CentOS: Security Advisory for thunderbird (CESA-2022:8555)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for xorg-x11-server-common (CESA-2022:8491)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

hsqldb security update

CentOS Errata and Security Advisory CESA-2022:8560 An update for hsqldb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

xorg security update

CentOS Errata and Security Advisory CESA-2022:8491 An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS 8 : varnish:6 (CESA-2022:8649)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:8649 advisory. - varnish: Request Forgery Vulnerability CVE-2022-45060 Note that Nessus has not tested for this issue but has instead relied only on the application's...

[SECURITY] Fedora 36 Update: python3.6-3.6.15-14.fc36

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 36 Update: python3.9-3.9.15-3.fc36

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

[SECURITY] Fedora 35 Update: python3.9-3.9.15-2.fc35

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

CentOS 8 : python39:3.9 (CESA-2022:8492)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:8492 advisory. - python: local privilege escalation via the multiprocessing forkserver start method CVE-2022-42919 Note that Nessus has not tested for this issue but has inste...

Internet Bug Bounty: Leak of sensitive values to Airflow rendered template

I’m just getting started with Airflow, but seem to have got into a situation where sensitive values e.g. connection passwords end up in my task’s rendered template. Here’s how my DAG starts, having set up a connection called “secret” with a password specified: t1 = BashOperator...

[SECURITY] Fedora 37 Update: python3.9-3.9.15-1.fc37

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

[SECURITY] Fedora 37 Update: python3.6-3.6.15-13.fc37

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

CentOS 8 : Image Builder (CESA-2022:7548)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7548 advisory. - golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service CVE-2022-32189...

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2022:7592)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7592 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : freetype (CESA-2022:7745)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7745 advisory. - FreeType: Buffer overflow in sfntinitface CVE-2022-27404 - FreeType: Segmentation violation via FNTSizeRequest CVE-2022-27405 - Freetype: Segmentatio...

CentOS 8 : yajl (CESA-2022:7524)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7524 advisory. - yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Note that Nessus has not tested for this issue but has...

CentOS 8 : libtiff (CESA-2022:7585)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7585 advisory. - libtiff: Denial of Service via crafted TIFF file CVE-2022-0561 - libtiff: Null source pointer lead to Denial of Service via crafted TIFF file...

CentOS 8 : container-tools:3.0 (CESA-2022:7529)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7529 advisory. - golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - cri-o: memory exhaustion on the node when access to the kube api...

CentOS 8 : wavpack (CESA-2022:7558)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7558 advisory. - wavpack: Heap out-of-bounds read in WavpackPackSamples CVE-2021-44269 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : poppler (CESA-2022:7594)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7594 advisory. - poppler: A logic error in the Hints::Hints function can cause denial of service CVE-2022-27337 Note that Nessus has not tested for this issue but has instead...