[SECURITY] Fedora 42 Update: vgrep-2.8.0-4.fc42

vgrep is a pager for grep, git-grep, ripgrep and similar grep implementations, and allows for opening the indexed file locations in a user-specified editor such as vim or emacs. vgrep is inspired by the ancient cgvg scripts but extended to perform further operations such as listing statistics of...

[SECURITY] Fedora 42 Update: qt5-qtbase-5.15.17-2.fc42

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

[SECURITY] Fedora 42 Update: sssd-2.11.1-2.fc42

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

[SECURITY] Fedora 43 Update: kea-3.0.2-1.fc43

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

[SECURITY] Fedora 43 Update: unbound-1.24.1-1.fc43

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

[SECURITY] Fedora 43 Update: firefox-144.0-3.fc43

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 41 Update: openbao-2.4.3-1.fc41

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

Fedora 42 : qt5-qtbase (2025-c50e4dfd3b)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c50e4dfd3b advisory. Fix CVE-2025-5455 - QtCore Assertion Failure Denial of Service Tenable has extracted the preceding description block directly from the Fedora securi...

Fedora 43 : qt5-qtbase (2025-9a46af550f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9a46af550f advisory. Fix CVE-2025-5455 - QtCore Assertion Failure Denial of Service Tenable has extracted the preceding description block directly from the Fedora securi...

Fedora 42 : openbao (2025-4bf7795b4e)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4bf7795b4e advisory. Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705. Tenable has extracted the preceding description block directly from...

Fedora 43 : firefox (2025-2d70cfaa80)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2d70cfaa80 advisory. - Updated to latest upstream 114.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 41 : openbao (2025-ab1fce816d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab1fce816d advisory. Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705. Tenable has extracted the preceding description block directly from...

Fedora 43 : kea (2025-a7cea1535d)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a7cea1535d advisory. - New version 3.0.2 rhbz2407048 - Fixes CVE-2025-11232 rhbz2407229 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : unbound (2025-16df491a66)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-16df491a66 advisory. Update to 1.24.1 - Enables DNS over QUIC server in unbound - Fix CVE-2025-11411, possible domain hijacking attack, reported by Yuxiao Wu, Yunyi Zhang, Baojun...

Fedora 42 : sssd (2025-5f49ddd4af)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5f49ddd4af advisory. - Fixes CVE-2025-11561 - Resolves: https://bugzilla.redhat.com/showbug.cgi?id=2402728 After startup SSSD already creates a Kerberos configuration snippet in...

Fedora 41 : vgrep (2025-87154673fe)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-87154673fe advisory. Rebuild for CVE-2025-47906. https://pkg.go.dev/vuln/GO-2025-3956 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 41 : ruby (2025-b10099f608)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b10099f608 advisory. Upgrade to Ruby 3.3.10. CVE-2025-58767 ruby: REXML denial of service rhbz2396203 Tenable has extracted the preceding description block directly from...

Fedora 42 : vgrep (2025-6738ea943a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6738ea943a advisory. Rebuild for CVE-2025-47906. https://pkg.go.dev/vuln/GO-2025-3956 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 42 : xorg-x11-server-Xwayland (2025-6f416148b4)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6f416148b4 advisory. Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231 Tenable has extracted the preceding description block directl...

Service Upstart Persistence

This module will create a service on the box, and mark it for auto-restart. We need enough access to write service files and potentially restart services Targets: CentOS 6 Fedora = 9, = 9.10, use exploit/linux/persistence/initupstart msf exploitinitupstart show targets ...targets... msf...