Debian DLA-1924-1 : python3.4 security update

A vulnerability was discovered in Python, an interactive high-level object-oriented language. CVE-2019-16056 The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a...

EulerOS Virtualization for ARM 64 3.0.2.0 : libosinfo (EulerOS-SA-2019-1952)

According to the version of the libosinfo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations,...

EulerOS Virtualization for ARM 64 3.0.2.0 : python (EulerOS-SA-2019-1934)

According to the version of the python packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3,...

Debian DLA-1922-1 : wpa security update

hostapd and wpasupplicant when controlling AP mode did not perform sufficient source address validation for some received Management frames and this could result in ending up sending a frame that caused associated stations to incorrectly believe they were disconnected from the network even if...

EulerOS 2.0 SP2 : java-1.7.0-openjdk (EulerOS-SA-2019-1846)

According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJDK: Incomplete enforcement of the trustURLCodebase restriction CVE-2018-3149 - OpenJDK: Leak of sensitive header data via HTTP...

Fedora 30 : kmplayer (2019-9b1da08d62)

Update to 0.12.0b - Clean up SPEC - Remove patches - Use sed for make Phonon default - Use KF5 instead of KDE4 - Renew URLs - CVE-2019-9133 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 30 : sphinx (2019-9231a18768)

Security fix for CVE-2019-14511 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

EulerOS 2.0 SP5 : openssh (EulerOS-SA-2019-1908)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle...

EulerOS 2.0 SP5 : openldap (EulerOS-SA-2019-1914)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for...

Debian DLA-1917-1 : curl security update

It was discovered that there was a heap buffer overflow vulnerability in curl, the library and command-line tool for transferring data over the internet. For Debian 8 'Jessie', this issue has been fixed in curl version 7.38.0-4+deb8u16. We recommend that you upgrade your curl packages. NOTE:...

Astaroth Spy Trojan Uses Facebook, YouTube Profiles to Cover Tracks

Facebook and YouTube profiles are at the heart of an ongoing phishing campaign spreading the Astaroth trojan, bent on the eventual exfiltration of sensitive information. The attack is sophisticated in that it uses normally trusted sources as cover for malicious activities – thus evading usually...

Shodan-Eye - Tool That Collects All The Information About All Devices Directly Connected To The Internet Using The Specified Keywords That You Enter

This tool collects all information about all devices that are directly connected to the internet with the specified keywords that you enter. This way you get a complete overview. The types of devices that are indexed can vary enormously: from small desktops, refrigerators to nuclear power plants...

Fedora 29 : cobbler (2019-cd24f60a94)

Update to 2.5.0 pre-release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Photon OS 2.0: Binutils PHSA-2019-2.0-0173

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0173. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Expat PHSA-2019-3.0-0026

An update of the expat package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0026. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid128730...

Debian DLA-1914-1 : icedtea-web security update

Several security vulnerabilities were found in icedtea-web, an implementation of the Java Network Launching Protocol JNLP. CVE-2019-10181 It was found that in icedtea-web executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this fl...

Microsoft Edge Chakra Scripting Engine CVE-2019-1300 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2019:2336-1)

This update for java-171-ibm fixes the following issues : Update to Java 7.1 Service Refresh 4 Fix Pack 50. Security issues fixed : CVE-2019-11771: IBM Security Update July 2019 bsc1147021 CVE-2019-11775: IBM Security Update July 2019 bsc1147021 CVE-2019-4473: IBM Security Update July 2019...

Fedora 29 : qt5-qtwebengine (2019-5e4316109b)

Update to latest qtwebengine release, includes bug and security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 30 : pdfresurrect (2019-e01bc28777)

Security fix for CVE-2019-14267 - Security fix for CVE-2019-14934 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...