RHEL 9 : thunderbird (RHSA-2023:4064)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4064 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Security Fixes: Mozilla...

Ubuntu 20.04 ESM / 22.04 ESM : SciPy vulnerabilities (USN-6226-1)

The remote Ubuntu 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6226-1 advisory. It was discovered that SciPy did not properly manage memory operations during reference counting. An attacker could possibly use this issue t...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM : Gerbv vulnerabilities (USN-6209-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6209-1 advisory. Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this...

SUSE SLES15 Security Update : dnsdist (SUSE-SU-2023:2777-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2777-1 advisory. - Implements package 'dnsdist' with version 1.8.0 in SLE15. jscPED-3402 - Downstream DNS resolver configuration should be chosen by...

Fedora 38 : apache-ivy (2023-35f775fd6e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-35f775fd6e advisory. Changelog Sun Jun 25 2023 Didik Supriadi - 2.5.1-3 - Build with ivy instead of maven Tenable has extracted the preceding description block directly...

Fedora 38 : golang (2023-802ea02cf1)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-802ea02cf1 advisory. go1.20.5 released 2023-06-06 includes four security fixes to the cmd/go and runtime packages, as well as bug fixes to the compiler, the go command, the...

Fedora 37 : python3.7 (2023-dd526ed2e4)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-dd526ed2e4 advisory. Fix for CVE-2023-24329 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 37 : qt5-qtbase (2023-f42087b533)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f42087b533 advisory. Fixes CVE-2023-32762 and CVE-2023-32763. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 38 : kitty (2023-0418511dfe)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0418511dfe advisory. version 0.28.1, backport security fix. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 37 : kernel (2023-4f2cf7e5d2)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4f2cf7e5d2 advisory. The 6.2.12 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

SUSE SLES15 Security Update : dnsmasq (SUSE-SU-2023:1930-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:1930-1 advisory. - CVE-2023-28450: Fixed default maximum size for EDNS.0 UDP packets bsc1209358. Tenable has extracted the preceding description block directly from the...

Fedora 38 : dr_libs (2023-494ae331b6)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-494ae331b6 advisory. Update to 4b3d078 drwav 0.13.8: fix a possible null-pointer dereference and a crash when loading files with badly-formed metadata. Tenable has extracted the...

Fedora 37 : golang (2023-7232640d17)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7232640d17 advisory. go1.19.8 released 2023-04-04 includes security fixes to the go/parser, html/template, mime/multipart, net/http, and net/textproto packages, as well as bug...

Fedora 38 : golang (2023-611d06c2a5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-611d06c2a5 advisory. go1.20.3 released 2023-04-04 includes security fixes to the go/parser, html/template, mime/multipart, net/http, and net/textproto packages, as well as bug...

Fedora 37 : polkit (2023-4936e4e7f1)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4936e4e7f1 advisory. config file permission change to increase security of polkitd Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 37 : yarnpkg (2023-86d75130fe)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-86d75130fe advisory. Apply fix for CVE-2022-37603. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

RHEL 9 : thunderbird (RHSA-2023:1407)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1407 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.9.0. Security Fixes: Mozilla:...

Fedora 37 : firefox (2023-24b2b22eca)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-24b2b22eca advisory. - Update to latest upstream 111.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 36 : pack (2023-0c354a3f9a)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0c354a3f9a advisory. Security fix for CVE-2022-41717 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : mingw-binutils (2023-a86258ed64)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a86258ed64 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...