Ubuntu: Security Advisory (USN-6523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : xen (2023-56901a79a1)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-56901a79a1 advisory. x86/AMD: mismatch in IOMMU quarantine page table levels XSA-445, CVE-2023-46835 x86: BTC/SRSO fixes not fully effective XSA-446, CVE-2023-46836...

Fedora 38 : gst-devtools / gstreamer1 / gstreamer1-doc / python-gstreamer1 (2023-7bd66f219f)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-7bd66f219f advisory. Fixes for GStreamer-SA-2023-0010 ZDI-CAN-22299 and GStreamer-SA-2023-0009 ZDI-CAN-22226 CVE-2023-44429 Tenable has extracted the preceding description block...

Rocky Linux 8 : dotnet7.0 (RLSA-2023:7256)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7256 advisory. - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability CVE-2023-36049 - ASP.NET Core - Security Feature Bypass Vulnerability...

Rocky Linux 8 : dotnet6.0 (RLSA-2023:7258)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7258 advisory. - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability CVE-2023-36049 - ASP.NET Core - Security Feature Bypass Vulnerability...

Oracle Linux 9 : dotnet6.0 (ELSA-2023-7257)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7257 advisory. 6.0.125-1.0.1 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Add support for Oracle Linux Tenable has extracted the preceding description block...

Oracle Linux 9 : dotnet7.0 (ELSA-2023-7255)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7255 advisory. 7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 Tenable has extracted the preceding description block directly from the Oracle Linux...

SUSE SLES12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2023:4486-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4486-1 advisory. - CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels XSA-445 bsc1216654. - CVE-2023-46836: x86: BTC/SRSO fixes...

Fedora 37 : tor (2023-f73b2bc240)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f73b2bc240 advisory. update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155 Tenable has extracted the preceding description block directl...

Fedora 39 : gstreamer1-plugin-libav / gstreamer1-plugins-bad-free / etc (2023-6a4aea6d13)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-6a4aea6d13 advisory. 1.22.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Fedora 39 : tor (2023-36344fb44b)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-36344fb44b advisory. update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155 Tenable has extracted the preceding description block directl...

Fedora 38 : tor (2023-29cafcbf4a)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-29cafcbf4a advisory. update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155 Tenable has extracted the preceding description block directl...

Fedora 39 : dotnet6.0 (2023-1dd7cbebc9)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1dd7cbebc9 advisory. This is the October 24, 2023 release for .NET 6. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.24/6.0.24.md Tenable has...

Fedora 37 : dotnet7.0 (2023-1458e23c3d)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1458e23c3d advisory. This is the October 24, 2023 release for .NET 7. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.13/7.0.13.md Tenable has...

Microsoft Security Update Validation Report November 2023

Microsoft’s November 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Fedora 38 : dotnet7.0 (2023-e26d3a5b89)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e26d3a5b89 advisory. This is the October 24, 2023 release for .NET 7. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.13/7.0.13.md Tenable has...

Fedora 38 : dotnet6.0 (2023-83abc1175d)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-83abc1175d advisory. This is the October 24, 2023 release for .NET 6. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.24/6.0.24.md Tenable has...

SUSE-SU-2023:4472-1 Security update for go1.20-openssl

This update for go1.20-openssl fixes the following issues: Update to version 1.20.11.1 cut from the go1.20-openssl-fips branch at the revision tagged go1.20.11-1-openssl-fips. Update to go1.20.11 go1.20.11 released 2023-11-07 includes security fixes to the path/filepath package, as well as bug...

Citrix Releases Security Updates for Citrix Hypervisor

Citrix has released security updates addressing vulnerabilities in Citrix Hypervisor 8.2 CU1 LTSR. A cyber threat actor could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Citrix Hypervisor Security Bulletin for...

AlmaLinux 9 : dotnet6.0 (ALSA-2023:7257)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:7257 advisory. - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability CVE-2023-36049 - ASP.NET Core - Security Feature Bypass Vulnerability...