gzip security update

CentOS Errata and Security Advisory CESA-2022:2191 An update for gzip is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

minizip, zlib security update

CentOS Errata and Security Advisory CESA-2022:2213 An update for zlib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

java security update

CentOS Errata and Security Advisory CESA-2022:1487 An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

CentOS 7 : zlib (RHSA-2022:2213)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:2213 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that Nessus has n...

CentOS 8 : subversion:1.10 (CESA-2022:2234)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2234 advisory. - subversion: Subversion's moddavsvn is vulnerable to memory corruption CVE-2022-24070 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 7 : gzip (RHSA-2022:2191)

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:2191 advisory. - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted...

CentOS 7 : java-11-openjdk (RHSA-2022:1440)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1440 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affecte...

CentOS 8 : container-tools:3.0 (CESA-2022:2143)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2143 advisory. - psgo: Privilege escalation in 'podman top' CVE-2022-1227 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : libtiff (CESA-2022:1810)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1810 advisory. - libtiff: a buffer overflow via the invertImage may lead to DoS CVE-2020-19131 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : rust-toolset:rhel8 (CESA-2022:1894)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1894 advisory. - rust: Race condition in removedirall leading to removal of files outside of the directory being removed CVE-2022-21658 Note that Nessus has not tested for thi...

CentOS 8 : qt5-qtsvg (CESA-2022:1920)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1920 advisory. - qt: out-of-bounds write may lead to DoS CVE-2021-45930 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : flatpak (CESA-2022:1792)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1792 advisory. - flatpak: Permissions granted to applications can be hidden from the user at install time CVE-2021-43860 Note that Nessus has not tested for this issue but has...

CentOS 8 : keepalived (CESA-2022:1930)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1930 advisory. - keepalived: dbus access control bypass CVE-2021-44225 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : exiv2 (CESA-2022:1842)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1842 advisory. - exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS CVE-2020-18898 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : container-tools:3.0 (CESA-2022:1793)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1793 advisory. - crun: Default inheritable capabilities for linux container should be empty CVE-2022-27650 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : maven:3.6 (CESA-2022:1860)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1860 advisory. - apache-httpclient: incorrect handling of malformed authority component in request URIs CVE-2020-13956 Note that Nessus has not tested for this issue but has...

CentOS 8 : fapolicyd (CESA-2022:1898)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1898 advisory. - fapolicyd: fapolicyd wrongly prepares ld.so path CVE-2022-1117 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : zsh (CESA-2022:2120)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2120 advisory. - zsh: Prompt expansion vulnerability CVE-2021-45444 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

CentOS 8 : compat-exiv2-026 (CESA-2022:1797)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1797 advisory. - exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS CVE-2020-18898 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : cockpit (CESA-2022:2008)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:2008 advisory. - cockpit: pages vulnerable to clickjacking CVE-2021-3660 - cockpit: authenticates with revoked certificates CVE-2021-3698 Note that Nessus has not...