Ubuntu 18.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5991-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5991-1 advisory. It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use...

GHSA-VQ4H-9GHM-QMRR vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-HWC3-3QH6-R4GG vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-Q6G2-G7F3-RR83 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2023-1370 vulnerabilities

Vulnerabilities for packages: sonarqube-10, druid, celeborn, thingsboard...

Fedora 36 : chromium (2023-015e4d696d)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-015e4d696d advisory. update to 111.0.5563.64. Fixes the following security issues: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932...

CVE-2022-4203 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-87X9-7GRX-M28V vulnerabilities

Vulnerabilities for packages: zot...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: go, hey, gke-gcloud-auth-plugin, k3d, kubeflow, terraform-provider-sendgrid, falco, wireguard-go, restic, dynamic-localpv-provisioner, grpcurl, kubeflow-katib...

Fedora 37 : edk2 (2023-e1ffb79ddf)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e1ffb79ddf advisory. update openssl CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304. ---- cherry-pick aarch64 bugfixes, set firmware build release date, add...

CVE-2023-22490 vulnerabilities

Vulnerabilities for packages: git...

EulerOS Virtualization 3.0.2.2 : unbound (EulerOS-SA-2023-1299)

According to the versions of the unbound package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man- in-the-middle attack...

RHEL 7 : firefox (RHSA-2023:0296)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0296 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Fedora 36 : php (2023-2dc2d607ba)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2dc2d607ba advisory. PHP version 8.1.14 05 Jan 2023 Core: Fixed bug GH-9905 constant behaves inconsistent when class is undefined. cmb Fixed bug GH-9918 License...

AlmaLinux 8 : nodejs:14 (ALSA-2023:0050)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0050 advisory. minimist: prototype pollution CVE-2021-44906 node-fetch: exposure of sensitive information to an unauthorized actor CVE-2022-0235 nodejs-minimatch: ReDoS...

CVE-2023-22466 vulnerabilities

Vulnerabilities for packages: pulumi-watch...

Fedora 36 : booth (2022-6744980220)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6744980220 advisory. Remove Alias directive from [email protected] unit file ---- Security fix for CVE-2022-2553 Tenable has extracted the preceding description block...

Fedora 35 : python3.11 (2022-a04a020e48)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-a04a020e48 advisory. The final release of Python 3.11.0. Contains security fix for CVE-2022-42919. Tenable has extracted the preceding description block directly from th...

Fedora 35 : mingw-pixman (2022-ae2559a8f4)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ae2559a8f4 advisory. Update to 0.42.2, fixes CVE-2022-44638 and CVE-2022-43680. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 35 : chromium (2022-3ca063941b)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3ca063941b advisory. Update to chromium-105.0.5195.125. This package only has minor changes... ah, just kidding. Here is the pile of security issues it fixes:...