Fedora 35 : libdxfrw / librecad (2022-3dd3274ae2)

The remote Fedora 35 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-3dd3274ae2 advisory. Update to 2.2.0 RC4. ---- Update librecad to 2.2.0 rc3. Apply fixes to libdxfrw and librecad for CVE-2021-45341, CVE-2021-45342, CVE-2021-45343. Thi...

Fedora 35 : postgresql-jdbc (2022-cdeabe1bc0)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-cdeabe1bc0 advisory. Security fix for CVE-2022-31197. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 36 : python3.9 (2022-b17bf30e88)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b17bf30e88 advisory. Security fix for CVE-2022-42919 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 35 : exim (2022-ebbac924d3)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ebbac924d3 advisory. Fixed use after free in dmarcdnslookup CVE-2022-3620. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 36 : php (2022-1ecc10276e)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-1ecc10276e advisory. PHP version 8.1.12 27 Oct 2022 Core: Fixes segfault with Fiber on FreeBSD i386 architecture. David Carlier Fileinfo: Fixed bug GH-8805 finfo returns...

openSUSE 15 Security Update : mbedtls (openSUSE-SU-2022:10247-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10247-1 advisory. - An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an...

Fedora 36 : pypy3.7 (2022-2173709172)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2173709172 advisory. Backport fix for CVE-2021-28861 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE SLES12: java-1_8_0-ibm / java-1_8_0-ibm-alsa / java-1_8_0-ibm-devel / etc (SUSE-SU-2022:4602-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4602-1 advisory. IBM Security Update November 2022: bsc1205302, bsc1204703 - CVE-2022-3676: A security vulnerability was fixed in version 8.0.7.20, adding th...

Fedora 35 : lighttpd (2022-c26b19568d)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c26b19568d advisory. 1.4.67 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but h...

VMware vRealize Operations 8.x < 8.6 Hot Fix 8, 8.10.x < 8.10.1 Multiple Vulnerabilities (VMSA-2022-0034)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6 Hot Fix 8 or 8.10.x prior to 8.10.1. It is, therefore, affected by a multiple vulnerabilities: - A privilege escalation vulnerability exists. An authenticated, remote attacker with administrative...

Fedora 36 : libxml2 / xmlsec1 (2022-aeafd24818)

The remote Fedora 36 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-aeafd24818 advisory. Update to 2.10.3 Fix CVE-2022-40303 Fix CVE-2022-40304 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 36 : php (2022-0b77fbd9e7)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-0b77fbd9e7 advisory. PHP version 8.1.11 29 Sep 2022 Core: Fixed bug php81726: phar wrapper: DOS when using quine gzip file. CVE-2022-31628. cmb Fixed bug php81727: Don't...

Fedora 36 : vim (2022-40161673a3)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-40161673a3 advisory. The newest upstream commit Security fixes for CVE-2022-3256, CVE-2022-3324, CVE-2022-3352, CVE-2022-3235, CVE-2022-3234, CVE-2022-3296, CVE-2022-329...

Fedora 36 : mingw-python3 (2022-45d2cfdfa4)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-45d2cfdfa4 advisory. Backport patch for CVE-2022-45061. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 35 : python3.11 (2022-a04a020e48)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-a04a020e48 advisory. The final release of Python 3.11.0. Contains security fix for CVE-2022-42919. Tenable has extracted the preceding description block directly from th...

Fedora 36 : kernel (2022-24041b1667)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-24041b1667 advisory. The 6.0.11 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

Fedora 35 : thunderbird (2022-927df621df)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-927df621df advisory. Update to 102.5.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/ ; https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes/ ;...

Fedora 36 : mbedtls (2022-ff582c5b0d)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ff582c5b0d advisory. Update to 2.28.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 35 : varnish (2022-99c5ddb2ae)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-99c5ddb2ae advisory. This is a security update adding fixes for the following issues VSV00009 aka CVE-2022-38150: Denial of service VSV00010 aka CVE-2022-45059: Request...

Fedora 36 : webkit2gtk3 (2022-ce32af66d6)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ce32af66d6 advisory. Fix scrolling issues in some sites having fixed background. Fix prolonged buffering during progressive live playback. Fix several crashes and...