Fedora Update for irssi FEDORA-2019-920924ed23

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2019-0041 Updated rdesktop package fixes security vulnerabilities

rdesktop has been updated to fix multiple CVE's. Fix memory corruption in processbitmapdata - CVE-2018-8794 Fix remote code execution in processbitmapdata - CVE-2018-8795 Fix remote code execution in processplane - CVE-2018-8797 Fix Denial of Service in mcsrecvconnectresponse - CVE-2018-20175 Fix...

openSUSE: Security Advisory for gitolite (openSUSE-SU-2019:0054-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 28 Update: php-horde-Horde-Form-2.0.19-1.fc28

The HordeForm package provides form rendering, validation, and other functionality for the Horde Application Framework...

Debian: Security Advisory (DSA-4370-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated aria2 package fixes security vulnerability

It was observed that URL's which gets downloaded via "--log=" attribute stores sensitive information. This update fixes that...

Debian DSA-4368-1 : zeromq3 - security update

Guido Vranken discovered that an incorrect bounds check in ZeroMQ, a lightweight messaging kernel, could result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4368. The te...

Debian: Security Advisory (DSA-4369-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mupdf FEDORA-2018-aadd3c2790

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2019-0017 Updated dcraw packages fix security vulnerability

A NULL pointer dereference flaw was found in the way dcraw processed images. An attacker could potentially use this flaw to crash dcraw by tricking it into processing crafted images CVE-2018-5801...

Security fix for the ALT Linux 9 package mailman version 5:2.1.29-alt1

Jan. 6, 2019 Dmitry V. Levin 5:2.1.29-alt1 - 2.1.26 - 2.1.29 fixes: CVE-2018-0618, CVE-2018-13796. - Enhanced init script. - Added tmpfiles.d5 rules and a systemd unit file for mailman...

Fedora 28 : mosquitto (2018-9a6af7815a)

Release 1.5.3 Security : - Fix CVE-2018-12543. If a message is sent to Mosquitto with a topic that begins with $, but is not $SYS, then an assert that should be unreachable is triggered and Mosquitto will exit. Broker : - Elevate log level to warning for situation when socket limit is hit. - Remo...

Fedora 29 : cairo (2018-3a195026f5)

This update lowers amount of color artefacts around glyphs when subpixel rendering is enabled for text by using freetype's default LCD filter. It also fixes a crash caused by using of wrong function for freeing of memory CVE-2018-19876. Note that Tenable Network Security has extracted the precedi...

Fedora 28 : composer (2018-42b49413a6)

Version 1.6.4 - 2018-04-13 - Security fixes in some edge case scenarios, recommended update for all users - Fixed regression in version guessing of path repositories - Fixed removing aliased packages from the repository, which might resolve some odd update bugs - Fixed updating of package URLs fo...

Fedora 28 : ncurses (2018-ed74f27aef)

Security fix for CVE-2018-10754. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. File data...

Fedora 28 : standard-test-roles (2018-c5c870e3ab)

Update to 2.14 This updates ensures that the VNC server used for debugging is bound to the local interfaces. Previously the VNC server might have been available globally depending on the system's firewall settings. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2018:2068-1)

IBM Java was updated to version 8.0.5.15 bsc1093311, bsc1085449 Security fixes : - CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790 CVE-2018-1417 - Removed translations in the...

Debian DLA-1622-1 : debian-security-support security update

debian-security-support, the Debian security support coverage checker, has been updated in jessie. The jessie relevant changes are : - Mark jasperreports as end-of-life in Jessie. - Mark webkit2gtk as unsupported in all releases. Closes: 914567 - Mark jruby in jessie as end-of-life as per...

[SECURITY] [DLA 1622-1] debian-security-support security update

Package : debian-security-support Version : 2018.11.25deb8u2 debian-security-support, the Debian security support coverage checker, has been updated in jessie. The jessie relevant changes are: Mark jasperreports as end-of-life in Jessie. Mark webkit2gtk as unsupported in all releases. Closes:...

OPENSUSE-SU-2018:4302-1 Security update for go

This update for go fixes the following issues: - golang: arbitrary command execution via VCS path bsc1081495, CVE-2018-7187 - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely because GOPATH i...