Fedora 29 : buildbot (2019-2ea119f414)

Update to 1.8.2 to fix CVE-2019-12300. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

SUSE SLED12 Security Update : LibreOffice (SUSE-SU-2019:1448-1)

This update for libreoffice and libraries fixes the following issues : LibreOffice was updated to 6.2.3.2 fate327121 bsc1128845 bsc1123455, bringing lots of bug and stability fixes. Additional bugfixes : If there is no firebird engine we still need java to run hsqldb bsc1135189 PPTX: Rectangle...

Sql injection

An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST paramet...

CVE-2018-10693

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is...

CVE-2018-10697

An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST paramet...

CVE-2018-10697

The CVE-2018-10697 entry affects Moxa AWK-3121 (firmware 1.14). The vulnerability is a command injection in the POST parameter srvName exposed via the device’s ping functionality, allowing an attacker to craft input with shell metacharacters and execute commands on the device. Reported as impacti...

CVE-2018-10693

CVE-2018-10693 affects Moxa AWK-3121 (version 1.14). The vulnerability is a buffer overflow in the srvName POST parameter within the device’s ping/diagnostic capability, where craft­ing a string of 516 characters can allow an attacker to execute arbitrary commands on the device. Multiple connecte...

CVE-2018-20014

CVE-2018-20014 affects UrBackup 2.2.6. A malformed network request can trigger a NULL pointer dereference in fileservplugin/CClientThread.cpp::GetFileHashAndMetadata, causing the client application to shut down. The available documents do not provide exploit details, affected versions beyond 2.2....

Fedora 30 : buildbot (2019-3270dc130b)

Update to 2.3.1 to fix CVE-2019-12300. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Debian DLA-1815-1 : poppler security update

Several vulnerabilities have been found in the poppler PDF rendering library, which could result in denial of service or possibly other unspecified impact when processing malformed or maliciously crafted files. For Debian 8 'Jessie', these problems have been fixed in version 0.26.5-2+deb8u10. We...

EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2019-1637)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The recent speculative execution CVEs address three potential attacks across a wide variety of architectures and hardware...

Fedora 30 : hostapd (2019-28d3ca93d2)

Update to version 2.8 from upstream, Security fix for CVE-2019-11555 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1422-1)

This update for the Linux Kernel 3.12.74-606496 fixes one issue. The following security issue was fixed : CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial ...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2019:1439-1)

This update for python fixes the following issues : Security issues fixed : CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead bsc1130847. CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC...

CVE-2019-1872

The CVE-2019-1872 entry applies to Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series. The vulnerability stems from improper restrictions on network services, enabling an unauthenticated, remote attacker to cause the affected system to generate and send arbitrary netw...

Fedora 29 : nss (2019-e2f5e10754)

Updates the nss package to upstream NSS 3.44. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.44 releasenotes ---- This fixes a PKCS11 module leak if CGetSlotInfo...

Fedora 29 : sqlite (2019-a01751837d)

Security fix for CVE-2019-5827, CVE-2019-9937, CVE-2019-9936 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 29 : drupal7-module_filter (2019-0e10310204)

https://www.drupal.org/project/modulefilter/releases/7.x-2.2 - Moderately critical - Cross site scripting - SA-CONTRIB-2019-042 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 29 : drupal7-context (2019-62eba285ee)

https://www.drupal.org/project/context/releases/7.x-3.10 - Moderately critical - Cross site scripting - SA-CONTRIB-2019-028 - https://www.drupal.org/project/context/releases/7.x-3.9 - https://www.drupal.org/project/context/releases/7.x-3.8 Note that Tenable Network Security has extracted the...

Fedora 30 : sleuthkit (2019-b860f718ec)

Update to 4.6.6 Various bugfixes on the 4.6 branch Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....