Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2023-327)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-327 advisory. An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to acces...

Oracle Linux 7 : realmd (ELSA-2015-2184)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2184 advisory. 0.16.1-5 - Revert 0.16.1-4 - Use samba by default - Resolves: rhbz1271618 0.16.1-4 - Fix regressions in 0.16.x releases - Resolves: rhbz1258745 - Resolves:...

RLSA-2023:3811 Important: python39:3.9 and python39-devel:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RLSA-2023:3822 Moderate: virt:rhel and virt-devel:rhel security and bug fix update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

python38:3.8 and python38-devel:3.8 security update

An update is available for python-pluggy, module.python-psycopg2, module.python-more-itertools, module.python-jinja2, module.babel, module.python3x-pip, module.python3x-setuptools, python-requests, python-psutil, numpy, module.python-ply, module.python-psutil, module.python-pycparser, babel,...

Rocky Linux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2023:3811)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3811 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank...

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2023:4799)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4799 advisory. Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. Security Fixes: libvirt: Memory...

Amazon Linux 2023 : librsvg2, librsvg2-devel, librsvg2-tools (ALAS2023-2023-295)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-295 advisory. A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files on the local filesystem outside of the expected area, as demonstrat...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-314)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-314 advisory. 2024-05-09: CVE-2022-3597 was added to this advisory. LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemcpy in libtiff/tifunix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826...

Amazon Linux 2023 : yasm, yasm-devel (ALAS2023-2023-275)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-275 advisory. Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file. CVE-2023-37732 Tenable has...

Amazon Linux 2023 : yajl, yajl-devel (ALAS2023-2023-279)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-279 advisory. There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash. CVE-2023-33460 Tenable has extracted the preceding description block...

Amazon Linux 2023 : iperf3, iperf3-devel (ALAS2023-2023-274)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-274 advisory. iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Tenable has extracted the preceding description block directly from the tested...

Amazon Linux 2023 : poppler, poppler-cpp, poppler-cpp-devel (ALAS2023-2023-289)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-289 advisory. Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Processing a specially crafted PDF file or JBIG2 image could lea...

SUSE: Security Advisory (SUSE-SU-2023:3093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : libzstd, libzstd-devel, libzstd-static (ALAS2023-2023-244)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-244 advisory. In zstd, supplying an empty string as an argument to either --output-dir-flat or --output-dir-mirror may cause a buffer overrun. CVE-2022-4899 Tenable has extracted the preceding description block...

Amazon Linux 2023 : yajl, yajl-devel (ALAS2023-2023-263)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-263 advisory. yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to subsequent heap memory corruption when...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2023:4032)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4032 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

Oracle Linux 8 : python38:3.8 / and / python38-devel:3.8 (ELSA-2023-3781)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3781 advisory. - Fix CVE-2021-20095 Resolves: rhbz1955615 Cython - Fix CVE-2023-24329 python3x-pip - Security fix for CVE-2021-43818 Resolves: rhbz2032569 python-markupsafe -...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2023:4038)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4038 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

RHEL 8 : python39:3.9 and python39-devel:3.9 (RHSA-2023:4004)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4004 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...