CentOS 8 : libxml2 (CESA-2022:7715)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7715 advisory. - libxml2: Incorrect server side include parsing can lead to XSS CVE-2016-3709 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:7472)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7472 advisory. - QEMU: fdc: heap buffer overflow in DMA read data transfers CVE-2021-3507 - libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to deni...

CentOS 8 : container-tools:rhel8 (CESA-2022:7457)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7457 advisory. - golang: net/http/httputil: panic due to racy read of persistConn after handler panic CVE-2021-36221 - opencontainers: OCI manifest and index parsing...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2022:7581)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7581 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : pcs (CESA-2022:7447)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7447 advisory. - pcs: improper authentication via PAM CVE-2022-1049 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

CentOS 8 : libreoffice (CESA-2022:7461)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7461 advisory. - libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo children CVE-2021-25636 Note that Nessus has not tested for this issue but has...

CentOS 8 : httpd:2.4 (CESA-2022:7647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7647 advisory. - httpd: modlua: Use of uninitialized value of in r:parsebody CVE-2022-22719 - httpd: core: Possible buffer overflow with very large or unlimited...

CentOS 8 : python27:2.7 (CESA-2022:7593)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7593 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : webkit2gtk3 (CESA-2022:7704)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7704 advisory. - webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-22624, CVE-2022-22628, CVE-2022-26709, CVE-2022-26710, CVE-2022-26717 -...

CentOS 8 : container-tools:rhel8 (CESA-2022:7822)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7822 advisory. - podman: possible information disclosure and modification CVE-2022-2989 - buildah: possible information disclosure and modification CVE-2022-2990 Note...

CentOS 8 : grafana-pcp (CESA-2022:7648)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7648 advisory. - golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - golang: io/fs: stack exhaustion in Glob CVE-2022-30630 - golang:...

CentOS 8 : xmlrpc-c (CESA-2022:7692)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7692 advisory. - expat: Integer overflow in doProlog in xmlparse.c CVE-2021-46143 - expat: Integer overflow in addBinding in xmlparse.c CVE-2022-22822 - expat: Intege...

CentOS 8 : nodejs:14 (CESA-2022:7830)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7830 advisory. - nodejs: Improper handling of URI Subject Alternative Names CVE-2021-44531 - nodejs: Certificate Verification Bypass via String Injection CVE-2021-445...

CentOS 8 : gdisk (CESA-2022:7700)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7700 advisory. - gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc CVE-2020-0256 - gdisk: possible out-of-bounds-write in ReadLogicalParts of...

CentOS 8 : nodejs:18 (CESA-2022:7821)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7821 advisory. - nodejs: weak randomness in WebCrypto keygen CVE-2022-35255 - nodejs: HTTP Request Smuggling due to incorrect parsing of header fields CVE-2022-35256...

CentOS 8 : unbound (CESA-2022:7622)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7622 advisory. - unbound: the novel ghost domain where malicious users to trigger continued resolvability of malicious domain names CVE-2022-30698 - unbound: novel...

[SECURITY] Fedora 35 Update: python3.9-3.9.15-1.fc35

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

CentOS: Security Advisory for squid (CESA-2022:6815)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for libksba (CESA-2022:7088)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for expat (CESA-2022:6834)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...