Fedora 31 : xmlsec1 (2020-9573355ff4)

Update to 1.2.29 that's required by LibreOffice 6.4. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Slackware 14.0 / 14.1 / 14.2 / current : sudo (SSA:2020-031-01)

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-031-01. The text itself is copyright C Slackware Linux...

Fedora 30 : upx (2020-20cf0743f5)

3.96, multiple security fixes. ---- Patch for CVE-2019-20021 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Debian DLA-2091-1 : libjackson-json-java security update

Several vulnerabilities were fixed in libjackson-json-java. CVE-2017-7525 Jackson Deserializer security vulnerability. CVE-2017-15095 Block more JDK types from polymorphic deserialization. CVE-2019-10172 XML external entity vulnerabilities. For Debian 8 'Jessie', these problems have been fixed in...

[SECURITY] Fedora 30 Update: nss-3.49.0-1.fc30

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0263-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905. Not...

Fedora 31 : 1:java-latest-openjdk (2020-2ed6716c30)

This is January 2020 OpenJDK security update for java-latest-openjdk packages. The sources are updated to the 13.0.2+8 tag. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0264-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905. Not...

Fedora 30 : ansible (2020-2bed89517f)

Update to bugfix release 2.9.3. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELO G-v2.9.rst Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Ubuntu 19.10 : OpenStack Keystone vulnerability (USN-4262-1)

Daniel Preussker discovered that OpenStack Keystone incorrectly handled the list credentials API. A user with a role on the project could use this issue to view any other user's credentials. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2020-011)

According to the version of the parallels-server-bm-release / vzkernel / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - Kernel: KVM: OOB memory access via mmio ring buffer. This issue is not critical for Virtuozzo 6.0, as it do...

Fedora 31 : ansible (2020-caf7f7d0d9)

Update to bugfix release 2.9.3. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELO G-v2.9.rst Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

CVE-2020-7905

Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network...

Debian DLA-2082-1 : unzip security update

An issue has been found in unzip, a de-archiver for .zip files. While processing a password protected archive, a heap-based buffer overflow could happen, that allows an attacker to perform a denial of service or to possibly achieve code execution. For Debian 8 'Jessie', this problem has been fixe...

Debian DLA-2083-1 : hiredis security update

It was discovered that there were a large number of NULL pointer dereferences due to unchecked return values from malloc and friends in hiredis, a minimalistic C client library. For Debian 8 'Jessie', these issue have been fixed in hiredis version 0.11.0-4+deb8u1. We recommend that you upgrade yo...

Juniper JSA10970

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the JSA10970 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version numbe...

FreeBSD-SA-20:02.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:02.ipsec Security Advisory The FreeBSD Project Topic: Missing IPsec anti-replay window check Category: core Module: kernel Announced: 2020-01-28 Credits:...

Fedora 31 : 1:libuv / 1:nodejs (2020-595ce5e3cc)

Update to 12.14.1 Add new subpackage nodejs-full-i18n to provide non-English locale and Unicode support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

Photon OS 3.0: Openssh PHSA-2019-3.0-0045

An update of the openssh package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0045. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 31 : community-mysql (2020-0ca47c5a7a)

MySQL 8.0.19 Release notes : https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-19.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...