The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-7c13845b0d advisory.

    New upstream release fixing CVE-2022-3515


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b0f5bc2175 advisory.

    Security: processing of a specially crafted mp4 file by the     ngx_http_mp4_module might cause a worker process crash, worker     process memory disclosure, or might have potential other impact     (CVE-2022-41741, CVE-2022-41742).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-385d2ea041 advisory.

    Security fix for CVE-2022-37454

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-fff548cfab advisory.

    The newest upstream commit

    Security fixes for CVE-2022-3256, CVE-2022-3324, CVE-2022-3352, CVE-2022-3235, CVE-2022-3234,     CVE-2022-3296, CVE-2022-3297, CVE-2022-3278.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-7f9021ead1 advisory.

    Security fixes for CVE-2022-37966, CVE-2022-37967 and CVE-2022-38023

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e6d0495206 advisory.

    Update to 3.11.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-7ce9378e90 advisory.

    - put the font back in /boot for now

    Yes, this bloats size by a couple meg.  Hopefully this won't cause problems for anyone and everyone can be     okay with this CVE fix update.

    ----

    - Adjust the way we provide unicode.pf2 for post-CVE lockdown policy

    ----

    Two font-related CVE updates (CVE-2022-2601 and CVE-2022-3775).  For more information, see [upstream's     disclosure](https://lists.gnu.org/archive/html/grub-devel/2022-11/msg00059.html) or the patches     themselves.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-5adda2d05f advisory.

    Security fix for CVE-2022-39377 - arithmetic overflow in allocate_structures() on 32 bit systems

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-5a6ed3607d advisory.

    Security fix for CVE-2022-3500     Proper exception handling in tornado_requests

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-5d37367673 advisory.

    Update capnproto to version 0.9.2 to address CVE-2022-46149.
    Dependent packages were rebuilt for both the fix for the security issue and the capnproto SONAME bump.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-b83fff8106 advisory.

    Update to 102.5.1 ;
    https://www.mozilla.org/en-US/security/advisories/mfsa2022-50/ ;
    https://www.thunderbird.net/en-US/thunderbird/102.5.1/releasenotes/

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-502f096dce advisory.

    Security fix for CVE-2022-3602 and CVE-2022-3786

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3dcb5a3785 advisory.

    Update to version 4.16.6 - Security fixes for CVE-2022-3592 and CVE-2022-3437

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a648a9484f advisory.

    - New upstream version (106.0.1)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-12790ca71a advisory.

    - Update to 20.10.20.
    - Mitigates CVE-2022-39253


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-2cfbe17910 advisory.

    The 101/201/301 builds of the 5.19.15 kernel contain fixes for some wireless network vulnerabilities and a     couple of important arm bug fixes.

    ----

    The 5.19.15 stable kernel update contains a number of important fixes across the tree.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-38179cd087 advisory.

    - Update to latest upstream (105.0.1)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8bf22a684b advisory.

    Update to 102.2.1 ;
    https://www.mozilla.org/en-US/security/advisories/mfsa2022-38/

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-33dd0f2f3e advisory.

    Update to 102.2.0 ;
    https://www.mozilla.org/en-US/security/advisories/mfsa2022-36/

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-02d2625a01 advisory.

    Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2c4dc61810 advisory.

    - Update to new upstream version (103.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a7fccdd7a0 advisory.

    Update to 91.12.0 ;
    https://www.mozilla.org/en-US/security/advisories/mfsa2022-31/

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c69ef9c1dd advisory.

    The 5.18.11 stable kernel update contains a number of important fixes across the tree. In addition to the     5.18.11 stable patches, this build contains the retbleed patches scheduled for 5.18.12 kernels.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-01b6d6f289 advisory.

    Update to 91.11.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-59e474cd5c advisory.

    - Update to new upstream (102.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-391e24517d advisory.

    The 5.18.5 stable kernel update contains mitigation for the processor MMIO stale-data vulnerabilities.
    These are covered by CVE-2022-21166 CVE-2022-21125 and CVE-2022-21123

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-080ea50338 advisory.

    - New upstream update (101.0)

    ----

    - Fixed missing popups in some scenarios on Wayland (https://bugzilla.mozilla.org/show_bug.cgi?id=1771104)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a5d22b5dd8 advisory.

    Update to 91.10.0     See https://www.mozilla.org/en-US/security/advisories/mfsa2022-22/

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-443c5ec2dd advisory.

    Update to 3.4.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d15a736748 advisory.

    - fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
    - do not accept cookies for TLD with trailing dot (CVE-2022-27779)
    - hsts: ignore trailing dots when comparing hosts names (CVE-2022-30115)
    - reject percent-encoded path separator in URL host (CVE-2022-27780)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e56085ba31 advisory.

    Rebase to version 10.40

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-63b1344b6d advisory.

    - New upstream version (100.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e304fffd34 advisory.

    The newest upstream commit

    Security fixes for CVE-2022-1381, CVE-2022-1420

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-3781e69ebd advisory.

    - Update to latest upstream (Firefox 99.0 & nss 3.77).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a9bd17092d advisory.

    This is a maintenance release of OpenVPN 2.5 with a security fix when used in server mode     ([CVE-2022-0547](https://community.openvpn.net/openvpn/wiki/CVE-2022-0547)). The other changes are     available in [Changes.rst](https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst).

    **NOTE** Please read the CVE description carefully if you use authentication plug-ins with a server     configuration.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-78b18981a6 advisory.

    Update to 6.0.2

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-48bf3cb1c4 advisory.

