Category Archives: Advisories

[R1] Tenable.sc 5.22.0 Fixes One Third-Party Vulnerability

Read Time:29 Second

[R1] Tenable.sc 5.22.0 Fixes One Third-Party Vulnerability
Arnie Cabral
Wed, 07/27/2022 – 18:26

Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components (moment.js) was found to contain vulnerabilities, and updated versions have been made available by the providers.

Out of caution, and in line with best practice, Tenable has upgraded the bundled components to address the potential impact of these issues. Tenable.sc 5.22.0 updates moment.js to version 2.29.4 to address the identified vulnerabilities.

Read More

grafana-9.0.5-1.fc37

Read Time:26 Second

FEDORA-2022-047d3845db

Packages in this update:

grafana-9.0.5-1.fc37

Update description:

Automatic update for grafana-9.0.5-1.fc37.

Changelog

* Wed Jul 27 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.5-1
– update to 9.0.5 tagged upstream community sources, see CHANGELOG (rhbz#2107413)
– run integration tests in check phase
– remove conditional around go-rpm-macros
– resolve CVE-2022-31107 grafana: OAuth account takeover (rhbz#2107435)
– resolve CVE-2022-31097 grafana: stored XSS vulnerability (rhbz#2107436)

Read More