Fedora 35 : dotnet6.0 (2022-34a610d9bf)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-34a610d9bf advisory. This is the monthly .NET 6 update for September 2022. It updates the .NET SDK to 6.0.109 and Runtime to 6.0.9. This includes a fix for CVE-2022-38013 Tenable...

Fedora 36 : cacti / cacti-spine (2022-1a85254c11)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-1a85254c11 advisory. - Update to 1.2.22 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 36 : dotnet6.0 (2022-5f28fceec0)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-5f28fceec0 advisory. This is the October 2022 monthly update for .NET 6. It updates the SDK to 6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE 2022-41032...

Fedora 36 : woff (2022-706c76c4f0)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-706c76c4f0 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...

Fedora 35 : python3.8 (2022-bda1ac11c3)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bda1ac11c3 advisory. The release you're looking at is Python 3.8.15, a security bugfix release for the legacy 3.8 series...

Fedora 36 : apptainer (2022-0be906c02d)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-0be906c02d advisory. Update to 1.1.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 36 : python3.9 (2022-6c46abfb5a)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-6c46abfb5a advisory. The release you're looking at is Python 3.9.15, a security bugfix release for the legacy 3.9 series...

Synology DiskStation Manager (DSM) End of Life (EOL) Detection

The Synology DiskStation Manager DSM version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fedora 36 : samba (2022-d680c70ebe)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d680c70ebe advisory. Update to version 4.16.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Vulnerabilities fixed in Mattermost

Unspecified vulnerabilities have been fixed in MatterMost. Mattermost has not released any substantive information released, but estimates the severity of the vulnerabilities as MEDIUM. The grading of this security advisory is accordingly accordingly. MatterMost indicates in accordance with their...

Fedora 35 : php-twig3 (2022-e915614918)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e915614918 advisory. Version 3.4.3 2022-09-28 Fix a security issue on filesystem loader possibility to load a template outside a configured directory Tenable has extracted the...

Fedora 35 : kubernetes (2022-2004702d98)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-2004702d98 advisory. Resolves, in part, 2142161. Security patches that resolve CVE-2022-3162 and CVE-2022-3294. Tenable has extracted the preceding description block...

Fedora 36 : mingw-expat (2022-49db80f821)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-49db80f821 advisory. Update to 2.5.0, fixes CVE-2022-43680. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 36 : python-joblib (2022-c0bfe37ae5)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c0bfe37ae5 advisory. Security fix for CVE-2022-21797 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 36 : mingw-libtasn1 (2022-3c933ffaca)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3c933ffaca advisory. Update to 4.19.0, fixes CVE-2021-46848. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 36 : vim (2022-fc4c513d06)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-fc4c513d06 advisory. The newest upstream commit Security fix for CVE-2022-4141 Vim did not recognize key codes passed by Kitty Tenable has extracted the preceding...

Fedora 36 : freeradius (2022-98832b2cc2)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-98832b2cc2 advisory. Update to upstream release 3.0.26. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 36 : qpress (2022-e19ca639ef)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e19ca639ef advisory. Security fix for CVE-2022-45866 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

A Guide to Efficient Patch Management with Action1

It's no secret that keeping software up to date is one of the key best practices in cybersecurity. Software vulnerabilities are being discovered almost weekly these days. The longer it takes IT teams to apply updates issued by developers to patch these security flaws, the more time attackers have...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 9

Package name: xms10.14.0.10942.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10813.bin, xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date:...