Ubuntu 16.04 LTS / 18.04 LTS : libbsd vulnerabilities (USN-4243-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4243-1 advisory. It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This...

Fedora 30 : chromium (2020-4355ea258e)

Update to 79.0.3945.117. Fixes CVE-2020-6377. ---- Security fix for CVE-2019-13767. ---- Update to Chromium 79. Fixes the usual giant pile of bugs and security issues. This time, the list is : CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732...

Fedora 31 : 1:rubygem-rack (2020-57fc0d0156)

Update to Rack 2.0.8. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Photon OS 3.0: Ruby PHSA-2020-3.0-0047

An update of the ruby package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0047. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133068;...

Fedora 31 : 1:ImageMagick / rubygem-rmagick (2020-f006145643)

Security and bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Fedora 31 : gnulib (2020-663f619e9c)

Security fix for CVE-2018-17942 - Update on 2020-01-07 - CVE-2018-17942 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Cisco FTD Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)

According to its self-reported version the Cisco Firepower Threat Defense FTD software running on the remote device is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisories for more information. Note that Nessus has not tested for this issue but ha...

Fedora 31 : phpMyAdmin (2020-a1b4afe7b5)

Version 5.0.1 2020-01-07 - issue 15719 Fixed error 500 when browsing a table when $cfg'LimitChars' used a string and not an int value - issue 14936 Fixed display NULL on numeric fields has showing empty string since 5.0.0 - issue 15722 Fix get Database structure fails with PHP error on replicated...

Fedora 31 : kernel (2020-7fcf62839f)

Update to Linux v5.4.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

RHEL 6 : thunderbird (RHSA-2020:0123)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0123 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.4.1. Security Fixes: Mozilla:...

Fedora 31 : ocsinventory-agent (2020-4c8a066b83)

Per Upstream, a malicious CA could result in unexpected inventory access with the System CA patch. The risk is very low. That patch is now dropped. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempte...

Ubuntu 16.04 LTS : Kamailio vulnerability (USN-4240-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4240-1 advisory. It was discovered that Kamailio incorrectly handled a specially crafted file. An attacker could possibly use this issue to cause a denial of service or other...

Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-4239-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4239-1 advisory. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2020:0104-1)

This update for nodejs10 to version 10.18.0 fixes the following issues : Security issues fixed : CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. Added support for chacha20-poly1305 for Authenticated...

Solaris 10 (sparc) : 152252-03

SunOS 5.10: sudo Patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132896; scriptversion"1.1"; scriptcvsdate"Date:...

SUSE SLED12 / SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:0088-1)

This update for mozilla-nspr, mozilla-nss fixes the following issues : mozilla-nss was updated to NSS 3.47.1 : Security issues fixed : CVE-2019-17006: Added length checks for cryptographic primitives bsc1159819. CVE-2019-11745: EncryptUpdate should use maxout, not block size bsc1158527...

Solaris 10 (sparc) : 144674-02

SunOS 5.10: GNU patch patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132893; scriptversion"1.1"; scriptcvsdate"Date:...

Solaris 10 (sparc) : 125279-07

CDE 1.6: dtsession patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132891; scriptversion"1.2"; scriptcvsdate"Date:...

Fedora 30 : mingw-wavpack (2020-73274c9df4)

Security fixes for: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841 CVE-2019-11498 CVE-2019-1010315 CVE-2019-1010319 CVE-2019-1010317 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Solaris 10 (x86) : 152253-03

SunOS 5.10x86: sudo Patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132903; scriptversion"1.1"; scriptcvsdate"Date:...