Fedora 28 : 1:java-11-openjdk (2019-ca4ee3510d)

Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2019-April/0009 51.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...

GraphicsMagick CVE-2019-19951 Heap Buffer Overflow Vulnerability

Description GraphicsMagick is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successful exploits may allow the attacker to crash the affected application. Due to the nature o...

JQuery < 3.4.0 Object Prototype Pollution Vulnerability

The version of JQuery library hosted on the remote web server is prior to 3.4.0. It is, therefore, affected by an object pollution vulnerability in jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could exte...

Cisco Firepower Management Center XSS Vulnerability

According to its self-reported version, the Cisco Firepower Management Center is by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

Fedora 30 : kernel / kernel-tools (2019-5b76e711b3)

The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi. Note that Tenable Network...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2019:1196-1)

This update for mutt fixes the following issues : Security issues fixed : bsc1101428: Mutt 1.10.1 security release update. CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

How 5G could impact cybersecurity strategy

With the recent news that South Korea has rolled out the world’s first 5G network, it’s clear that we’re on the precipice of the wireless technology’s widespread launch. Offering speeds anywhere from 20 to 100 times faster than 4G long-term evolution LTE, the next generation of wireless networks...

Fedora 28 : filezilla / libfilezilla (2019-d109db9c8a)

Fix for CVE-2019-5429 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2019:1181-1)

This update for freeradius-server fixes the following issues : Security issues fixed : CVE-2019-11235: Fixed an authentication bypass related to the EAP-PWD Commit frame and insufficent validation of elliptic curve points bsc1132549. CVE-2019-11234: Fixed an authentication bypass caused by...

Fedora 29 : drupal8 (2019-7eaf0bbe7c)

https://www.drupal.org/project/drupal/releases/8.6.15 - https://www.drupal.org/SA-CORE-2019-005 CVE-2019-10909 / CVE-2019-10910 / CVE-2019-10911 - https://www.drupal.org/SA-CORE-2019-006 CVE-2019-11358 - https://www.drupal.org/project/drupal/releases/8.6.14 Note that Tenable Network Security has...

Cybersecurity Leaders Are Talking A Lot About Counterfeit Devices

Malice Vs Greed Most discussion about security in the supply chain has been focused on detecting tampering, or preventing backdoors or sneaky things being inserted into components and software. There’s another aspect emerging and will dwarf the tampering: devices that are counterfeited for profit...

Fedora 28 : kernel (2019-a6cd583a8d)

The 5.0.11 update contains a number of important fixes across the tree. Note there were no changes to headers or tools so there are no builds for those. ---- The 5.0.10 update contains a number of important fixes across the tree. Note there were no changes to the headers or tools packages so ther...

Debian DLA-1777-2 : jquery regression update

The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7 For Debian 8 'Jessie', this problem has been fixed in version 1.7.2+dfsg-3.2+deb8u7. We recommend that you upgrade your jquery...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2019:1136-1)

This update for openssl fixes the following issues : Reject invalid EC point coordinates bsc1131291 This helps openssl using services that do not do this verification on their own. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Fedora 29 : kernel (2019-8219efa9f6)

The 5.0.10 update contains a number of important fixes across the tree Note there were no updates to the header or tools so there are no builds for those packages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenab...

Fedora 30 : kernel (2019-87d807d7cb)

The 5.0.10 update contains a number of important fixes across the tree Note there were no changes to the tools or headers packages so those are not built. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 30 : 2:runc (2019-bc70b381ad)

This runc version should fix the keycreate issues on SELinux disabled machines. ---- Latest upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much ...

Ubuntu 18.04 LTS : python-gnupg vulnerabilities (USN-3964-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3964-1 advisory. Marcus Brinkmann discovered that GnuPG before 2.2.8 improperly handled certain command line parameters. A remote attacker could use this to spoof the...

DEBIAN-CVE-2018-12404

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack AKA Bleichenbacher attack and affects all NSS versions prior to NSS 3.41...

Denial Of Service (DOS)

mysql is vulnerable to denial o service DOS attacks. This vulnerability exists through an unspecified vulnerability in the MySQL Server component in Oracle MySQL. A low privileged attacker with network access via multiple protocols is able to compromise MySQL Server which results in unauthorized...