# Fedora Extra Packages for Enterprise Linux.

Every CVE that names Fedora Extra Packages for Enterprise Linux among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)](https://agentprime.io/advisories/CVE-2023-4255.md)
  `CVE-2023-4255` · CVE record: w3m and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Dec 2023 · Tags: Memory corruption
- [Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c](https://agentprime.io/advisories/CVE-2023-4256.md)
  `CVE-2023-4256` · CVE record: tcpreplay and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Dec 2023 · Tags: Memory corruption
- [Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp](https://agentprime.io/advisories/CVE-2023-3430.md)
  `CVE-2023-3430` · CVE record: OpenImageIO and 2 more · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2023 · Tags: Memory corruption
- [Memory leak on tls connections](https://agentprime.io/advisories/CVE-2022-4132.md)
  `CVE-2022-4132` · CVE record: jss and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service
- [G_variant_byteswap() can take a long time with some non-normal inputs](https://agentprime.io/advisories/CVE-2023-32611.md)
  `CVE-2023-32611` · CVE record: glib2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service
- [Gvariant offset table entry size is not checked in is_normal()](https://agentprime.io/advisories/CVE-2023-29499.md)
  `CVE-2023-29499` · CVE record: glib2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service
- [Gvariant deserialisation does not match spec for non-normal data](https://agentprime.io/advisories/CVE-2023-32665.md)
  `CVE-2023-32665` · CVE record: glib2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service
- [Dma reentrancy issue (incomplete fix for cve-2021-3750)](https://agentprime.io/advisories/CVE-2023-2680.md)
  `CVE-2023-2680` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2023 · Tags: Memory corruption
- [Triggerable assertion due to race condition in hot-unplug](https://agentprime.io/advisories/CVE-2023-3301.md)
  `CVE-2023-3301` · CVE record: qemu and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service
- [Out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4135.md)
  `CVE-2023-4135` · CVE record: qemu-kvm and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: Memory corruption
- [Heap buffer overflow in virtio_crypto_sym_op_helper()](https://agentprime.io/advisories/CVE-2023-3180.md)
  `CVE-2023-3180` · CVE record: qemu and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption
- [Qemu: 9pfs: suid/sgid bits not dropped on file write](https://agentprime.io/advisories/CVE-2023-1386.md)
  `CVE-2023-1386` · CVE record: qemu and 4 more · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-281
- [W3m: out of bounds read in growbuf_to_str() at w3m/indep.c](https://agentprime.io/advisories/CVE-2023-38253.md)
  `CVE-2023-38253` · CVE record: w3m and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption
- [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md)
  `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption
- [Heap-buffer-overflow in src/formats_i.c](https://agentprime.io/advisories/CVE-2023-34432.md)
  `CVE-2023-34432` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption
- [Heap-buffer-overflow in src/hcom.c](https://agentprime.io/advisories/CVE-2023-34318.md)
  `CVE-2023-34318` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption
- [Floating point exception in src/voc.c](https://agentprime.io/advisories/CVE-2023-32627.md)
  `CVE-2023-32627` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077
- [Floating point exception in src/aiff.c](https://agentprime.io/advisories/CVE-2023-26590.md)
  `CVE-2023-26590` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=fedora-extra-packages-for-enterprise-linux>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/fedora-extra-packages-for-enterprise-linux/>. Everything for agents: <https://agentprime.io/llms.txt>.