SUSE SLED15: ffmpeg / ffmpeg-private-devel / libavcodec-devel / libavcodec57 / etc (SUSE-SU-2023:0007-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0007-1 advisory. - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442. Tenable has extracted the...

Debian: Security Advisory (DLA-3253-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 36 : webkit2gtk3 (2022-71121c44a4)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-71121c44a4 advisory. Update to 2.38.3: Fix runtime critical warnings from media player. Fix network process crash when fetching website data on ephemeral session. Fix th...

SUSE: Security Advisory (SUSE-SU-2022:4636-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2022-2932)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds. CVE-2021-33655 - In...

SUSE: Security Advisory (SUSE-SU-2022:4616-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 36 : keylime (2022-8ad3246cc0)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-8ad3246cc0 advisory. Security fix for CVE-2022-3500 Proper exception handling in tornadorequests Tenable has extracted the preceding description block directly from the...

Fedora 35 : php-twig (2022-4490a4772d)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-4490a4772d advisory. Version 1.44.7 2022-09-28 Fix a security issue on filesystem loader possibility to load a template outside a configured directory Tenable has extracted the...

Fedora 36 : exim (2022-6125582f45)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6125582f45 advisory. Fixed use after free in regex handler Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-2856)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 36 : weechat (2022-b81c4781af)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-b81c4781af advisory. - add command /item to create custom bar items - add bar item spacer - add case conversion in evaluation of expressions with lower:string and upper:string -...

Fedora 35 : java-latest-openjdk (2022-ec7de69ceb)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ec7de69ceb advisory. New in release OpenJDK 19.0.1 2022-10-18 Full release notes This update depends on FEDORA-2022-10bb6f119e CVEs Fixed - CVE-2022-21618 - CVE-2022-216...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2022-2817)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 35 : xen (2022-99af00f60e)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-99af00f60e advisory. Xenstore: Guests can crash xenstored XSA-414, CVE-2022-42309 Xenstore: Guests can create orphaned Xenstore nodes XSA-415, CVE-2022-42310 Xenstore:...

Fedora 36 : drupal7-i18n (2022-91ce497459)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-91ce497459 advisory. - https://www.drupal.org/project/i18n/releases/7.x-1.31 - https://www.drupal.org/project/i18n/releases/7.x-1.30 -...

Fedora 35 : apptainer (2022-2ff503c5d4)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2ff503c5d4 advisory. Update to 1.1.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Debian dla-3240 : libde265-0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3240 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3240-1 [email protected]...

Zoom Client for Meetings < 5.10.0 Vulnerability (ZSB-22009)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.10.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22009 advisory. - The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly valida...

SUSE: Security Advisory (SUSE-SU-2022:4457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TYPO3 8.0.0 < 8.7.49 ELTS / 9.0.0 < 9.5.38 ELTS / 10.0.0 < 10.4.33 / 11.0.0 < 11.5.20 / 12.0.0 < 12.1.1 (TYPO3-CORE-SA-2022-013)

The version of TYPO3 installed on the remote host is prior to 8.0.0 8.7.49 ELTS / 9.0.0 9.5.38 ELTS / 10.0.0 10.4.33 / 11.0.0 11.5.20 / 12.0.0 12.1.1. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2022-013 advisory. - Restricting frontend login to specific users...