Security update for cobbler (important)

openSUSE Security Update: Security update for cobbler Announcement ID: openSUSE-SU-2024:0382-1 Rating: important References: 1203478 1204900 1205489 1205749 1206060 1206160 1206520 1207595 1209149 1219933 1231332 Cross-References: CVE-2024-47533 CVSS scores: CVE-2024-47533 SUSE: 9.8...

ALSA-2024:10481 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass vulnerability CVE-2024-44309 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refe...

CBL Mariner 2.0 Security Update: unzip (CVE-2022-0529)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0529 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string...

Fortinet FortiProxy Out-of-bound Write in sslvpnd (FG-IR-24-255)

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. Note that Nessus has...

ALSA-2024:10218 Moderate: perl-App-cpanminus security update

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM. Security Fixes: perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution...

CBL Mariner 2.0 Security Update: busybox (CVE-2023-42366)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42366 advisory. - A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

BELL-CVE-2024-10524

Bulletin has no description...

RockyLinux 8 : expat (RLSA-2024:9502)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9502 advisory. libexpat: expat: DoS via XMLResumeParser CVE-2024-50602 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

DEBIAN-CVE-2023-4679

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...

Fedora 37 : sysstat (2022-9f3af921a5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-9f3af921a5 advisory. Security fix for CVE-2022-39377 - arithmetic overflow in allocatestructures on 32 bit systems Tenable has extracted the preceding description block directly...

Fedora 41 : tinyproxy (2024-f6b87970b3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f6b87970b3 advisory. Automatic update for tinyproxy-1.11.2-1.fc41. Changelog Tue Jul 16 2024 Carl George - 1.11.2-1 - Update to version 1.11.2 rhbz2298298 - Fixes CVE-2023-49606...

Fedora 41 : freeipa (2024-d7b9fbb2a5)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d7b9fbb2a5 advisory. Automatic update for freeipa-4.11.1-4.fc41. Changelog Wed Feb 21 2024 Rob Crittenden - 4.11.1-4 - Security release: CVE-2024-1481 - Resolves: rhbz2265129...

Fedora 37 : python3.12 (2022-3d7e44dbd5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-3d7e44dbd5 advisory. Update to 3.12.0a3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 40 : python3.6 (2024-c8cc025262)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c8cc025262 advisory. Security fix for CVE-2024-9287 rhbz2321659 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 37 : unbound (2022-1326d2815c)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-1326d2815c advisory. - Fix CVE-2022-3204 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 38 : python3.10 (2022-bd02afca8c)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bd02afca8c advisory. Automatic update for python3.10-3.10.8-2.fc38. Changelog Wed Nov 9 2022 Lumr Balhar - 3.10.8-2 - Fix CVE-2022-42919 Resolves: rhbz2138709 Tenable has extract...

Fedora 37 : libmodsecurity (2022-90453044f3)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-90453044f3 advisory. Update to maintenance release 3.0.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 37 : openssl1.1 (2022-eaec96bb34)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-eaec96bb34 advisory. Automatic update for openssl1.1-1.1.1p-1.fc37. Changelog Thu Jun 30 2022 Clemens Lang - 1:1.1.1p-1 - Upgrade to 1.1.1p Resolves: CVE-2022-2068 Related:...

Fedora 41 : haproxy (2024-bd2368f66a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bd2368f66a advisory. Update to 3.0.4 CVE-2024-45506, 2309472 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 37 : strongswan (2022-525510c815)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-525510c815 advisory. Resolves CVE-2022-40617 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...