openSUSE Security Update : nodejs10 (openSUSE-2019-1211)

This update for nodejs10 to version 10.1.2 fixes the following issue: Security issue fixed : - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532. This update was imported from the SUSE:SLE-12:Update update projec...

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update

Red Hat OpenShift Container Platform release 3.11.98 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

SUSE SLES15 Security Update : xmltooling (SUSE-SU-2019:0929-1)

This update for xmltooling fixes the following issues : Security issue fixed : CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling bsc1129537. Note that Tenable Network Security has extracted...

EulerOS Virtualization 2.5.4 : rpm (EulerOS-SA-2019-1210)

According to the version of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that rpm uses temporary files with predictable names when installing an RPM. An attacker with ability to write in a...

openSUSE: Security Advisory for sqlite3 (openSUSE-SU-2019:1159-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : gd (openSUSE-2019-1148)

This update for gd fixes the following issues : Security issues fixed : - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. This update was importe...

Fedora 28 : golang-googlecode-go-crypto (2019-3f561ba0be)

Bump to commit b7391e95e576cacdcdd422573063bc057239113d Security fix for 1691529 and 1691530. ---- Bump to upstream a49355c7e3f8fe157a85be2f77e6e269a0f89602 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 29 : golang-googlecode-go-crypto (2019-117e425677)

Bump to commit b7391e95e576cacdcdd422573063bc057239113d Security fix for 1691529 and 1691530. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 28 : drupal7 (2019-2fbce03df3)

https://www.drupal.org/project/drupal/releases/7.65 - https://www.drupal.org/SA-CORE-2019-004 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

openSUSE Security Update : virtualbox (openSUSE-2019-943)

This update for virtualbox fixes the following issues : virtualbox was updated to version 5.2.22 released November 09 2018 by Oracle. Security issues fixed : - Fixed a guest-to-host excape via the e1000 virtual network driver bsc1115041. Non-security issues fixed : - Audio: Fixed a regression in...

openSUSE Security Update : rpm (openSUSE-2019-564)

This update for rpm fixes the following issues : This security vulnerability was fixed : - CVE-2017-7500: Fixed symlink attacks during RPM installation bsc943457 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Fedora 28 : wordpress (2019-8606c6da35)

Upstream announcement: WordPress 5.1.1 Security and Maintenance Release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0009)

The remote OracleVM system is missing necessary patches to address critical security updates : - NFS: commit direct writes even if they fail partially J. Bruce Fields Orabug: 28212440 - rds: update correct congestion map for loopback transport Mukesh Kacker Orabug: 29175685 - ext4: only look at t...

[SECURITY] Fedora 28 Update: file-5.33-10.fc28

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats...

Unbreakable Enterprise kernel security update

4.1.12-124.26.1 - NFS: commit direct writes even if they fail partially J. Bruce Fields Orabug: 28212440 - rds: update correct congestion map for loopback transport Mukesh Kacker Orabug: 29175685 - ext4: only look at the bgflags field if it is valid Theodore Tso Orabug: 29316684 CVE-2018-10876...

Fedora Update for koji FEDORA-2019-f142d69d4b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Command injection

If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing e.g. with CVE-2018-19638 he can execute arbitrary commands as root...

CVE-2018-19639

If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing e.g. with CVE-2018-19638 he can execute arbitrary commands as root...

CVE-2018-19639

CVE-2018-19639 affects supportutils before 3.1-5.7.1; when run with -v to verify RPMs, an attacker who can manipulate the RPM listing could execute arbitrary commands as root. OpenSUSE/SUSE advisories (openSUSE-2019-1351, SUSE-SU-2019:13976-1) state this vulnerability is fixed in the respective s...

CVE-2018-19639 Code execution if run with command line switch -v

If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing e.g. with CVE-2018-19638 he can execute arbitrary commands as root...