The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9450 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9473 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9150 advisory.

    The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a     Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment.

    Security Fix(es):

    * jinja2: accepts keys containing non-attribute characters (CVE-2024-34064)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9452 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9192 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

    * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9243 advisory.

    The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH     (SASL), and TLS.

    Security Fix(es):

    * postfix: SMTP smuggling vulnerability (CVE-2023-51764)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9470 advisory.

    The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar     operating systems.

    Security Fix(es):

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9088 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)

    * openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237)

    * openssl: denial of service via null dereference (CVE-2024-0727)

    * edk2: Temporary DoS vulnerability (CVE-2024-1298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9102 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Symlink error leads to information disclosure (CVE-2022-4122)

    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9184 advisory.

    The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3     packages contain GTK+ version 3.

    Security Fix(es):

    * gtk3: gtk2: Library injection from CWD (CVE-2024-6655)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9458 advisory.

    The python-urllib3 package provides the Python HTTP module with connection pooling and file POST     abilities.

    Security Fix(es):

    * urllib3: proxy-authorization request header is not stripped during cross-origin redirects     (CVE-2024-37891)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9181 advisory.

    Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose     package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption     (NBDE) in Red Hat Enterprise Linux.

    Security Fix(es):

    * jose: resource exhaustion (CVE-2024-28176)

    * jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9115 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9442 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib2: Signal subscription vulnerabilities (CVE-2024-34397)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9439 advisory.

    FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including     PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed     fonts.

    Security Fix(es):

    * fontforge: command injection via crafted archives or compressed files (CVE-2024-25082)

    * fontforge: command injection via crafted filenames (CVE-2024-25081)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9306 advisory.

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

    Security Fix(es):

    * httpd: HTTP response splitting (CVE-2023-38709)

    * httpd: HTTP Response Splitting in multiple modules (CVE-2024-24795)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9098 advisory.

    The skopeo command lets you inspect images from container image registries, get images and image layers,     and use signatures to create and verify files.

    Security Fix(es):

    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9097 advisory.

    The buildah package provides a tool for facilitating building OCI container images. Among other things,     buildah enables you to: Create a working container, either from scratch or using an image as a starting     point; Create an image, either from a working container or using the instructions in a Dockerfile; Build     both Docker and OCI images.

    Security Fix(es):

    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9454 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a     panic/stack exhaustion (CVE-2024-34155)

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    * go/build/constraint: golang: Calling Parse on a // +build build tag line with deeply nested     expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

    * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library     (CVE-2024-9341)

    * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount     Instruction (CVE-2024-9407)

    * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675)

    * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause     Denial of Service (DoS) (CVE-2024-9676)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9187 advisory.

    BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and     manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.

    Security Fix(es):

    * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9136 advisory.

    Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm packages provide the user-space component for running virtual machines that     use KVM.

    Security Fix(es):

    * QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow (CVE-2024-26327)

    * QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446)

    * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure     (CVE-2024-7409)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9474 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * freeradius: forgery attack (CVE-2024-3596)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9167 advisory.

    Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

    Security Fix(es):

    * poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9122 advisory.

    X.Org is an open-source implementation of the X Window System. It provides the basic low-level     functionality that full-fledged graphical user interfaces are designed upon.

    Security Fix(es):

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)

    * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9413 advisory.

    The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach,     hciconfig, bluetoothd, l2ping, start scripts (Red Hat), and pcmcia configuration files.

    Security Fix(es):

    * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution     (CVE-2023-45866)

    * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability     (CVE-2023-27349)

    * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability     (CVE-2023-51596)

    * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)

    * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability     (CVE-2023-51592)

    * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability     (CVE-2023-51589)

    * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability     (CVE-2023-51580)

    * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)

    * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability     (CVE-2023-50230)

    * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability     (CVE-2023-50229)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9331 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c (CVE-2024-26458)

    * krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (CVE-2024-26461)

    * krb5: Memory leak at /krb5/src/kdc/ndr.c (CVE-2024-26462)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9405 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: heap-based buffer overflow vulnerability (CVE-2021-3903)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9188 advisory.

    BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in     recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes     use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities:
    kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace     language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap

    Security Fix(es):

    * bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9457 advisory.

    urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that     are missing from the Python standard libraries:
       Thread safety.
       Connection pooling.
       Client-side SSL/TLS verification.
       File uploads with multipart encoding.
       Helpers for retrying requests and dealing with HTTP redirects.
       Support for gzip, deflate, brotli, and zstd encoding.
       Proxy support for HTTP and SOCKS.
       100% test coverage.

    Security Fix(es):

    * urllib3: proxy-authorization request header is not stripped during cross-origin redirects     (CVE-2024-37891)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9190 advisory.

    Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed     with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem     of third-party libraries.  The python3.12 package provides the python3.12 executable: the reference     interpreter for the Python language, version 3. The majority of its standard library is provided in the     python3.12-libs package, which should be installed automatically along with python3.12. The remaining     parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test     packages, which may need to be installed separately.  Documentation for Python is provided in the     python3.12-docs package.  Packages containing additional libraries for Python are generally named with the     python3.12- prefix.

    Security Fix(es):

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

    * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

    * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9451 advisory.

    Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed     with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem     of third-party libraries.  The python3.12 package provides the python3.12 executable: the reference     interpreter for the Python language, version 3. The majority of its standard library is provided in the     python3.12-libs package, which should be installed automatically along with python3.12. The remaining     parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test     packages, which may need to be installed separately.  Documentation for Python is provided in the     python3.12-docs package.  Packages containing additional libraries for Python are generally named with the     python3.12- prefix.

    Security Fix(es):

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9449 advisory.

    Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid     binary on kernels without user namespaces.

    Security Fix(es):

    * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9325 advisory.

    Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network     configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line     sessions, and more.

    Security Fix(es):

    * cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option     (CVE-2024-6126)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9195 advisory.

    The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support.

    Security Fix(es):

    * cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command (CVE-2024-34055)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9424 advisory.

    The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module     (TPM) 2.0 devices from user space.

    Security Fix(es):

    * tpm2-tools:  arbitrary quote data may go undetected by tpm2_checkquote (CVE-2024-29038)

    * tpm2-tools: pcr selection value is not compared with the attest (CVE-2024-29039)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9430 advisory.

    GNU nano is a small and friendly text editor.

    Security Fix(es):

    * nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file     with a malicious symlink to a root-owned file (CVE-2024-5742)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9185 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: possible denial of service (CVE-2023-7250,ESNET-SECADV-2023-0002)

    * iperf3: vulnerable to marvin attack if the authentication option is used (CVE-2024-26306)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9114 advisory.

    GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other     objects. It provides core interface functions like switching windows, launching applications, and     notifications. It takes advantage of the capabilities of modern graphics hardware and introduces     innovative user interface concepts.

    Security Fix(es):

    * gnome-shell: code execution in portal helper (CVE-2024-36472)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9089 advisory.

    The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-     ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI     concerns itself only with network connectivity of containers and removing allocated resources when the     container is deleted.

    Security Fix(es):

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9302 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Gnus treats inline MIME contents as trusted (CVE-2024-30203)

    * emacs: LaTeX preview is enabled by default for e-mail attachments (CVE-2024-30204)

    * emacs: Org mode considers contents of remote files to be trusted (CVE-2024-30205)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9468 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9456 advisory.

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild     under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It     is compatible with composer-cli and cockpit-composer clients.

    Security Fix(es):

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9144 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkit: visiting a malicious website may lead to address bar spoofing (CVE-2023-42843)

    * webkit: heap use-after-free may lead to arbitrary code execution (CVE-2023-42950)

    * webkit: processing malicious web content may lead to a denial of service (CVE-2023-42956)

    * chromium-browser: Use after free in ANGLE (CVE-2024-4558)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9423 advisory.

    The python-dns package contains the dnslib module that implements a DNS client and additional modules that     define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.

    Security Fix(es):

    * dnspython: denial of service in stub resolver (CVE-2023-29483)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9193 advisory.

    This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in     replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython.

    Security Fix(es):

    * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9404 advisory.

    The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

    Security Fix(es):

    * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9093 advisory.

    Xwayland is an X server for running X clients under Wayland.

    Security Fix(es):

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)

    * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9333 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)

    * openssl: Excessive time spent checking DSA keys and parameters (CVE-2024-4603)

    * openssl: Use After Free with SSL_free_buffers (CVE-2024-4741)

    * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9158 advisory.

    LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or     CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer     notifications to adjacent network devices.

