CentOS 8 : libssh (CESA-2022:2031)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2031 advisory. - libssh: possible heap-based buffer overflow when rekeying CVE-2021-3634 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : libpq (CESA-2022:1891)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1891 advisory. - postgresql: libpq processes unencrypted bytes from man-in-the-middle CVE-2021-23222 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : grafana (CESA-2022:1781)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1781 advisory. - grafana: directory traversal vulnerability CVE-2021-43813 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : gfbgraph (CESA-2022:1801)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1801 advisory. - gfbgraph: missing TLS certificate verification CVE-2021-39358 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : squid:4 (CESA-2022:1939)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1939 advisory. - squid: out-of-bounds read in WCCP protocol data may lead to information disclosure CVE-2021-28116 Note that Nessus has not tested for this issue but has inste...

CentOS 8 : webkit2gtk3 (CESA-2022:1777)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1777 advisory. - webkitgtk: Use-after-free leading to arbitrary code execution CVE-2021-30809 - webkitgtk: Type confusion issue leading to arbitrary code execution...

CentOS 8 : postgresql:10 (CESA-2022:1830)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1830 advisory. - postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : python3 (CESA-2022:1986)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1986 advisory. - python: urllib: HTTP client possible infinite loop on a 100 Continue response CVE-2021-3737 - python: ftplib should not use the host from the PASV...

CentOS 8 : mod_auth_openidc:2.3 (CESA-2022:1823)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:1823 advisory. - modauthopenidc: open redirect in oidcvalidateredirecturl CVE-2021-32786 - modauthopenidc: hardcoded static IV and AAD with a reused key in AES GCM...

CentOS 8 : c-ares (CESA-2022:2043)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2043 advisory. - c-ares: Missing input validation of host names may lead to domain hijacking CVE-2021-3672 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : bluez (CESA-2022:2081)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2081 advisory. - bluez: memory leak in the SDP protocol CVE-2021-41229 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : python-lxml (CESA-2022:1932)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1932 advisory. - python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : fetchmail (CESA-2022:1964)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:1964 advisory. - fetchmail: DoS or information disclosure when logging long messages CVE-2021-36386 - fetchmail: STARTTLS session encryption bypassing CVE-2021-39272...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2022:1764)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1764 advisory. - python: urllib: Regular expression DoS in AbstractBasicAuthHandler CVE-2021-3733 - python: urllib: HTTP client possible infinite loop on a 100 Contin...

CentOS: Security Advisory for thunderbird (CESA-2022:1725)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for firefox (CESA-2022:1703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

firefox security update

CentOS Errata and Security Advisory CESA-2022:1703 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : firefox (RHSA-2022:1703)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1703 advisory. - Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing...

CentOS 7 : thunderbird (RHSA-2022:1725)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1725 advisory. - When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an...

CentOS 8 : mariadb:10.5 (CESA-2022:1557)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:1557 advisory. - mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-2154, CVE-2021-2166 - mysql: InnoDB unspecified vulnerability CPU Jul 2021...