE-2022-25308 - fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 - fribidi: SEGV in...

CentOS 8 : dnsmasq (CESA-2022:7633)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7633 advisory. - dnsmasq: Heap use after free in dhcp6norelay CVE-2022-0934 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : freetype (CESA-2022:7745)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7745 advisory. - FreeType: Buffer overflow in sfntinitface CVE-2022-27404 - FreeType: Segmentation violation via FNTSizeRequest CVE-2022-27405 - Freetype: Segmentatio...

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2022:7592)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7592 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...