    Security Fix(es):

    * lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)

    * lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)

    * lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
210842	RHEL 9 : python3.11 (RHSA-2024:9450)	high
210841	RHEL 9 : grafana (RHSA-2024:9473)	critical
210840	RHEL 9 : python-jinja2 (RHSA-2024:9150)	medium
210839	RHEL 9 : pcp (RHSA-2024:9452)	medium
210838	RHEL 9 : python3.11 (RHSA-2024:9192)	high
210837	RHEL 9 : postfix (RHSA-2024:9243)	medium
210836	RHEL 9 : cups (RHSA-2024:9470)	high
210835	RHEL 9 : edk2 (RHSA-2024:9088)	medium
210834	RHEL 9 : podman (RHSA-2024:9102)	medium
210833	RHEL 9 : gtk3 (RHSA-2024:9184)	high
210832	RHEL 9 : python3.11-urllib3 (RHSA-2024:9458)	medium
210831	RHEL 9 : jose (RHSA-2024:9181)	high
210830	RHEL 9 : grafana (RHSA-2024:9115)	critical
210829	RHEL 9 : mingw-glib2 (RHSA-2024:9442)	medium
210828	RHEL 9 : fontforge (RHSA-2024:9439)	medium
210827	RHEL 9 : httpd (RHSA-2024:9306)	high
210826	RHEL 9 : skopeo (RHSA-2024:9098)	medium
210825	RHEL 9 : buildah (RHSA-2024:9097)	high
210824	RHEL 9 : podman (RHSA-2024:9454)	high
210822	RHEL 9 : bcc (RHSA-2024:9187)	low
210821	RHEL 9 : qemu-kvm (RHSA-2024:9136)	medium
210820	RHEL 9 : krb5 (RHSA-2024:9474)	critical
210819	RHEL 9 : poppler (RHSA-2024:9167)	high
210818	RHEL 9 : xorg-x11-server (RHSA-2024:9122)	high
210817	RHEL 9 : bluez (RHSA-2024:9413)	high
210816	RHEL 9 : krb5 (RHSA-2024:9331)	medium
210815	RHEL 9 : kernel (RHSA-2024:9315)	high
210814	RHEL 9 : vim (RHSA-2024:9405)	high
210813	RHEL 9 : bpftrace (RHSA-2024:9188)	low
210812	RHEL 9 : python3.12-urllib3 (RHSA-2024:9457)	medium
210811	RHEL 9 : python3.12 (RHSA-2024:9190)	high
210810	RHEL 9 : python3.12 (RHSA-2024:9451)	high
210809	RHEL 9 : bubblewrap and flatpak (RHSA-2024:9449)	critical
210808	RHEL 9 : cockpit (RHSA-2024:9325)	low
210807	RHEL 9 : cyrus-imapd (RHSA-2024:9195)	medium
210806	RHEL 9 : tpm2-tools (RHSA-2024:9424)	critical
210805	RHEL 9 : nano (RHSA-2024:9430)	medium
210804	RHEL 9 : iperf3 (RHSA-2024:9185)	medium
210803	RHEL 9 : gnome-shell and gnome-shell-extensions (RHSA-2024:9114)	medium
210802	RHEL 9 : containernetworking-plugins (RHSA-2024:9089)	high
210801	RHEL 9 : emacs (RHSA-2024:9302)	high
210800	RHEL 9 : python3.9 (RHSA-2024:9468)	high
210799	RHEL 9 : osbuild-composer (RHSA-2024:9456)	high
210798	RHEL 9 : webkit2gtk3 (RHSA-2024:9144)	critical
210797	RHEL 9 : python-dns (RHSA-2024:9423)	high
210796	RHEL 9 : python3.12-PyMySQL (RHSA-2024:9193)	medium
210795	RHEL 9 : libgcrypt (RHSA-2024:9404)	medium
210794	RHEL 9 : xorg-x11-server-Xwayland (RHSA-2024:9093)	high
210793	RHEL 9 : openssl and openssl-fips-provider (RHSA-2024:9333)	critical
210792	RHEL 9 : lldpd (RHSA-2024:9158)	critical

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

critical

medium

medium

high

medium

high

medium

medium

high

medium

high

critical

medium

medium

high

medium

high

high

low

medium

critical

high

high

high

medium

high

high

low

medium

high

high

critical

low

medium

critical

medium

medium

medium

high

high

high

high

critical

high

medium

medium

high

critical

critical