Fedora 32 : drupal7 (2020-11be4b36d4)

Security fix for https://www.drupal.org/sa-core-2020-002 and https://www.drupal.org/sa-core-2020-003 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much ...

Fedora 31 : 32:bind / bind-dyndb-ldap / dnsperf (2020-f9dcd4e9d5)

Latest minor release with security updates. - Upstream release notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 32 : 1:wireshark (2020-4f5588cf97)

New version 3.2.4, enabled build with androiddump. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....

Fedora 32 : firefox (2020-6c340484e5)

New upstream version 77.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 32 : slurm (2020-e95ef17134)

Bug fix and security fix for CVE-2020-12693 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

CVE-2020-3222

Cisco IOS XE Software Web UI contains an unauthenticated proxy service at a specific UI endpoint. The vulnerability allows an adjacent, unauthenticated attacker to bypass access controls by proxying requests through the management network, with the proxy reachable via the management VRF. Remediat...

Code injection

IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997...

CVE-2020-4307

CVE-2020-4307 affects IBM Security Guardium 11.1. The IBM bulletin documents an Improper Access Control vulnerability allowing an attacker on the same network to gain access to the Solr dashboard and cause a denial of service. CVSS base score 6.5 (Medium) with high impact on availability. A remed...

CVE-2020-10136

CVE-2020-10136 concerns the IP Encapsulation within IP (IPIP) decapsulation path that decapsulates and routes IP-in-IP traffic without validation of the source network packets, enabling spoofing and potential access-control bypass and other unexpected behavior. The NVD entry assigns a MEDIUM seve...

Fedora 31 : ant (2020-52741b0a49)

Update to version 1.10.8. Resolves: CVE-2020-1945 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. ...

Fedora 31 : sympa (2020-9b6c969aac)

Update to sympa 6.2.56. Fixes CVE-2020-10936. For details, see : - https://github.com/sympa-community/sympa/releases/tag/6.2.56 - https://sympa-community.github.io/security/2020-002.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora upda...

Debian DLA-2232-1 : python-httplib2 security update

In httplib2, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper...

Debian DLA-2231-1 : sane-backends security update

Remote denial of service and several memory management issues were fixed in the epson2 driver. For Debian 8 'Jessie', this problem has been fixed in version 1.0.24-8+deb8u3. We recommend that you upgrade your sane-backends packages if you are using the epson2 driver. NOTE: Tenable Network Securit...

Debian DLA-2226-1 : gst-plugins-ugly0.10 security update

Two memory management issues were found in the asfdemux element of the GStreamer 'ugly' plugin collection, which can be triggered via a maliciously crafted file. For Debian 8 'Jessie', these problems have been fixed in version 0.10.19-2.1+deb8u1. We recommend that you upgrade your...

Fedora 31 : 1:dovecot (2020-b60344c987)

CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn't start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2019-11729, CVE-2019-11745)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerabilities. Mozilla Firefox is vulnerable to a denial of service and Mozilla Network Security Services NSS, as used in Mozilla Firefox could allow a remote attacker to execut...

VLC < 2.2.9 Type Conversion Vulnerability

The version of VLC media player installed on the remote host is earlier than 2.2.9. It is, therefore, affected by a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and ...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openjpeg2 Vulnerability (NS-SA-2020-0026)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openjpeg2 packages installed that are affected by a vulnerability: - opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue th...

Fedora 30 : netdata (2020-c807d02b1f)

Exclude arch s390x on el8 ---- Update from upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Telnetd - Remote Code Execution (CVE-2020-10188)

A buffer overflow condition exists in telnetd due to incorrect bounds checks in the services handling of short writes and urgent data. An unauthenticated, remote attacker can exploit this, via specially crafted telnet packets, to execute arbitrary code on the remote server. C Tenable Network...