The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3827 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3853 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege     escalation (CVE-2023-1281)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3852 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege     escalation (CVE-2023-1281)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst     (BZ#2208289)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3819 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference     (CVE-2023-28466)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update RT source tree to the RHEL-8.8.z1 source tree. (BZ#2210299)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3796 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3781 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3780 advisory.

    Python is an interpreted, interactive, object-oriented programming language that supports modules,     classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a     stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and     PostgreSQL.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3777 advisory.

    Python is an interpreted, interactive, object-oriented programming language that supports modules,     classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a     stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and     PostgreSQL.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3776 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3715 advisory.

    The libvirt library contains a C API for managing and interacting with the virtualization capabilities of     Linux and other operating systems. In addition, libvirt provides tools for remote management of     virtualized systems.

    Security Fix(es):

    * libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3711 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

    * libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)

    * libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)

    * libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in     tools/tiffcrop.c (CVE-2023-0797)

    * libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)

    * libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)

    * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)

    * libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in     tools/tiffcrop.c (CVE-2023-0801)

    * libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)

    * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)

    * libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3722 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)

    * openssl: Denial of service by excessive resource usage in verifying X509 policy constraints     (CVE-2023-0464)

    * openssl: Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465)

    * openssl: Certificate policy check not enabled (CVE-2023-0466)

    * openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * In FIPS mode, openssl KDFs should only allow selected hash algorithms (BZ#2175860)

    * In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator (BZ#2175864)

    * In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated     internally or provided externally (BZ#2175868)

    * openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c     (BZ#2175873)

    * In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of     RSASVE) or provide an indicator (BZ#2178029)

    * In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator     (BZ#2178030)

    * In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(),     RSA_private_decrypt() functions for pairwise consistency tests (BZ#2178034)

    * In FIPS mode, openssl should enter error state when DH PCT fails (BZ#2178039)

    * In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the     pkcs5 parameter is set to 1 (BZ#2178137)

    * Support requiring EMS in TLS 1.2, default to it when in FIPS mode (BZ#2188046)

    * OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode (BZ#2188052)

    * RHEL9.0 - sshd dumps core when ibmca engine is configured with default_algorithms = CIPHERS or ALL     (openssl) (BZ#2211396)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3771 advisory.

    The VDSM service is required by a Virtualization Manager to manage the Linux hosts. VDSM manages and     monitors the host's storage, memory and networks as well as virtual machine creation, other host     administration tasks, statistics gathering, and log collection.

    The following packages have been upgraded to a later upstream version: ovirt-dependencies (4.5.3), ovirt-     engine (4.5.3.8), vdsm (4.50.3.8). (BZ#2180717)

    Security Fix(es):

    * springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern (CVE-2023-20860)

    * springframework: Spring Expression DoS Vulnerability (CVE-2023-20861)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Previously, a host with Secure Intel Icelake Server Family could become non-operational because it did     not provide the taa-no CPU feature.
    In this release, the check has been fixed in the Manager, and such hosts work properly. (BZ#2184623)

    * Previously, when creating bonds on a host outside the Manager and adding the host without starting it,     the Rx\Tx drop count is shown as null.
    As a result, a Null Pointer Exception is thrown in the Administration Portal > Compute > Hosts > Network     Interfaces tab.
    With this release, null values are accepted, and there are no exceptions displayed in the Network     Interfaces tab. (BZ#2180230)

    * Previously, the Volume Extend Logic method skipped sparse volumes. As a result,  RAW sparse volumes (on     file storage) were not extended properly.
    In this release, RAW sparse volumes are extended as expected. (BZ#2210036)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3714 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)

    * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3741 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3723 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance     Events (CVE-2023-2235)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    * Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)

    * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)

    * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)

    * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference     (CVE-2023-28466)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Intel QAT Update - (kernel changes) (BZ#2176846)

    * RPL-P IOTG/RPL-S IOTG: cpu frequency issues (BZ#2178857)

