Photon OS 2.0: Linux PHSA-2017-0043

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0043. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121754;...

Photon OS 2.0: Curl PHSA-2018-2.0-0068

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0068. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121963;...

Photon OS 1.0: Linux PHSA-2017-0042

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0042. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121752;...

Photon OS 1.0: Linux PHSA-2018-1.0-0135

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121841...

Photon OS 2.0: Redis PHSA-2018-2.0-0070

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0070. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121964...

Photon OS 2.0: Linux PHSA-2018-2.0-0088

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0088. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121989...

Photon OS 1.0: Tcpdump PHSA-2017-0033

An update of the tcpdump package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0033. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121730;...

Photon OS 1.0: Kubernetes PHSA-2019-1.0-0202

An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0202. The text itself is copyright C VMware, Inc. include"compat.inc"; if description...

Photon OS 1.0: Sudo PHSA-2017-0021

An update of the sudo package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0021. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121703;...

Photon OS 2.0: Linux PHSA-2017-2.0-0008

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-2.0-0008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121792...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2019:0271-1)

This update for python fixes the following issues : Security issue fixed : CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : lua53 (SUSE-SU-2019:0247-1)

This update for lua53 fixes the following issues : Security issue fixed : CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration PAC file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is...

Remote Desktop Protocol Clients Rife with Remote Code-Execution Flaws

UPDATE LAS VEGAS — Multiple critical vulnerabilities in the commonly used Remote Desktop Protocol RDP would allow a malicious actor to achieve remote code-execution over a client’s computer. According to Check Point research released Tuesday at the CPX360 event in Las Vegas, both open-source and...

Fedora 28 : kernel / kernel-headers (2019-7d3500d712)

The 4.20.6 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 29 : golang (2019-dbd82d0882)

Security fix for CVE-2019-6486 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 29 : python36 (2019-7eb6d3b8ea)

Security fix for CVE-2019-5010 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

CVE-2019-1000024

OPT/NET BV NG-NetMS prior to or equal to v3.6-2 contains a Cross-Site Scripting (XSS) flaw in /js/libs/jstree/demo/filebrowser/index.php. The attack is triggered by manipulating the GET parameters id and operation, allowing arbitrary JavaScript to be returned in the page response. This vulnerabil...

Debian DLA-1659-1 : drupal7 security update

A remote code execution vulnerability exists in PHP's built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. Some Drupal code core, contrib, and custom may be performing file operations on insufficiently validated user input, thereby being exposed to this...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2019:0215-1)

This update for python3 fixes the following issues : Security issue fixed : CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191 CVE-2018-20406: Fixed a integer overflow via a large LONGBINPUT bsc1120644 Note that Tenable Network Security has extracted...