RHEL 6 : java-1.7.0-oracle (RHSA-2018:1206)

An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Oracle Linux 6 : patch (ELSA-2018-1199)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1199 advisory. 2.6-8 - Fixed year overflow detected in rpmdiff 2.6-7 - Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands Tenable has...

RHEL 6 : patch (RHSA-2018:1199)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1199 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to...

Important: Red Hat Security Advisory: java-1.6.0-sun security update

An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2018-1188)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1188 advisory. 1:1.8.0.171-3.b10 - Cleanup from previous commit. - Resolves: rhbz1559766 1:1.8.0.171-2.b10 - Backported from fedora: aarch64BuildFailure.patch,...

RHEL 6 : java-1.8.0-openjdk (RHSA-2018:1188)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Solaris 10 (sparc) : 152077-91

JavaSE 6: update 191 patch equivalent to. Date this patch was last updated by Sun : Apr/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid109073; scriptversion"1.5";...

Solaris 10 (x86) : 152078-91

JavaSE 6x86: update 191 patch equivalent. Date this patch was last updated by Sun : Apr/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid109078; scriptversion"1.5";...

Solaris 10 (x86) : 152079-91

JavaSE 6x86: update 191 patch equivalent. Date this patch was last updated by Sun : Apr/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid109079; scriptversion"1.5";...

Heap overflow

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

RHEL 6 : python-paramiko (RHSA-2018:1124)

An update for python-paramiko is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Oracle Linux 6 : firefox (ELSA-2018-1098)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1098 advisory. 52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update...

Oracle Linux 6 : python-paramiko (ELSA-2018-1124)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1124 advisory. - Add a fix for upstream tests for CVE-2018-7750 broken in previous. Tenable has extracted the preceding description block directly from the Oracle Linux securi...

RHEL 6 : python-paramiko (RHSA-2018:1125)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1125 advisory. - python-paramiko: Authentication bypass in transport.py CVE-2018-7750 Note that Nessus has not tested for this issue but has instead relied only on...

RHEL 6 : flash-plugin (RHSA-2018:1119)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1119 advisory. - flash-plugin: Remote Code Execution vulnerabilities APSB18-08 CVE-2018-4932, CVE-2018-4935, CVE-2018-4937 - flash-plugin: Information...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4062)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4062 advisory. - fork: fix incorrect fput of -exefile causing use-after-free Eric Biggers Orabug: 27290198 CVE-2017-17052 - KVM: x86: fix singlestepping over...

RHEL 6 : firefox (RHSA-2018:1098)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1098 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to versi...

Debian DSA-4170-1 : pjproject - security update

Multiple vulnerabilities have been discovered in the PJSIP/PJProject multimedia communication which may result in denial of service during the processing of SIP and SDP messages and ioqueue keys. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CentOS 6 : libvorbis (CESA-2018:0649)

An update for libvorbis is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Threat Outbreak Alert RuleID32403: Email Messages Distributing Malicious Software on April 6, 2018

Medium Alert ID: 57438 First Published: 2018 April 9 19:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32403 may contain the following files: Name | Siz...