Fedora 33 : freetype (2020-768b1690f8)

Update to freetype 2.10.4 which fixes security flaw CVE-2020-15999. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CentOS 7 : unoconv (RHSA-2020:3944)

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3944 advisory. - The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CVE-2019-17400 Note that Nessus has not tested for th...

GLSA-202009-13 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202009-13 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

FreeBSD : samba -- Unauthenticated domain takeover via netlogon (24ace516-fad7-11ea-8d8c-005056a311d1)

The Samba Team reports : An unauthenticated attacker on the network can gain administrator access by exploiting a netlogon protocol flaw. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020...

GLSA-202009-10 : PHP: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-10 PHP: Denial of service It was discovered that PHP did not properly handle PHAR files. Impact : A remote attacker could entice a user to open a specially crafted PHAR file using PHP, possibly allowing attacker to obtain...

FreeBSD : gnupg -- AEAD key import overflow (f9fa7adc-ee51-11ea-a240-002590acae31)

Importing an OpenPGP key having a preference list for AEAD algorithms will lead to an array overflow and thus often to a crash or other undefined behaviour. Importing an arbitrary key can often easily be triggered by an attacker and thus triggering this bug. Exploiting the bug aside from crashes ...

Photon OS 1.0: Nodejs PHSA-2020-1.0-0312

An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0312. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13950...

Fedora 32 : mingw-curl (2020-ad05132742)

Major update includes security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Photon OS 2.0: Linux PHSA-2020-2.0-0266

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0266. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139075...

Photon OS 3.0: Apache PHSA-2020-3.0-0114

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0114. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138812;...

openSUSE Security Update : google-compute-engine (openSUSE-2020-996)

This update for google-compute-engine fixes the following issues : - Don't enable and start google-network-daemon.service when it's already installed bsc1169978 + Do not add the created user to the adm CVE-2020-8903, docker CVE-2020-8907, or lxd CVE-2020-8933 groups if they exist bsc1173258 This...

Photon OS 3.0: Python PHSA-2020-3.0-0109

An update of the python package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0109. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138188;...

Amazon Linux AMI : rubygem-rake (ALAS-2020-1384)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1384 advisory. There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. CVE-2020-8130 Tenable has extracted the preceding...

Fedora 32 : mingw-sane-backends (2020-b845771719)

https://gitlab.com/sane-project/backends/-/releases Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 31 : mingw-glib-networking (2020-cadbc5992f)

Security fix for CVE-2020-13645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

GLSA-202006-12 : GNU Mailutils: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202006-12 GNU Mailutils: Privilege escalation GNU Mailutils runs maidag by default with setuid root permissions. Impact : An attacker can use this to write to arbitrary files as root. Workaround : There is no known workaround at...

Photon OS 1.0: Json PHSA-2020-1.0-0298

An update of the json package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0298. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137320;...

Photon OS 2.0: Linux PHSA-2020-2.0-0251

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0251. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137195...

Photon OS 3.0: Linux PHSA-2020-3.0-0100

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0100. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137190;...

VLC < 2.0.9 DoS

An exploitable denial of service vulnerability exists in VideoLAN VLC Media Player 2.0.8 and earlier. Allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file. C Tenable Network Security, Inc. include'compat.inc'; if...