    Security fix for CVE-2022-0554

    ----

    Security fixes for CVE-2022-0714, CVE-2022-0729

    ----

    Security fix for CVE-2022-0696

    ----

    Security fix for CVE-2022-0629

    ----

    Security fix for CVE-2022-0572

    ----

    Security fixes for CVE-2022-0408, CVE-2022-0413, CVE-2022-0393, CVE-2022-0417, CVE-2022-0443

    ----

    Security fix for CVE-2022-0685




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-db30f1bd42 advisory.

    Security fix for CVE-2021-0561

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-63ca9a1129 advisory.

    The newest upstream commit

    ---

    Security fixes for CVE-2022-0714, CVE-2022-0729

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-62ac7b3744 advisory.

    Security fix for https://www.gnutls.org/security-new.html#GNUTLS-SA-2022-01-17

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-8622ebdebb advisory.

    The newest upstream commit

    Security fix for CVE-2022-0629

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f044a6dede advisory.

    - Updated to latest upstream (97.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-da040e6b94 advisory.

    pkexec: argv overflow results in local privilege esc.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-86b0833619 advisory.

    * Update to latest version (96.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-48874a2744 advisory.

  - - Update to latest upstream (95.0) (FEDORA-2021-48874a2744)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-7f0e71beb1 advisory.

  - - New upstream version (94.0) (FEDORA-2021-7f0e71beb1)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-a87c34524c advisory.

  - - New upstream version (94.0) (FEDORA-2021-a87c34524c)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-968f57ec98 advisory.

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3778)

  - vim is vulnerable to Use After Free (CVE-2021-3796)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-116eff380f advisory.

  - Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-37975)

  - Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37974)

  - Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to     obtain potentially sensitive information from process memory via a crafted HTML page. (CVE-2021-37976)

  - Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37977)

  - Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
169023	Fedora 36 : ckeditor (2022-b61dfd219b)	medium
169022	Fedora 35 : libksba (2022-7c13845b0d)	critical
169021	Fedora 36 : nginx (2022-b0f5bc2175)	critical
169020	Fedora 36 : python3.7 (2022-385d2ea041)	critical
169019	Fedora 35 : vim (2022-fff548cfab)	high
169018	Fedora 36 : samba (2022-7f9021ead1)	high
169017	Fedora 35 : python3.11 (2022-e6d0495206)	high
169016	Fedora 35 : grub2 (2022-7ce9378e90)	high
169015	Fedora 35 : sysstat (2022-5adda2d05f)	high
168618	Fedora 35 : keylime (2022-5a6ed3607d)	medium
168382	Fedora 36 : capnproto / fastnetmon / librime / rr / sonic-visualiser (2022-5d37367673)	medium
168381	Fedora 36 : thunderbird (2022-b83fff8106)	high
166781	Fedora 36 : openssl (2022-502f096dce)	high
166601	Fedora 36 : samba (2022-3dcb5a3785)	medium
166466	Fedora 36 : firefox (2022-a648a9484f)	high
166425	Fedora 36 : moby-engine (2022-12790ca71a)	medium
166144	Fedora 36 : kernel (2022-2cfbe17910)	high
165479	Fedora 36 : firefox (2022-38179cd087)	high
164645	Fedora 36 : thunderbird (2022-8bf22a684b)	high
164454	Fedora 36 : thunderbird (2022-33dd0f2f3e)	high
164412	Fedora 36 : firefox (2022-02d2625a01)	high
163751	Fedora 36 : firefox (2022-2c4dc61810)	high
163643	Fedora 36 : thunderbird (2022-a7fccdd7a0)	high
163090	Fedora 36 : kernel (2022-c69ef9c1dd)	medium
162615	Fedora 36 : thunderbird (2022-01b6d6f289)	high
162613	Fedora 36 : firefox (2022-59e474cd5c)	high
162339	Fedora 36 : kernel (2022-391e24517d)	medium
161829	Fedora 36 : firefox (2022-080ea50338)	high
161788	Fedora 36 : thunderbird (2022-a5d22b5dd8)	high
161281	Fedora 36 : fish (2022-443c5ec2dd)	high
161149	Fedora 36 : curl (2022-d15a736748)	high
161148	Fedora 36 : pcre2 (2022-e56085ba31)	critical
160483	Fedora 35 : firefox (2022-63b1344b6d)	high
160101	Fedora 35 : vim (2022-e304fffd34)	high
159634	Fedora 35 : firefox / nss (2022-3781e69ebd)	high
159010	Fedora 35 : openvpn (2022-a9bd17092d)	critical
158557	Fedora 35 : kicad (2022-78b18981a6)	high
158443	Fedora 34 : vim (2022-48bf3cb1c4)	high
158442	Fedora 35 : flac (2022-db30f1bd42)	medium
158441	Fedora 35 : vim (2022-63ca9a1129)	high
158437	Fedora 35 : gnutls (2022-62ac7b3744)	high
158257	Fedora 35 : vim (2022-8622ebdebb)	high
157888	Fedora 35 : firefox (2022-f044a6dede)	high
157153	Fedora 35 : polkit (2022-da040e6b94)	high
156741	Fedora 35 : firefox (2022-86b0833619)	high
155960	Fedora 35 : firefox (2021-48874a2744)	high
154857	Fedora 34 : firefox (2021-7f0e71beb1)	high
154839	Fedora 35 : firefox (2021-a87c34524c)	high
154184	Fedora 34 : 2:vim (2021-968f57ec98)	high
154180	Fedora 34 : chromium (2021-116eff380f)	high

Detections

Analytics

Fedora Local Security Checks Family for Nessus

medium

critical

critical

critical

high

high

high

high

high

medium

medium

high

high

medium

high

medium

high

high

high

high

high

high

high

medium

high

high

medium

high

high

high

high

critical

high

high

high

critical

high

high

medium

high

high

high

high

high

high

high

high

high

high

high