Fedora 30 : mingw-OpenEXR (2019-ce3385517b)

This update backports fixes for CVE-2018-18443 and CVE-2018-18444. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 30 : mingw-hunspell (2019-746b0b02f7)

This update fixes CVE-2019-16707. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

RHEL 6 / 7 / 8 : Red Hat JBoss Web Server 5.2 security (Important) (RHSA-2019:3929)

The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3929 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of...

Ubuntu 18.04 LTS : Bind vulnerability (USN-4197-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4197-1 advisory. It was discovered that Bind incorrectly handled certain TCP-pipelined queries. A remote attacker could possibly use this issue to cause Bind to consume resources,...

Fedora 31 : mingw-hunspell (2019-074bf7d2d3)

This update fixes CVE-2019-16707. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

Fedora 30 : oniguruma (2019-e4819c6510)

oniguruma security fix bugport, including fix for CVE-2019-16163 and bugs found on PHP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 29 : oniguruma (2019-6a931c8eec)

oniguruma security fix bugport, including fix for CVE-2019-16163 and bugs found on PHP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Apache Solr Bug Gets Bumped Up to High Severity

A bug impacting the Linux enterprise-search platform called Apache Solr has been revised from low to high-severity after researchers discovered a new remote code execution exploit. The warning comes from Tenable, which is reporting that the newly-identified default configuration vulnerability cou...

Debian DLA-1995-1 : angular.js security update

Earlier versions of this package package were vulnerable to Cross-site Scripting XSS due to no proper sanitization of xlink:href attributes. For Debian 8 'Jessie', this problem has been fixed in version 1.2.26-1+deb8u1. We recommend that you upgrade your angular.js packages. NOTE: Tenable Network...

Debian DLA-1996-1 : libapache2-mod-auth-openidc security update

A security vulnerability was found in libapache2-mod-auth-openidc, the OpenID Connect authentication module for the Apache HTTP server. Insufficient validation of URLs leads to an Open Redirect vulnerability. An attacker may trick a victim into providing credentials for an OpenID provider by...

Fedora 30 : ghostscript (2019-17f42f585a)

Security fix for CVE-2019-14869 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Tenable Core Web Interface Detection

Binary data tenablecorewebdetect.nbin...

Fedora 30 : libmp4v2 (2019-1030f4816a)

Fix crash made by the new patches ---- Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446 https://nvd.nist.gov/vuln/detail/CVE-2018-14403 https://nvd.nist.gov/vuln/detail/CVE-2018-14379 https://nvd.nist.gov/vuln/detail/CVE-2018-14326 https://nvd.nist.gov/vuln/detail/CVE-2018-14325...

Fedora 31 : libmp4v2 (2019-d53d4a79ac)

Fix crash made by the new patches ---- Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446 https://nvd.nist.gov/vuln/detail/CVE-2018-14403 https://nvd.nist.gov/vuln/detail/CVE-2018-14379 https://nvd.nist.gov/vuln/detail/CVE-2018-14326 https://nvd.nist.gov/vuln/detail/CVE-2018-14325...

Fedora 29 : djvulibre (2019-7ca378f076)

Security fix for CVE-2019-15142, CVE-2019-15143, CVE-2019-15144 and CVE-2019-15145. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2986-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 official security release bsc1155988 Includes security fixes for : - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues bsc114103...

Fedora 31 : php-robrichards-xmlseclibs3 (2019-9a960c8a98)

3.0.4 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Ubuntu 16.04 LTS / 18.04 LTS : postgresql-common vulnerability (USN-4194-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4194-1 advisory. Rich Mirch discovered that the postgresql-common pgctlcluster script incorrectly handled directory creation. A local attacker could possibly use this...

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2019:2785-2)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. bsc1146213 CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. bsc1146212 CVE-2019-15141: Fixed a divide-by-zero vulnerabili...

Ubuntu 16.04 LTS / 18.04 LTS : Ghostscript vulnerability (USN-4193-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4193-1 advisory. Paul Manfred and Lukas Schauer discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked in...