RHEL 8 : python39:3.9 and python39-devel:3.9 (RHSA-2023:4004)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4004 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

python38:3.8 and python38-devel:3.8 security update

babel 2.7.0-11 - Fix CVE-2021-20095 Resolves: rhbz1955615 Cython 0.29.14-4 - Exclude unsupported i686 arch modwsgi 4.6.8-4 - Core dumped upon file upload = 1GB Resolves: rhbz2125171 numpy 1.17.3-6 - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz1933055 python38...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-234)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-234 advisory. Reserved CVE CVE-2023-3269 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for this issue but has instead relied...

openSUSE 15 Security Update : iniparser (SUSE-SU-2023:2749-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:2749-1 advisory. - CVE-2023-33461: Fixed NULL pointer dereference in iniparsergetboolean bsc1211889. Tenable has extracted the preceding description block directly from the...

AlmaLinux 8 : python39:3.9 and python39-devel:3.9 (ALSA-2023:3811)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3811 advisory. python: urllib.parse url blocklisting bypass CVE-2023-24329 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. No...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-233)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-233 advisory. An issue was found in the Linux kernel's IPv6 TCP connection tracking code, which could lead to high CPU usage with certain traffic patterns. CVE-2023-1206 Tenable has extracted the preceding descriptio...

Amazon Linux 2023 : yajl, yajl-devel (ALAS2023-2023-214)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-214 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks ...

Amazon Linux 2023 : glib2, glib2-devel, glib2-static (ALAS2023-2023-225)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-225 advisory. The upstream bug report describes this issue as follows: A vulnerability was found in GLib2.0, where DoS caused by handling a malicious text-form variant which is structured to cause looping...

Amazon Linux 2023 : libeconf, libeconf-devel, libeconf-utils (ALAS2023-2023-227)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-227 advisory. A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files.This issue affects libeconf: before 0.5.2...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-230)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-230 advisory. LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, th...

Amazon Linux 2023 : json-c, json-c-devel (ALAS2023-2023-232)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-232 advisory. A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to...

Important: Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update

An update for the python39:3.9 and python39-devel:3.9 modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2023:3811)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3811 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank...

RHEL 8 : python39:3.9 and python39-devel:3.9 (RHSA-2023:3811)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3811 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2023:3781)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3781 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2023:3781)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3781 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

Important: Red Hat Security Advisory: python38:3.8 and python38-devel:3.8 security update

An update for the python38:3.8 and python38-devel:3.8 modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : python39:3.9 and python39-devel:3.9 (RHSA-2023:3776)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3776 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:2545-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2545-1 advisory. - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398. Tenable has extracted the preceding description block directly...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-211)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-211 advisory. In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. CVE-2022-48425 Tenable has extracted the preceding description bloc...