Debian DLA-1697-1 : bind9 security updat

Two issues have been found in bind9, the Internet Domain Name Server. CVE-2019-6465 Zone transfer for DLZs are executed though not permitted by ACLs. CVE-2018-5745 Avoid assertion and thus causing named to deliberately exit when a trust anchor's key is replaced with a key which uses an unsupporte...

Debian DSA-4398-1 : php7.0 - security update

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: Multiple out-of-bounds memory accesses were found in the xmlrpc, mbstring and phar extensions and the dnsgetrecord function. C Tenable Network Security, Inc. The descriptive text and package...

Fedora 28 : flatpak (2019-a5f616808e)

Update to 1.0.7 Fixes related to CVE-2019-5736. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Integration Credential Status by Authentication Protocol - Failure for Provided Credentials

Nessus was not able to execute patch management checks because it was not possible to log into the designated patch management system using the credentials that have been provided. TRUSTED...

USN-3898-2: NSS vulnerability

USN-3898-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Hanno Böck and Damian Poddebniak discovered that NSS incorrectly handled certain CMS functions. A remote attacker could possibly use this issue to cause NSS to...

USN-3898-1: NSS vulnerability

Hanno Böck and Damian Poddebniak discovered that NSS incorrectly handled certain CMS functions. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service...

USN-3898-1 nss vulnerability

Hanno Böck and Damian Poddebniak discovered that NSS incorrectly handled certain CMS functions. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service...

The vulnerability of the Network Security Services library lies in the possibility of reducing the version of the TLS protocol used, allowing attackers to gain access to protected information.

The vulnerability of the Network Security Services library relates to the possibility of reducing the version of the TLS protocol used. Exploiting this vulnerability can allow an attacker to gain access to protected information through a secondary channel...

Fedora 28 : kernel / kernel-headers / kernel-tools (2019-16de0047d4)

The 4.20.11 stable kernel update contains a number of important fixes across the tree. ---- The 4.20.10 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update syste...

Debian DLA-1686-1 : freedink-dfarc security update

Sylvain Beucler and Dan Walma discovered several directory traversal issues in DFArc, a frontend and extensions manager for the Dink Smallwood game, allowing an attacker to overwrite arbitrary files on the user's system. For Debian 8 'Jessie', this problem has been fixed in version 3.12-1+deb8u1...

Slackware 14.0 / 14.1 / 14.2 / current : file (SSA:2019-054-01)

New file packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-054-01. The text itself is copyright C Slackware Linux,...

Fedora 29 : poppler (2019-387e017332)

Security fix for CVE-2018-20662 and CVE-2019-7310. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....

Input validation

A vulnerability in the Identity Services Engine ISE integration feature of Cisco Prime Infrastructure PI could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer SSL tunnel established between ISE and PI. The vulnerability is due to...

CVE-2019-1659 Cisco Prime Infrastructure Certificate Validation Vulnerability

A vulnerability in the Identity Services Engine ISE integration feature of Cisco Prime Infrastructure PI could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer SSL tunnel established between ISE and PI. The vulnerability is due to...

CVE-2019-1659 Cisco Prime Infrastructure Certificate Validation Vulnerability

A vulnerability in the Identity Services Engine ISE integration feature of Cisco Prime Infrastructure PI could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer SSL tunnel established between ISE and PI. The vulnerability is due to...

Security Bulletin: IBM MQ Appliance is affected by a Mozilla Network Security Services (NSS) vulnerability (CVE-2018-12384)

Summary IBM MQ Appliance has addressed the following Mozilla Network Security Services NSS vulnerability. Vulnerability Details CVEID: CVE-2018-12384 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, could allow a remote attacker to obtain sensitive information, caus...

Fedora 28 : webkit2gtk3 (2019-5c54d58073)

Update to 2.22.6; CVE-2019-6212, CVE-2019-6215 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Securely and Anonymously Send and Receive Files: OnionShare

OnionShare is an open source tool for securely and anonymously sending and receiving files using Tor onion services. It works by starting a web server directly on your computer and making it accessible as an unguessable Tor web address that others can load in Tor Browser to download files from yo...

Debian DLA-1684-1 : systemd security update

Chris Coulson discovered a flaw in systemd leading to denial of service. An unprivileged user could take advantage of this issue to crash PID1 by sending a specially crafted D-Bus message on the system bus. For Debian 8 'Jessie', this problem has been fixed in version 215-17+deb8u10. We recommend...

Fedora 29 : 1:ceph (2019-6a2e72916a)

New release 1:12.2.11-1 notes=Security fix for CVE-2018-14662, CVE-2018-16846, CVE-2018-16889 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...