    * In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181727)

    * Kernel BUG in iwlmvm wifi driver when used Mesh systems (BZ#2186723)

    * Azure RHEL 9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due     to uninitialized current_vmcs] (BZ#2186822)

    * RHEL 9 blktests nvme/047 lead kernel NULL pointer (BZ#2187536)

    * Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2187709)

    * kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188655)

    * fix page end in filemap_get_read_batch (BZ#2189349)

    * RHEL 9.2 hwpoison: data loss when memory error occurs on hugetlb pagecache (BZ#2192348)

    * wdat_wdt watchdog timeout triggered unexpectedly (BZ#2192585)

    * ice: high CPU usage with GNSS or ptp4l (BZ#2203154)

    * RHEL 9 smpboot: Scheduler frequency invariance went wobbly, disabling! on nohz_full CPUs after long     run (BZ#2203178)

    * Dying percpu kworkers cause issues on isolated CPUs [rhel-9] (BZ#2203229)

    * FJ9.2 Bug: [REG] NFS infinite loop of COMMIT call and NFS4ERR_DELAY reply. (BZ#2203335)

    * perf errors - event syntax error: 'unc_p_delayed_c_state_abort_core5' b'_ value too big for format,     maximum is 255' (BZ#2207471)

    * RHEL 9: Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-     number.rst (BZ#2208242)

    * cifs: backport small patches to bring us close to 9.1 - backport commit aea02fc40a7f cifs: fix wrong     unlock before return from cifs_tree_connect (BZ#2209045)

    * RHEL 9 x86_64, kdump 2nd kernel will randomly panic on kvm-08-guest25.hv2 (BZ#2210614)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3725 advisory.

    The less utility is a text file browser that resembles more, but allows users to move backwards in the     file as well as forwards. Since less does not read the entire input file at startup, it also starts more     quickly than ordinary text editors.

    Security Fix(es):

    * less: crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal     (CVE-2022-46663)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3708 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance     Events (CVE-2023-2235)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    * Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)

    * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)

    * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)

    * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference     (CVE-2023-28466)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [RT] Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2186853)

    * kernel-rt: update RT source tree to the latest RHEL-9.2.z1 Batch (BZ#2188313)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3705 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance     Events (CVE-2023-2235)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3677 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3665 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3661 advisory.

    The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.

    Security Fix(es):

    * texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3660 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3662 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3623 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    These new packages include numerous enhancements and bug fixes. Space precludes documenting all of these     changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on     the     most significant of these changes:

    https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/6.1/html/release_notes/index

    Security Fix(es):

    * moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)

    * angular: XSS vulnerability (CVE-2021-4231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All users of Red Hat Ceph Storage are advised to update to these packages that provide numerous     enhancements and bug fixes.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3579 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3578 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3588 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3590 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3594 advisory.

    Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an     emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of     third-party libraries.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3582 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.118 and .NET Runtime 6.0.18.

    The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212378)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3593 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.107 and .NET Runtime 7.0.7.

    The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211876)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument     (CVE-2023-32032)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3591 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3583 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3592 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.107 and .NET Runtime 7.0.7.

    The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211877)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument     (CVE-2023-32032)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3585 advisory.

    Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an     emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of     third-party libraries.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3587 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3577 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)

    * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)

    * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3595 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3581 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.118 and .NET Runtime 6.0.18.

    The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212379)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3586 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)

    * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)

    * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3589 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3580 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.118 and .NET Runtime 6.0.18.

