SUSE-SU-2020:3551-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - Version update to 1.9.0: bsc1178083, jscSLE-16922 Enhancements and bugfixes: adds ECDSA keys and host key support when using OpenSSL adds ED25519 key and host key support when using OpenSSL 1.1.1 adds OpenSSH style key file reading adds AES...

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities in Drupal 7, 8.8 and earlier, 8.9, and 9.0. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review...

Ubuntu 20.10 : Thunderbird vulnerabilities (USN-4647-1)

The remote Ubuntu 20.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4647-1 advisory. Several security issues were fixed in Thunderbird. Tenable has extracted the preceding description block directly from the Ubuntu security advisory. Note tha...

SUSE-SU-2020:3514-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated Intel CPU Microcode to 20201118 official release. bsc1178971 - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms. - CVE-2020-8695: Fixed Intel RAPL sidechannel attack SGX INTEL-SA-00389 bsc1170446 -...

Photon OS 3.0: Ruby PHSA-2020-3.0-0163

An update of the ruby package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0163. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid143247;...

RHEL 7 : microcode_ctl (RHSA-2020:5181)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5181 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Information disclosure issue in Intel SGX via RAPL...

Vulnerabilities fixed in MongoDB

Several vulnerabilities have been fixed in different versions of MongoDB. An unauthenticated malicious person with network access to the MongoDB server could potentially exploit the vulnerabilities to cause a denial-of-service. In addition, the vulnerabilities could potentially be exploited by an...

Photon OS 2.0: Libgd PHSA-2020-2.0-0297

An update of the libgd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0297. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid143245...

Photon OS 3.0: Postgresql PHSA-2020-3.0-0164

An update of the postgresql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0164. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid143252;...

Photon OS 3.0: Librepo PHSA-2020-3.0-0164

An update of the librepo package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0164. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid143251;...

SUSE-SU-2020:3457-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated Intel CPU Microcode to 20201110 official release. - CVE-2020-8695: Fixed Intel RAPL sidechannel attack SGX INTEL-SA-00389 bsc1170446 - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 bsc1173594 - CVE-2020-8696:...

Driver Disk for Intel i40e 2.9.21 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Intel's i40e driver and wish to use the latest version of the following: Driver Module| Version ---|--- i40e| 2.9.21 Issues Resolved In this Driver Disk This driver disk contains mitigations for the...

OracleVM 3.4 : microcode_ctl (OVMSA-2020-0053)

The remote OracleVM system is missing necessary patches to address critical security updates : - recognize the 'force-intel' file path available on EL7+ orabug 31655792 - disable live load during %post due to UEK4 rendezvous timeouts orabug 31655792 - merge Oracle changes for early load via dracu...

OracleVM 3.4 : net-snmp (OVMSA-2020-0052)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - fix CVE-2020-15862 1875960 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

SUSE-SU-2020:14546-1 Security update for microcode_ctl

This update for microcodectl fixes the following issues: - Updated Intel CPU Microcode to 20201110 official release. - CVE-2020-8695: Fixed Intel RAPL sidechannel attack SGX INTEL-SA-00389 bsc1170446 - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 bsc1173594 - CVE-2020-8696:...

VMware Releases Security Updates for VMware SD-WAN Orchestrator

VMware has released security updates to address multiple vulnerabilities in VMware SD-WAN Orchestrator. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to...

Photon OS 1.0: Python3 PHSA-2020-1.0-0338

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0338. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Pam_Tacplus PHSA-2020-1.0-0338

An update of the pamtacplus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0338. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Vulnerability fixed in Drupal

A vulnerability has been fixed in Drupal core. Drupal core does not handle some file names correctly. As a result, it is possible for files to be misinterpreted and executed under the wrong MIME type or executed as PHP. This applies to a number of configurations; which ones these are is not...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...