Fedora 37 : python3.7 (2022-d00969b4f0)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d00969b4f0 advisory. Automatic update for python3.7-3.7.13-2.fc37. Changelog Fri Jun 10 2022 Charalampos Stratakis - 3.7.13-2 - Security fix for CVE-2015-20107 Resolves:...

Fedora 37 : pypy3.8 (2022-8691216b9b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8691216b9b advisory. Automatic update for pypy3.8-7.3.9-2.3.8.fc37. Changelog Tue Jun 28 2022 Charalampos Stratakis - 7.3.9-2.3.8 - Security fix for CVE-2015-20107 - Fixes:...

Fedora 38 : cloudcompare (2022-d0be6938e2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d0be6938e2 advisory. Automatic update for cloudcompare-2.11.3-4.fc38. Changelog Thu Aug 25 2022 Miro Hronok - 2.11.3-4 - Security fix for CVE-2021-21897 - Fixes: rhbz2080986...

Fedora 37 : pypy (2022-f4f9328607)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f4f9328607 advisory. Automatic update for pypy-7.3.9-2.fc37. Changelog Tue Jun 28 2022 Charalampos Stratakis - 7.3.9-2 - Security fix for CVE-2015-20107 - Fixes: rhbz2075390...

Fedora 37 : pypy3.9 (2022-fb723cc02f)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-fb723cc02f advisory. Automatic update for pypy3.9-7.3.9-2.3.9.fc37. Changelog Tue Jun 28 2022 Charalampos Stratakis - 7.3.9-2.3.9 - Security fix for CVE-2015-20107 - Fixes:...

Fedora 41 : python3.11 (2024-d3d904cb56)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d3d904cb56 advisory. Automatic update for python3.11-3.11.9-5.fc41. Changelog Thu Aug 15 2024 Charalampos Stratakis - 3.11.9-5 - Security fix for CVE-2024-4032 rhbz22933...

Fedora 37 : ceph (2022-d832fd2f45)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d832fd2f45 advisory. ceph 17.2.5 GA ---- ceph-17.2.4 Security fix for CVE-2021-3979 Note: fix was actually included in ceph-17.2.3 Tenable has extracted the preceding...

Fedora 41 : python3.6 (2024-96ed485f6d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-96ed485f6d advisory. Automatic update for python3.6-3.6.15-35.fc41. Changelog Fri Aug 16 2024 Tom Hrniar - 3.6.15-35 - Security fix for CVE-2024-6923 rhbz2303161 Tenable has...

Fedora 41 : ghc-base64 / ghc-hakyll / ghc-isocline / gitit / pandoc / etc (2024-d62088b505)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-d62088b505 advisory. pandoc-cli replaces pandoc binary package Security fix for CVE-2023-35936 and CVE-2023-35936 newly packaged ghc-base64 and ghc-isocline Tenable has...

Fedora 38 : python3.8 (2022-eda83be115)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-eda83be115 advisory. Automatic update for python3.8-3.8.15-2.fc38. Changelog Mon Nov 14 2022 Miro Hronok - 3.8.15-2 - CVE-2022-37454: Fix buffer overflows in sha3 module Related:...

fontforge security update

20201107-6 - Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws...

ALSA-2024:9636 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: Use after free in ANGLE CVE-2024-4558 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-40789 webkitgtk:...

Fedora 41 : python3.6 (2024-19882248ad)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-19882248ad advisory. Automatic update for python3.6-3.6.15-27.fc41. Changelog Thu Feb 29 2024 Charalampos Stratakis - 3.6.15-27 - Security fix for CVE-2007-4559 - Fixes:...

Fedora 37 : python3.6 (2022-0f9ef05c85)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-0f9ef05c85 advisory. Automatic update for python3.6-3.6.15-9.fc37. Changelog Fri Jun 10 2022 Charalampos Stratakis - 3.6.15-9 - Security fix for CVE-2015-20107 Resolves:...

Fedora 41 : python-quart (2024-2f78bf0769)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2f78bf0769 advisory. Security fix for GHSA-q34m-jh98-gwm2. 0.19.8 2024-10-25 - Bugfix: Fix missing check that caused the previous fix to raise an error. 0.19.7 2024-10-25 -...

Fedora 37 : capnproto / fastnetmon / librime / rr / sonic-visualiser (2022-18023b665f)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-18023b665f advisory. Update capnproto to version 0.9.2 to address CVE-2022-46149. Dependent packages were rebuilt for both the fix for the security issue and the capnproto SONAME...

Fedora 38 : python3.6 (2022-f321e2cec0)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f321e2cec0 advisory. Automatic update for python3.6-3.6.15-15.fc38. Changelog Mon Dec 19 2022 Charalampos Stratakis - 3.6.15-15 - Security fix for CVE-2022-45061: CPU denial of...

Fedora 38 : python3.7 (2022-792bd23738)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-792bd23738 advisory. Automatic update for python3.7-3.7.15-2.fc38. Changelog Mon Nov 14 2022 Miro Hronok - 3.7.15-2 - CVE-2022-37454: Fix buffer overflows in sha3 module Related:...

CVE-2024-45594 Decidim allows cross-site scripting (XSS) in the online or hybrid meeting embeds

Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0...

CVE-2024-52291 Craft has a Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution

Craft is a content management system CMS. A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme e.g., file://file:////. This enables the attacker to specify sensitive folders as the file system, leading to potential file...