SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2020:1551-1)

This update for vim fixes the following issues : CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces bsc1172225. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : qemu (SUSE-SU-2020:1526-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code bsc1166240. CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation bsc1146873. CVE-2020-1983: Fixed a use-after-free in the ipreass...

SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2020:1553-1)

This update for libexif to 0.6.22 fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in...

SUSE SLES12 Security Update : libexif (SUSE-SU-2020:1534-1)

This update for libexif fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2020:1571-1)

This update for java-170-openjdk to version 7u261 fixes the following issues : CVE-2020-2756: Better mapping of serial ENUMs bsc1169511 CVE-2020-2757: Less Blocking Array Queues bsc1169511 CVE-2020-2773: Better signatures in XML bsc1169511 CVE-2020-2781: Improve TLS session handling bsc1169511...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2020:1623-1)

This update for nodejs6 fixes the following issues : CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype bsc1166916. Note that Tenable Network...

SUSE SLES12 Security Update : adns (SUSE-SU-2020:1612-1)

This update for adns fixes the following issues : CVE-2017-9103,CVE-2017-9104,CVE-2017-9105,CVE-2017-9109: Fixed an issue in local recursive resolver which could have led to remote code execution bsc1172265. CVE-2017-9106: Fixed an issue with upstream DNS data sources which could have led to deni...

SUSE SLED15 / SLES15 Security Update : texlive-filesystem (SUSE-SU-2020:1580-1)

This update for texlive-filesystem fixes the following issues : Security issues fixed : CVE-2020-8016: Fixed a race condition in the spec file bsc1159740. CVE-2020-8017: Fixed a race condition on a cron job bsc1158910. Note that Tenable Network Security has extracted the preceding description blo...

USN-4397-2 nss vulnerability

USN-4397-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Cesar Pereida Garcia discovered that NSS incorrectly handled DSA key generation. A local attacker could possibly use this issue to perform a...

EulerOS 2.0 SP2 : openslp (EulerOS-SA-2020-1655)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the...

Fedora 32 : kernel / kernel-headers (2020-e47d28bc2b)

The 5.6.18 stable kernel update contains a number of important fixes across the tree. ---- The 5.6.17 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1475-1)

This update for the Linux Kernel 3.12.74-6064115 fixes several issues. The following security issues were fixed : CVE-2020-12653: Fixed a buffer overflow in mwifiexcmdappendvsietlv which could have allowed local users to gain privileges or cause a denial of service bsc1171254. CVE-2020-12654: Fix...

EulerOS 2.0 SP2 : ruby (EulerOS-SA-2020-1686)

According to the version of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation...

EulerOS 2.0 SP2 : libvncserver (EulerOS-SA-2020-1683)

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large heigh...

EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2020-1621)

According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows...

EulerOS 2.0 SP2 : dom4j (EulerOS-SA-2020-1677)

According to the version of the dom4j package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - dom4j before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external...

SUSE SLES12 Security Update : mariadb-connector-c (SUSE-SU-2020:1431-1)

This update for mariadb-connector-c fixes the following issues : Security issue fixed : CVE-2020-13249: Fixed an improper validation of OK packets received from clients bsc1171550. Non-security issues fixed : Update to release 3.1.8 bsc1171550 - CONC-304: Rename the static library to libmariadb.a...

Fedora 32 : python-httplib2 (2020-a7a15a9687)

Fix for CVE-2020-11078 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

SUSE SLED15 / SLES15 Security Update : libxslt (SUSE-SU-2020:1409-1)

This update for libxslt fixes the following issues : Security issues fixed : CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095...

Fedora 31 : 4:perl (2020-fd73c08076)

Fixed CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...