Fedora 38 : java-1.8.0-openjdk (2023-7f704380a0)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7f704380a0 advisory. updated to jdk8u392+b08 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0025)

The remote OracleVM system is missing necessary patches to address security updates: - A flaw was found in the Netfilter subsystem in the Linux kernel. The xtu32 module did not validate the fields in the xtu32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds rea...

Fedora 39 : seamonkey (2023-76db6c040e)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-76db6c040e advisory. Update to 2.53.18 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Atlassian Releases Security Advisories for Multiple Products

Atlassian has released security updates to address vulnerabilities affecting multiple Atlassian products. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply th...

Fedora 39 : webkitgtk (2023-f844a8fa64)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f844a8fa64 advisory. - An out-of-bounds read was addressed with improved input validation. CVE-2023-42916 - A memory corruption vulnerability was addressed with improved...

CLSA-2023-1701963303 kernel: Fix of 18 CVEs

net/tls: do not free tlsrec on async operation in bpfexectxverdict CVE-2023-6176 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - x86/sev: Check for user-space IOIO pointing to kernel space CVE-2023-46813 -...

Fedora 39 : python2.7 (2023-9954dae554)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9954dae554 advisory. Security fix for CVE-2022-48560 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 38 : python2.7 (2023-34a3a5adba)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-34a3a5adba advisory. Security fix for CVE-2022-48560 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Windows 10 gets its own extended security updates program

The day that Windows 10 machines will get their last security updates is set for October 14, 2025. So if you want to stay secure, you’d have to upgrade to a newer version. Either to Windows 11, which is not all that different, but more demanding when it comes to system requirements. Or to the...

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks

Chipmaker Qualcomm has released more information about three high-severity security flaws that it said came under "limited, targeted exploitation" back in October 2023. The vulnerabilities are as follows - CVE-2023-33063 CVSS score: 7.8 - Memory corruption in DSP Services during a remote call fro...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : curl vulnerabilities (USN-6535-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6535-1 advisory. Harry Sintonen discovered that curl incorrectly handled mixed case cookie domains. A remote attacker could possibly use this...

Fedora 37 : firefox (2023-083a5e41cd)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-083a5e41cd advisory. - Updated to latest upstream 120.0.1 ---- - Fixed freezes on Google Maps ---- - Updated to latest upstream 120.0 Tenable has extracted the preceding...

Fedora 39 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2023-c67f4dbf13)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-c67f4dbf13 advisory. Security fix for CVE-2023-47038 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

December 4, 2023—KB5032288 (OS Builds 22621.2792 and 22631.2792) Preview

None None...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities within Safari, macOS Sonoma, iOS, and iPadOS. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply...

ASB-A-300368874

Bulletin has no description...

Multiple Vulnerabilities Affecting Web-Based Court Case and Document Management Systems

CISA has assisted a researcher with coordinating the disclosure of multiple researcher-discovered vulnerabilities affecting web-based case and document management systems used by multiple state, county, and municipal courts. Affected systems include products from Tyler Technologies and Catalis an...

About the security content of macOS Sonoma 14.1.2

About the security content of macOS Sonoma 14.1.2 This document describes the security content of macOS Sonoma 14.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

Fedora 39 : java-17-openjdk (2023-b6612f3819)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b6612f3819 advisory. updated to OpenJDK 17.0.9 2023-10-17 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 37 : xen (2023-e62da41072)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e62da41072 advisory. x86/AMD: mismatch in IOMMU quarantine page table levels XSA-445, CVE-2023-46835 x86: BTC/SRSO fixes not fully effective XSA-446, CVE-2023-46836...