Fedora: Security Advisory for nss (FEDORA-2020-16741ac7ff)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: nss-3.54.0-1.fc31

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Fedora 31 : python39 (2020-aab24d3714)

Python 3.9.0b5 update. Contains security fix for CVE-2019-20907. Full changelog. Large autogenerated modules pydocdata and several encodings are now present as pyc optimization 0 files only. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 31 : python38 (2020-bb919e575e)

Python 3.8.5 security update. Contains security fix fro CVE-2019-20907. Full changelog. ---- Security fix for CVE-2020-14422 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clea...

Fedora 32 : systemd (2020-2faf839786)

Contains a bunch of patches for the assorted linked bugzillas. Handling of user names that resemble numerical uids is tightened CVE-2020-13776. The hardware database is updated to the upstream version. Note that Tenable Network Security has extracted the preceding description block directly from...

EulerOS 2.0 SP8 : ant (EulerOS-SA-2020-1794)

According to the version of the ant packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several...

EulerOS 2.0 SP8 : ntp (EulerOS-SA-2020-1817)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet...

Debian DLA-2295-1 : curl security update

A vulnerbailty was found in curl, a command line tool for transferring data with URL syntax. When using when using -J --remote-header-name and -i --include in the same command line, a malicious server could force curl to overwrite the contents of local files with incoming HTTP headers. For Debian...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2077-1)

This update for grub2 fixes the following issues : CVE-2020-10713 bsc1168994 CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 CVE-2020-15706 bsc1174463 CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expression for buffer allocations may...

Fedora 31 : golang (2020-d75360e2b0)

Rebase to go1.13.14 - Security fix for CVE-2020-15586 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2074-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

SUSE SLES15 Security Update : grub2 (SUSE-SU-2020:2073-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2078-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

Photon OS 1.0: Mysql PHSA-2020-1.0-0309

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0309. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139049...

Mozilla Network Security Services Information Disclosure Vulnerability (CNVD-2020-43765)

Mozilla Network Security Services NSS is a library of functions Network Security Services library from the Mozilla Foundation in the United States. The product provides cross-platform support for SSL, S/MIME and other Internet security standards. A security vulnerability exists in Mozilla Network...

Attackers Exploiting High-Severity Network Security Flaw, Cisco Warns

Cisco is warning that a high-severity flaw in its network security software is being actively exploited – allowing remote, unauthenticated attackers to access sensitive data. Patches for the vulnerability CVE-2020-3452 in question, which ranks 7.5 out of 10 on the CVSS scale, were released last...

Mozilla Network Security Service (NSS): Information disclosure

Background The Mozilla Network Security Service NSS is a library implementing security features like SSL v.2/v.3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME and X.509 certificates. Description NSS was found to not always perform constant-time operations when working with DSA key material. Impa...

Fact vs. Fiction: 10 Endpoint Security Myths Debunked

Simply defined, endpoint security protects desktops, laptops, servers, and fixed-function devices from malicious internal and external threats. Endpoint security combines various threat detection, response and prevention technologies to help organizations disrupt cyberattacks. Despite the clear-c...

Cisco Network Security Flaw Leaks Sensitive Data

A high-severity vulnerability in Cisco’s network security software could lay bare sensitive data – such as WebVPN configurations and web cookies – to remote, unauthenticated attackers. The flaw exists in the web services interface of Cisco’s Firepower Threat Defense FTD software, which is part of...

CVE-2020-6514

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream...