Unbreakable Enterprise kernel security update

5.4.17-2011.5.3uek - misc: pvpanic: add crash loaded event zhenwei pi Orabug: 31677096 - misc: pvpanic: move bit definition to uapi header file zhenwei pi Orabug: 31677096 - RDMA/netlink: Do not always generate an ACK for some netlink operations Hakon Bugge Orabug: 31666971 - bnxten: Fix statisti...

Low: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.31 packages update

Red Hat OpenShift Container Platform release 4.3.31 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

IBM Spectrum Protect Plus hostname Command Injection

The IBM Spectrum Protect Plus SPP administrative console running on the remote host is affected by a remote command injection vulnerability due to improper validation of user-supplied data when processing a 'set hostname' HTTP request. An unauthenticated, remote attacker can exploit this, via a...

grub2 security update

2.02-81.0.4 - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 Orabug: 31225072 - Update signing certificate for efi binaries 2.02-0.81.0.2 - Enable common subpackage build for aarch64 - Disable RHEL patch...

openSUSE Security Update : salt (openSUSE-2020-1074)

This update for salt contains the following fixes : - Fix for TypeError in Tornado importer bsc1174165 - Require python3-distro only for TW bsc1173072 - Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/300 0.html - Add docker.logout to docker...

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11.248 bug fix and enhancement update

Red Hat OpenShift Container Platform release 3.11.248 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clou...

Fedora: Security Advisory for mingw-LibRaw (FEDORA-2020-07f0a49a9e)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: Vulnerabilities affect IBM InfoSphere BigInsights Web console (CVE-2016-2924, CVE-2016-2992 )

Summary Cross-site scripting vulnerabilities in Data Server Manager affect IBM InfoSphere BigInsights Web console and user-supplied input Vulnerability Details CVEID: CVE-2016-2924 DESCRIPTION: IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of...

Security Bulletin: BigInsights is affected by a vulnerability in DB2 (CVE-2014-0919, CVE-2016-0211)

Summary BigInsights is affected by a vulnerability in DB2 CVE-2014-0919, CVE-2016-0211. Vulnerability Details CVEID: CVE-2016-0211 DESCRIPTION: IBM DB2 LUW contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted...

Fedora 31 : snapd (2020-ccb155ea2c)

Update to v2.45.2 to fix CVE-2020-11933 and CVE-2020-11934 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 32 : libvncserver (2020-1a4b1c8271)

New upstream bugfix/security release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Fedora 31 : mingw-podofo (2020-afa955de8a)

Add podofomaxbytes.patch Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Securit...

Red Hat curl local file overwrite (CVE-2020-8177) (deprecated)

This plugin has been deprecated by the RedHat distribution specific plugins 142705 and 142414. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/16. Deprecated by redhat-RHSA-2020-4599.nasl and redhat-RHSA-2020-5002.nasl. include'compat.inc'; if description scriptid138374;...

Fedora 31 : coturn (2020-9eadf517de)

Coturn 4.5.1.3 ============== - merge PR 575: Fix rpm packaging - merge PR 576: Tell tar to not include the metadata into release - merge PR 574: Change Docker turnserver.conf to latest turnserver.conf - merge PR 566: Remove reference to SSLv3 - merge PR 579: Ignore MD5 for BoringSSL - merge PR...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2019-3681 osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...

Photon OS 2.0: Kibana PHSA-2020-2.0-0255

An update of the kibana package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0255. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13787...

Fedora 32 : 32:bind (2020-54a91444ff)

Update to last release, including security fix. Upstream Release notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2020-045)

According to the version of the parallels-server-bm-release / vzkernel / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - hw: Special Register Buffer Data Sampling SRBDS. Note that Tenable Network Security has extracted the...

Photon OS 2.0: Openssh PHSA-2020-2.0-0253

An update of the openssh package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0253. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...