Ubuntu 16.04 ESM : X.Org X Server vulnerabilities (USN-5193-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5193-2 advisory. USN-5193-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

[SECURITY] [DLA 2898-1] nss security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2898-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 25, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2894-1] aide security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2894-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 24, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2894-1 : aide - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2894 advisory. David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be triggered via large...

[SECURITY] [DLA 2895-1] qt4-x11 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2895-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 24, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2895-1 : qt4-x11 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2895 advisory. - Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend called from QPainterPath::addPath...

[SECURITY] [DLA 2893-1] pillow security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2893-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 23, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2893-1 : pillow - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2893 advisory. - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow before 9.0.0 has a buffer...

Debian DLA-2892-1 : golang-1.7 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2892 advisory. Several vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service DoS and information leak. CVE-2021-33196 In...

Ubuntu 18.04 LTS / 20.04 LTS : USBView vulnerability (USN-5249-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5249-1 advisory. It was discovered that USBView allowed unprivileged users to run usbview as root. A local attacker could use this vulnerability to gain administrative...

Debian DLA-2891-1 : golang-1.8 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2891 advisory. Several vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service DoS and information leak. CVE-2021-33196 In...

[SECURITY] [DLA 2892-1] golang-1.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2892-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler January 21, 2022 https://wiki.debian.org/LTS -...

USN-5249-1: USBView vulnerability

It was discovered that USBView allowed unprivileged users to run usbview as root. A local attacker could use this vulnerability to gain administrative privileges or cause a denial of service...

Ubuntu 16.04 ESM : curl vulnerability (USN-5021-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5021-2 advisory. USN-5021-1 fixed vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 16.04 ESM. Tenable has extracted the preceding...

Ubuntu 18.04 LTS : QtSvg vulnerabilities (USN-5241-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5241-1 advisory. It was discovered that QtSvg incorrectly handled certain malformed SVG images. If a user or automated system were tricked into opening a specially crafte...

Debian DLA-2887-1 : lighttpd - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2887 advisory. - An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias...

Debian DLA-2879-1 : ghostscript - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2879 advisory. - Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 - Ghostscript...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-5235-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5235-1 advisory. It was discovered that Ruby incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a crash...

Debian DLA-2886-1 : slurm-llnl - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2886 advisory. Multiple security issues were discovered in the Simple Linux Utility for Resource Management SLURM, a cluster resource management and job scheduling system, which...

Debian DLA-2882-1 : sphinxsearch - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2882 advisory. - SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL...