Fedora 36 : seamonkey (2023-9695066ded)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9695066ded advisory. Update to 2.53.15 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 37 : advancecomp (2023-f685c3dcc5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f685c3dcc5 advisory. Update to 2.5 close RHBZ2162990; fix RHBZ2161641: Fix segmentation fault on invalid MNG size Tenable has extracted the preceding description block directly...

Microsoft Urges Customers to Secure On-Premises Exchange Servers

Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange...

Microsoft Urges Customers to Secure On-Premises Exchange Servers

Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange...

Fedora 37 : rust-libgit2-sys (2023-db96a62414)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-db96a62414 advisory. Update to version 0.13.5 includes bundled libgit2 v1.4.5 with the latest security fixes. Tenable has extracted the preceding description block directly from...

Google Chrome Security Updates (stable-channel-update-for-desktop_24-2023-01) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Ubuntu: Security Advisory (USN-4778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

go-toolset:ol8 security and bug fix update

golang 1.18.9-1 - Update to Go 1.18.9 - Add big-endian.patch - Increase GOTESTTIMEOUTSCALE due to a Brew issue - Add do-not-reuse-far-trampolines.patch - Resolves: rhbz2149313 1.18.7-2 - Fix version mismatch from previous rebase - Related: rhbz2136719 1.18.7-1 - Update to Go 1.18.7 - Resolves:...

Fedora 36 : libXpm (2023-49dbeb6b03)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-49dbeb6b03 advisory. libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883 Tenable has extracted the preceding description block directly from the Fedora...

VMware Releases Security Updates for VMware vRealize Log Insight

VMware released security updates to address multiple vulnerabilities in VMware vRealize Log Insight. A remote attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2023-0001 and apply th...

Security Updates for Azure CycleCloud (Nov 2022)

The Azure CycleCloud product is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An unauthenticated, adjacent attacker can exploit this, via brute force authentication, to obtain a successful login and gain administrator privleges. Note that Nessus...

Own an older iPhone? Check you're on the latest version to avoid this bug

In December, 2022, we warned our readers about an actively exploited vulnerability in Apples WebKit. Back then we wondered why Apple specifically stated that the issue may have been actively exploited against versions of iOS released before iOS 15.1. At the time, our resident Apple expert Thomas...

MGASA-2023-0018 Updated firefox packages fix security vulnerability

A vulnerability was found in NSS. The NSS client auth crashes without a user certificate in the database, leading to a segmentation fault or crash CVE-2022-3479. An out of date library libusrsctp contained vulnerabilities that could potentially be exploited CVE-2022-46871. By confusing the browse...

RHEL 7 : kernel-rt (RHSA-2023:0400)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0400 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 : libXpm (RHSA-2023:0380)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0380 advisory. X.Org X11 libXpm runtime library. Security Fixes: libXpm: compression commands depend on $PATH CVE-2022-4883 libXpm: Runaway loop on width o...

AlmaLinux 8 : libXpm (ALSA-2023:0379)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0379 advisory. - libXpm: compression commands depend on $PATH CVE-2022-4883 - libXpm: Runaway loop on width of 0 and enormous height CVE-2022-44617 - libXpm: Infinite lo...

RHEL 8 : libXpm (RHSA-2023:0384)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0384 advisory. X.Org X11 libXpm runtime library. Security Fixes: libXpm: compression commands depend on $PATH CVE-2022-4883 libXpm: Runaway loop on width o...

Oracle Linux 9 : libXpm (ELSA-2023-0383)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0383 advisory. - Fix CVE-2022-46285: infinite loop on unclosed comments 2160230 - Fix CVE-2022-44617: runaway loop with width of 0 2160232 Tenable has extracted the...

Fedora 37 : kernel (2023-0597579983)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0597579983 advisory. The 6.1.7 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

java-11-openjdk security and bug fix update

1:11.0.18.0.10-1 - Update to jdk-11.0.18+10 GA - Update release notes to 11.0.18+10 - Switch to GA mode for release - This tarball is embargoed until 2023-01-17 @ 1pm PT. - Related: rhbz2150192 1:11.0.18.0.9-0.2.ea - Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of...