Fedora 39 : python3.9 (2023-0bd29e992b)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0bd29e992b advisory. Update to 3.9.18 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 39 : dcmtk (2023-29c8c2d740)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-29c8c2d740 advisory. Automatic update for dcmtk-3.6.7-3.fc39. Changelog Thu Mar 2 2023 Carl George - 3.6.7-3 - Backport fix for CVE-2022-43272, resolves rhbz2150930 Tenable has...

Fedora 39 : open-vm-tools (2023-ec8a4d8cde)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ec8a4d8cde advisory. Use fuse3 on new RHEL Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 39 : libpcap / tcpdump (2023-79335e1c60)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-79335e1c60 advisory. New versions of libpcap and tcpdump Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 39 : traceroute (2023-b870a4de82)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b870a4de82 advisory. Update to 2.1.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 39 : openmpi / pmix / prrte / slurm (2023-1185eca900)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-1185eca900 advisory. Security fix for CVE-2023-41915 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 39 : python3.11 (2023-4953fc03b9)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4953fc03b9 advisory. Update to 3.11.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

QNAP Releases Patch for 2 Critical Flaws Threatening Your NAS Devices

QNAP has released security updates to address two critical security flaws impacting its operating system that could result in arbitrary code execution. Tracked as CVE-2023-23368 CVSS score: 9.8, the vulnerability is described as a command injection bug affecting QTS, QuTS hero, and QuTScloud. "If...

Django < 3.2.21, 4.1.x < 4.1.11, 4.2.x < 4.2.5 DoS Vulnerability - Linux

Django is prone to a denial of service DoS vulnerability in django.utils.encoding.uritoiri. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Rocky Linux 8 : .NET 6.0 (RLSA-2022:0826)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0826 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2022-24464 - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2022-24512 Note...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0024)

The remote OracleVM system is missing necessary patches to address security updates: - An issue was discovered in l2capsockrelease in net/bluetooth/l2capsock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled. CVE-2023-40283 - A...

Rocky Linux 8 : vim (RLSA-2022:0366)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0366 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3872, CVE-2021-3984, CVE-2021-4019 - vim is vulnerable to Use After Free CVE-2021-4192 - vim ...

Wear OS Security Bulletin—November 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2023-11-05 or later from the November 2023 Android Security Bulletin in addition to all issues in this bulletin. We encourage al...

Maladies fixed in Qnap QTS and QuTS Hero

QNAP has fixed vulnerabilities in QTS and QuTS Hero. A malicious party can exploit the vulnerabilities to execute arbitrary code execute arbitrary code on the system. QNAP has released updates to fix the vulnerabilities in QTS and QuTS Hero. For more information, see:...

Fedora 37 : suricata (2023-4e2fe2ebac)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4e2fe2ebac advisory. This is a security release, fixing a number of important issues. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 38 : attract-mode (2023-1242b3ada2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1242b3ada2 advisory. Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : attract-mode (2023-e58495988e)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e58495988e advisory. Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : godot (2023-5225a85559)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5225a85559 advisory. This updates provides Godot 4.1.2 as the latest stable release for this free and open source game engine. It fixes many bugs, improves features and usability...

You’d be surprised to know what devices are still using Windows CE

Windows CE -- an operating system that, despite being out for 27 years, never had an official explanation for why it was called "CE" -- finally reached its official end-of-life period this week. This was Microsofts first operating system for embedded and pocket devices, making an appearance on...

Fedora 37 : rt (2023-a2df0551fe)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a2df0551fe advisory. Upstream security and bugfix update. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...