5883 matches found
Fedora 26 : cacti (2017-7ab0179693)
Update to 1.1.12 - Fix Cross-site Scripting XSS issue with link.php CVE-2017-10970 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.11 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.12 Note that Tenable Network Security has extracted the preceding description...
Fedora 26 : 32:bind (2017-30f678e62a)
Update to last supported version, fixes CVE-2017-3142 and CVE-2017-3143. Includes minor fix of missing dependencies. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
Fedora 26 : postgresql (2017-a45fb81029)
Per release notes: https://www.postgresql.org/docs/9.6/static/release-9-6-3.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 26 : mingw-gnutls (2017-7936341c80)
https://lists.gnupg.org/pipermail/gnutls-devel/2017-June/008446.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora Update for jabberd FEDORA-2017-9dd1004ad8
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : GraphicsMagick (2017-3ac2e9b354)
New stable upstream release, primarily includes security fixes for CVE-2017-10794, CVE-2017-10799, CVE-2017-10800 See also http://www.graphicsmagick.org/NEWS.htmljuly-4-2017 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora 25 : libdb (2017-372bb1edb3)
Security fix for DBCONFIG parsing when dbhome is not set. This update also introduces modified fixes for rhbz1394862 once again and additionally fixes ppc specific hangs described in rhbz1460003. Please be aware that this update is expected to cause DBVERSIONMISMATCH errors during installation if...
Fedora 24 : libdb (2017-014d67fa9d)
Security fix for DBCONFIG parsing when dbhome is not set. This update also introduces modified fixes for rhbz1394862 once again and additionally fixes ppc specific hangs described in rhbz1460003. Please be aware that this update is expected to cause DBVERSIONMISMATCH errors during installation if...
openSUSE Security Update : libgcrypt (openSUSE-2017-796)
This update for libgcrypt fixes the following issues : - CVE-2017-7526: Hardening against a local side-channel attack in RSA key handling has been added bsc1046607 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Oracle Linux 6 : bind (ELSA-2017-1679)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1679 advisory. - Fix CVE-2017-3142 and CVE-2017-3143 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
CVE-2017-7500
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory ...
CVE-2017-7501
It was found that rpm uses temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which coul...
Fedora 24 : glibc (2017-698daef73c) (Stack Clash)
This update addresses CVE-2017-1000366, a vulnerability in the dynamic linker allowing local privilege escalation. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and form...
Code injection
Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root...
CVE-2015-1795
Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root...
CVE-2015-1795
Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root...
CVE-2015-1795
Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root...
CVE-2015-1795
Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root...
CVE-2015-1795
CVE-2015-1795 affects Red Hat Gluster Storage 3.2.0. The vulnerability is a local privilege escalation where a local user could gain root privileges and execute arbitrary code, related to glusterfs-server packaging. RHSA-2017:0484/0486 indicate the fix/update path, upgrading glusterfs to 3.8.4 an...
Fedora Update for kernel FEDORA-2017-d7bc1b3056
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...