Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2022.0067
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2022-0067)
Zusammenfassung:	The remote host is missing an update for the 'phoronix-test-suite' package(s) announced via the MGASA-2022-0067 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'phoronix-test-suite' package(s) announced via the MGASA-2022-0067 advisory. Vulnerability Insight: phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). (CVE-2022-0157) phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF). (CVE-2022-0196, CVE-2022-0197, CVE-2022-0238) Affected Software/OS: 'phoronix-test-suite' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-0157 https://huntr.dev/bounties/2c0fe81b-0977-4e1e-b5d8-7646c9a7ebbd https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BU7E6OOZCXS3ZWHOQ2AR7MKM56IN2R6R/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/57V2CSFU5MKWKL6RJUKMXSD4PCRFTMMQ/ https://github.com/phoronix-test-suite/phoronix-test-suite/commit/56fd0a3b69fb33c1c90a6017ed735889aaa59486 Common Vulnerability Exposure (CVE) ID: CVE-2022-0196 https://huntr.dev/bounties/3675eec7-bbce-4dfd-a2d3-d6862dce9ea6 https://github.com/phoronix-test-suite/phoronix-test-suite/commit/4f18296a1862fe54a4c58701a1f5ec6bd62a4d94 Common Vulnerability Exposure (CVE) ID: CVE-2022-0197 https://huntr.dev/bounties/5abb7915-32f4-4fb1-afa7-bb6d8c4c5ad2 Common Vulnerability Exposure (CVE) ID: CVE-2022-0238 https://huntr.dev/bounties/63f24b24-4af2-47b8-baea-7ad5f4db3633 https://github.com/phoronix-test-suite/phoronix-test-suite/commit/5755b3bf979cd04caa6feee07e403a5be5ac320e
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.