About the security content of macOS Sonoma 14.4

About the security content of macOS Sonoma 14.4 This document describes the security content of macOS Sonoma 14.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

Fedora 39 : python3.6 (2024-8732282e7b)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8732282e7b advisory. Fix tests for XMLPullParser with Expat 2.6.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

About the security content of visionOS 1.1

About the security content of visionOS 1.1 This document describes the security content of visionOS 1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

Fedora 39 : cpp-jwt (2024-56fbd2cbfa)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-56fbd2cbfa advisory. Fix side channel vulnerability Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

About the security content of watchOS 10.4

About the security content of watchOS 10.4 This document describes the security content of watchOS 10.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

About the security content of macOS Ventura 13.6.5

About the security content of macOS Ventura 13.6.5 This document describes the security content of macOS Ventura 13.6.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Apple Rolls Out Critical Updates to Address Zero-Day Flaws

Summary: Apple has addressed two zero-day vulnerabilities in iOS, namely CVE-2024-23225 and CVE-2024-23296. These vulnerabilities were exploited in attacks targeting Mobile devices, providing attackers with arbitrary kernel read and write privileges, enabling them to bypass kernel memory...

BIT-WORDPRESS-2023-22622

WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes "the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner," but neither the installation gui...

Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

Apple has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the wild. The shortcomings are listed below - CVE-2024-23225 - A memory corruption issue in Kernel that an attacker with arbitrary kernel read and writ...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 6

Package name: xms10.15.0.10624.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: March 2024 Languages supported: English US Important notes about this...

FreeBSD : Django -- multiple vulnerabilities (0ef3398e-da21-11ee-b23a-080027a5b8e9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0ef3398e-da21-11ee-b23a-080027a5b8e9 advisory. - Django reports: CVE-2024-27351: Potential regular expression denial-of-service in...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to 122.0.6045.214 Platform version: 15753.38.0 for most ChromeOS devices and will be rolled out over the coming days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a bu...

HP ThinPro 8.0 SP 8 Security Updates

...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.25.5-1 - Added Oracle Specifile Files for cri-o cri-tools 1.25.0-3 - Resolve CVE-2023-39326 flannel-cni-plugin 1.0.1-4 - Resolve CVE-2023-39326 helm 3.11.1-3 - address CVE-2023-39326 istio 1.16.7-3 - Updated Golang to 1.20.12 to address CVE...

kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

CentOS 9 : libtpms-0.9.1-2.20211126git1ff6fe1f43.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtpms-0.9.1-2.20211126git1ff6fe1f43.el9 build changelog. - out-of-bounds access when trying to resume the state of the vTPM CVE-2021-3623 - out-of-bounds access via specially...

CentOS 9 : vim-8.2.2637-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-16.el9 build changelog. - Use of Out-of-range Pointer Offset in vim prior CVE-2022-0554 - Heap-based Buffer Overflow occurs in vim CVE-2022-0943 Note that Nessus h...

CentOS 9 : glib2-2.68.4-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-9.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...

CentOS 9 : glib2-2.68.4-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-8.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...

CentOS 9 : cups-2.3.3op2-19.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the cups-2.3.3op2-19.el9 build changelog. - heap buffer overflow may lead to DoS CVE-2023-32324 - use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 Note that...