    The following packages have been upgraded to a later upstream version: rh-dotnet60-dotnet (6.0.118).
    (BZ#2211715)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3596 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3584 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3597 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3566 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3559 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3561 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3565 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
177658	RHEL 8 : libtiff (RHSA-2023:3827)	medium
177657	RHEL 8 : kpatch-patch (RHSA-2023:3853)	high
177656	RHEL 8 : kernel (RHSA-2023:3852)	high
177655	RHEL 8 : kernel-rt (RHSA-2023:3819)	high
177637	RHEL 8 : python3 (RHSA-2023:3796)	high
177614	RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2023:3781)	high
177535	RHEL 8 : python27:2.7 (RHSA-2023:3780)	high
177534	RHEL 8 : python27:2.7 (RHSA-2023:3777)	high
177533	RHEL 8 : python39:3.9 and python39-devel:3.9 (RHSA-2023:3776)	high
177531	RHEL 9 : libvirt (RHSA-2023:3715)	medium
177530	RHEL 9 : libtiff (RHSA-2023:3711)	medium
177529	RHEL 9 : openssl (RHSA-2023:3722)	high
177528	RHEL 8 : Red Hat Virtualization (RHSA-2023:3771)	high
177527	RHEL 9 : postgresql (RHSA-2023:3714)	high
177526	RHEL 7 : c-ares (RHSA-2023:3741)	high
177525	RHEL 9 : kernel (RHSA-2023:3723)	critical
177524	RHEL 9 : less (RHSA-2023:3725)	high
177494	RHEL 9 : kernel-rt (RHSA-2023:3708)	critical
177473	RHEL 9 : kpatch-patch (RHSA-2023:3705)	high
177452	RHEL 8 : c-ares (RHSA-2023:3677)	high
177432	RHEL 8 : c-ares (RHSA-2023:3665)	high
177428	RHEL 8 / 9 : texlive (RHSA-2023:3661)	high
177425	RHEL 8 : c-ares (RHSA-2023:3660)	high
177424	RHEL 8 : c-ares (RHSA-2023:3662)	high
177348	RHEL 9 : Red Hat Ceph Storage 6.1 (RHSA-2023:3623)	medium
177322	RHEL 7 : firefox (RHSA-2023:3579)	critical
177321	RHEL 8 : firefox (RHSA-2023:3578)	critical
177320	RHEL 8 : thunderbird (RHSA-2023:3588)	critical
177319	RHEL 8 : firefox (RHSA-2023:3590)	critical
177318	RHEL 8 : python3.11 (RHSA-2023:3594)	high
177316	RHEL 8 : .NET 6.0 (RHSA-2023:3582)	high
177315	RHEL 8 : .NET 7.0 (RHSA-2023:3593)	high
177314	RHEL 8 : python3 (RHSA-2023:3591)	high
177313	RHEL 9 : c-ares (RHSA-2023:3583)	high
177311	RHEL 9 : .NET 7.0 (RHSA-2023:3592)	high
177310	RHEL 9 : python3.11 (RHSA-2023:3585)	high
177309	RHEL 9 : thunderbird (RHSA-2023:3587)	critical
177308	RHEL 9 : nodejs:18 (RHSA-2023:3577)	medium
177306	RHEL 9 : python3.9 (RHSA-2023:3595)	high
177304	RHEL 9 : .NET 6.0 (RHSA-2023:3581)	high
177303	RHEL 9 : nodejs (RHSA-2023:3586)	medium
177302	RHEL 9 : firefox (RHSA-2023:3589)	critical
177301	RHEL 7 : .NET 6.0 (RHSA-2023:3580)	high
177300	RHEL 8 : thunderbird (RHSA-2023:3596)	critical
177299	RHEL 8 : c-ares (RHSA-2023:3584)	high
177298	RHEL 8 : firefox (RHSA-2023:3597)	critical
177292	RHEL 8 : thunderbird (RHSA-2023:3566)	critical
177291	RHEL 9 : c-ares (RHSA-2023:3559)	high
177290	RHEL 8 : firefox (RHSA-2023:3561)	critical
177289	RHEL 8 : thunderbird (RHSA-2023:3565)	critical

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

medium

high

high

high

high

high

high

high

high

medium

medium

high

high

high

high

critical

high

critical

high

high

high

high

high

high

medium

critical

critical

critical

critical

high

high

high

high

high

high

high

critical

medium

high

high

medium

critical

high

critical

high

critical

critical

high

critical

critical