Vulnerability fixed in Esri ArcGIS Server

A vulnerability has been fixed in Esri ArcGis Server. This vulnerability allows an unauthenticated malicious person through path traversal to view system information from the server on which the application is running. Esri has released updates to fix the vulnerability. For more information, see:...

Fedora 36 : firefox (2022-3a000dac3a)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-3a000dac3a advisory. - New upstream version 108.0.1 ---- - New upstream release 108.0 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 36 : firefox (2022-2321894a60)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2321894a60 advisory. - New upstream version 107.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

Fedora 35 : firefox (2022-ec48d2c1b4)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-ec48d2c1b4 advisory. - Fixed VA-API playback artifacts mzbz1779186 ---- - New upstream version 107.0 Tenable has extracted the preceding description block directly from the Fedor...

Fedora 35 : firefox (2022-1f8312716f)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-1f8312716f advisory. - Update to latest upstream 105.0.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 35 : dotnet6.0 (2022-34a610d9bf)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-34a610d9bf advisory. This is the monthly .NET 6 update for September 2022. It updates the .NET SDK to 6.0.109 and Runtime to 6.0.9. This includes a fix for CVE-2022-38013 Tenable...

Fedora 36 : dotnet6.0 (2022-5f28fceec0)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-5f28fceec0 advisory. This is the October 2022 monthly update for .NET 6. It updates the SDK to 6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE 2022-41032...

Fedora 36 : cacti / cacti-spine (2022-1a85254c11)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-1a85254c11 advisory. - Update to 1.2.22 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 36 : woff (2022-706c76c4f0)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-706c76c4f0 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...

Fedora 36 : python3.9 (2022-6c46abfb5a)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-6c46abfb5a advisory. The release you're looking at is Python 3.9.15, a security bugfix release for the legacy 3.9 series...

Fedora 36 : apptainer (2022-0be906c02d)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-0be906c02d advisory. Update to 1.1.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 35 : python3.8 (2022-bda1ac11c3)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bda1ac11c3 advisory. The release you're looking at is Python 3.8.15, a security bugfix release for the legacy 3.8 series...

Fedora 36 : samba (2022-d680c70ebe)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d680c70ebe advisory. Update to version 4.16.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Synology DiskStation Manager (DSM) End of Life (EOL) Detection

The Synology DiskStation Manager DSM version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Vulnerabilities fixed in Mattermost

Unspecified vulnerabilities have been fixed in MatterMost. Mattermost has not released any substantive information released, but estimates the severity of the vulnerabilities as MEDIUM. The grading of this security advisory is accordingly accordingly. MatterMost indicates in accordance with their...

Fedora 36 : mingw-expat (2022-49db80f821)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-49db80f821 advisory. Update to 2.5.0, fixes CVE-2022-43680. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 35 : kubernetes (2022-2004702d98)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-2004702d98 advisory. Resolves, in part, 2142161. Security patches that resolve CVE-2022-3162 and CVE-2022-3294. Tenable has extracted the preceding description block...

Fedora 35 : php-twig3 (2022-e915614918)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e915614918 advisory. Version 3.4.3 2022-09-28 Fix a security issue on filesystem loader possibility to load a template outside a configured directory Tenable has extracted the...

Fedora 36 : python-joblib (2022-c0bfe37ae5)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c0bfe37ae5 advisory. Security fix for CVE-2022-21797 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 36 : freeradius (2022-98832b2cc2)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-98832b2cc2 advisory. Update to upstream release 3.0.26. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...