Debian DLA-1670-1 : ghostscript security update

Tavis Ormandy discovered a vulnerability in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed despite the -dSAFER sandbox being enabled. For Debian 8 'Jessie', this problem has been...

Microsoft Edge Chakra Scripting Engine CVE-2019-0607 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

Fedora 29 : ghostscript (2019-077a3f23c0)

rebase to latest upstream version 9.26 - Security fix for CVE-2018-19478 CVE-2018-19134 CVE-2018-19477 CVE-2018-19476 CVE-2018-19475 CVE-2018-19409 CVE-2018-18284 CVE-2018-18073 CVE-2018-17961 Note that Tenable Network Security has extracted the preceding description block directly from the...

Microsoft Edge CVE-2019-0649 Remote Privilege Escalation Vulnerability

Description Microsoft Edge is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft ChakraCore Microsoft Edge Recommendations Block external access at the network boundary, unless external parties...

What you can learn from Cisco Talos’ new oil pumpjack workshop

Paul Rascagneres wrote this blog post with contributions from Patrick DeSantis from Cisco Talos ARES Advanced Research/Embedded Systems. Executive summary Every day, more industrial control systems ICS become vulnerable to cyber attacks. As these massive, critical machines become more...

Debian DLA-1669-1 : libreoffice security update

Alex Infuehr discovered a directory traversal vulnerability which could result in the execution of Python script code when opening a malformed document. For Debian 8 'Jessie', this problem has been fixed in version 1:4.3.3-2+deb8u12. We recommend that you upgrade your libreoffice packages. NOTE:...

Fedora 29 : slurm (2019-e66b1889ec)

Closes security issue CVE-2019-6438 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Fedora 28 : phpMyAdmin (2019-6cfd17b03d)

Upstream announcement: Security fix: phpMyAdmin 4.8.5 is released The phpMyAdmin team announces the release of phpMyAdmin version 4.8.5. Among other bug fixes, this contains several important security fixes. Upgrading is highly recommended for all users. The security fixes involve : - Arbitrary...

Fedora 28 : buildbot (2019-7eb8c71fe8)

Update to 1.8.1 to fix CVE-2019-7313 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

OSSEC/Wazuh ossec-authd Service Detection (TCP)

TCP based detection of a OSSEC/Wazuh ossec-authd service. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-1672

CVE-2019-1672 describes a vulnerability in the Cisco Web Security Appliance (WSA) where the Decryption Policy Default Action handling allows an unauthenticated, remote attacker to bypass a configured drop policy and permit SSL traffic that should have been denied. The root cause is the incorrect ...

Debian DLA-1667-1 : dovecot security update

It was discovered that there was a vulnerability in the dovecot IMAP/POP3 server. A flaw in the TLS username handling could lead to an attacker logging in as anyone else in the system if both authsslrequireclient,usernamefromcert were enabled. For Debian 8 'Jessie', this issue has been fixed in...

Protecting your Domain Names: Taking the First Steps

Everyone and everything on the Internet depends on the Domain Name System DNS being functional. The DNS has been a common vector for attacks in recent years, and 2019 seems to be no different. Many of these attacks have goals far more sinister than simply taking a company offline or defacing a...

Photon OS 1.0: Linux PHSA-2017-0019

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0019. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121698;...

Debian DLA-1654-1 : libav security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2014-8542 libavcodec/utils.c omitted a certain codec ID during enforcement of alignment, which allowed remote attackers to cause a denial of ervice out-of-bounds access or possibly...

Photon OS 1.0: Linux PHSA-2018-1.0-0097

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121797...

Photon OS 1.0: Linux PHSA-2018-1.0-0151

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0151. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121851...

Photon OS 2.0: Openssl PHSA-2018-2.0-0078

An update of the openssl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0078. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Linux PHSA-2017-0049

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121767;...

Photon OS 1.0: Linux PHSA-2017-0025

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0025. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121716;...