EulerOS 2.0 SP3 : java-1.7.0-openjdk (EulerOS-SA-2019-1299)

According to the version of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenJDK: memory disclosure in FileChannelImpl Libraries, 8206290 CVE-2019-2422 Note that Tenable Network Security has extracted the...

Malware Infests Popular Pirate Streaming Hardware

You get what you pay for when you pirate content. That’s the takeaway from the latest report by Digital Citizens Alliance. It found that pirating hardware, which enables free streaming copyright-protected content, comes packed with malicious malware. The devices give criminals easy access to rout...

ALPINE-CVE-2018-12384

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3...

Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2019-116-01)

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-116-01. The text itself is copyright C Slackware Linux...

Fedora 28 : php-symfony (2019-3ee6a7adf2)

Version 2.8.50 2019-04-17 - security cve-2019-10910 DI Check service IDs are valid nicolas-grekas - security cve-2019-10909 FrameworkBundleForm Fix XSS issues in the form theme of the PHP templating engine stof - security cve-2019-10912 PHPUnit Bridge Prevent destructors with side-effects from...

Fedora 29 : python-jinja2 (2019-04a42e480b)

Security fix for CVE-2019-10906. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 28 : python-jinja2 (2019-4f978cacb4)

Security fix for CVE-2019-10906. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1033-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel bsc1130330. CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage bsc1131317. CVE-2019-7175: Fixed multiple memory leaks in DecodeImag...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:1038-1)

This update for wireshark to version 2.4.14 fixes the following issues : Security issues fixed : CVE-2019-10895: NetScaler file parser crash. CVE-2019-10899: SRVLOC dissector crash. CVE-2019-10894: GSS-API dissector crash. CVE-2019-10896: DOF dissector crash. CVE-2019-10901: LDSS dissector crash...

Debian DLA-1764-1 : mercurial security update

It was discovered that there was a path traversal vulnerability in the 'mercurial' distributed revision version control system. Symbolic links and subrepositories could be used defeat Mercurial's path-checking logic and write files outside the repository root. For Debian 8 'Jessie', this issue ha...

Debian DLA-1765-1 : gpac security update

Several issues have been found for gpac, an Open Source multimedia framework. Using crafted files one can trigger buffer overflow issues that could be used to crash the application. For Debian 8 'Jessie', these problems have been fixed in version 0.5.0+svn5324dfsg1-1+deb8u3. We recommend that you...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2019:1036-1)

This update for wireshark to version 2.4.14 fixes the following issues : Security issues fixed : CVE-2019-10895: NetScaler file parser crash. CVE-2019-10899: SRVLOC dissector crash. CVE-2019-10894: GSS-API dissector crash. CVE-2019-10896: DOF dissector crash. CVE-2019-10901: LDSS dissector crash...

Fedora 29 : kernel / kernel-headers / kernel-tools (2019-1e8a4c6958)

The 5.0.9 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Debian DLA-1763-1 : putty security update

Multiple vulnerabilities were found in the PuTTY SSH client, which could result in denial of service and potentially the execution of arbitrary code. In addition, in some situations random numbers could potentially be re-used. For Debian 8 'Jessie', these problems have been fixed in version...

Ping Identity: Internal Hostname disclosure from multiple Apache servers via blank host header method

This vulnerability was due to a general misconfiguration of Apache servers; this is a good example of the importance of "Secure Defaults" in open-source projects. An example of a generic request and response would be: openssl sclient -connect apache.example.com:443 GET apache.example.com/foo...

Fedora 28 : hostapd (2019-d03bae77f5)

Update to version 2.7 from upstream Security fix for CVE-2019-9494 cache attack against SAE Security fix for CVE-2019-9495 cache attack against EAP-pwd Security fix for CVE-2019-9496 SAE confirm missing state validation in hostapd/AP Security fix for CVE-2019-9497 EAP-pwd server not checking for...

Fedora 28 : znc (2019-64ed5e4dfa)

Fixes CVE-2019-9917 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...

Fedora 29 : freeradius (2019-9667df8350)

Update to FreeRADIUS Server 3.0.19-1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

CVE-2019-2664

CVE-2019-2664 affects Oracle E-Business Suite, Oracle Marketing Administration subcomponent. Affected versions include 12.1.1–12.2.8; vulnerability allows unauthenticated, network-accessible HTTP exploitation with user interaction to gain access to Oracle Marketing data and perform unauthorized u...

Fedora 29 : egl-wayland / elementary-camera / elementary-code / etc (2019-27e7b92407)

This update fixes a bug in the Meson build system which caused binaries and libraries to incorrectly be marking as requiring an executable stack. This makes them more vulnerable to security issues, and also can result in errors caused by SELinux denials. This update also provides rebuilds of all...