Low: Red Hat Bug Fix Advisory: CloudForms 4.7.1 bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.10. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller M...

Qualys Cloud Platform 2.37 New Features

This release of the Qualys Cloud Platform version 2.37 includes updates and new features for Security Assessment Questionnaire and Web Application Scanning, highlights as follows. Security Assessment Questionnaire Manager access to all active campaigns – Questionnaire Manager role now has access ...

Fedora 29 : thunderbird (2019-cba0f77eab)

new upstream version with skia security fixes - more details at https://www.thunderbird.net/en-US/thunderbird/60.5.1/rel easenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Moderate: Red Hat Security Advisory: CloudForms 4.6.8 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

lighttpd < 1.4.50 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.50. It is, therefore, affected by the following vulnerabilities according to its release notes: - An unspecified potential path traversal in modalias - An unspecified user-after-free in core - An unspecifi...

Moderate: Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Qualys Cloud Platform (VM, PC) 8.17 New Features

Qualys Cloud Platform VM, PC version 8.17 contains various feature enhancements in Qualys Vulnerability Management and Qualys Policy Compliance. In addition, this release also lowers the time required before pausing or canceling an ongoing scan. Previously, scheduled scans could be cancelled or...

Release Information for Veeam ONE 9.5 Update 4

Challenge Release information for Veeam ONE 9.5 Update 4 Cause Please confirm you are running version 9.0.0.2088, 9.5.0.3201, 9.5.0.3254 or 9.5.0.3801 prior to installing this update. You can check this under Help | About in Veeam ONE console. After upgrading, your build will be version 9.5.4.456...

Release Information for Veeam Backup & Replication 9.5 Update 4

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release information for Veeam Backup & Replication 9.5 Update 4 Cause Please confirm that you are running version 9.0 Update 2 build 9.0.0.1715 or later prio...

Fedora 28 : nspr / nss / nss-softokn / nss-util (2018-1a7a5c54c2)

Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...

Fedora 29 : nspr / nss / nss-softokn / nss-util (2018-c72d2d89ec)

Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...

CVE-2018-18508

In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...

SUSE-SU-2018:4211-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to MariaDB 10.0.37 GA bsc1116686. Security issues fixed: - CVE-2018-3282: Server Storage Engines unspecified vulnerability CPU Oct 2018 bsc1112432 - CVE-2018-3251: InnoDB unspecified vulnerability CPU Oct 2018 bsc1112397 - CVE-2018-3174:...

CentOS 7 : samba (CESA-2018:3056)

An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Google Chrome < 71.0.3578.98 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 71.0.3578.98. It is, therefore, affected by a vulnerability as referenced in the 201812stable-channel-update-for-desktop12 advisory. - Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98...

Google Chrome < 71.0.3578.98 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 71.0.3578.98. It is, therefore, affected by a vulnerability as referenced in the 201812stable-channel-update-for-desktop12 advisory. - Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98...

Important: Red Hat Security Advisory: CloudForms 4.6.6 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Security update for otrs (moderate)

This update for otrs fixes the following issues: Update to version 4.0.33. Security issues fixed: - CVE-2018-19141: Fixed privilege escalation, that an attacker who is logged into OTRS as an admin user cannot manipulate the URL to cause execution of JavaScript in the context of OTRS. -...

RHEL 6 : Red Hat OpenShift Enterprise 2.2 Release Advisory (Moderate) (RHSA-2014:1796)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1796 advisory. OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private clou...

RHEL 6 : openshift (RHSA-2014:0487)

Red Hat OpenShift Enterprise release 2.1, which fixes one security issue, several bugs, and includes various enhancements, is now available. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...