Fedora 31 : chromium (2019-9a5e81214f)

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Debian DLA-1971-1 : libarchive security update

An issue has been found in libarchive, a multi-format archive and compression library. In case of a crafted archive containing several parts and one part being corrupt, there would be an use-after-free for the next part of the archive. For Debian 8 'Jessie', this problem has been fixed in version...

Fedora 30 : apache-commons-compress (2019-c96a8d12b0)

Update to version 1.19. Resolves CVE-2019-12402. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

RHEL 7 : Ansible (RHSA-2019:3202)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3202 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...

Fedora 31 : mod_auth_openidc (2019-a25d5df3b4)

Upgrade to latest upstream which fixes some CVEs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora 31 : python-ecdsa (2019-55e04129ac)

Update to 0.13.3 - CVE-2019-14853 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

RHEL 7 / 8 : Ansible (RHSA-2019:3203)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3203 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

Fedora 29 : 14:tcpdump (2019-85d92df70f)

New version 4.9.3, Security fix for CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451,...

Scientific Linux Security Update : sudo on SL7.x x86_64 (20191024)

Security Fixes : - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword CVE-2019-14287 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid130252; scriptversion"1.6";...

Tenable Nessus <= 8.7.0 DoS Vulnerability (TNS-2019-06)

Tenable Nessus is prone to a denial of service DoS vulnerability due to improper validation of specific imported scan types. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

RHEL 7 : qemu-kvm-rhev (RHSA-2019:3179)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3179 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

SUSE SLED12 / SLES12 Security Update : sysstat (SUSE-SU-2019:2752-1)

This update for sysstat fixes the following issue : CVE-2019-16167: Fixed a memory corruption due to an integer overflow. bsc1150114 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : libcaca (SUSE-SU-2019:2745-1)

This update for libcaca fixes the following issues : Security issues fixed : CVE-2018-20544: Fixed a floating point exception at caca/dither.c bsc1120502 CVE-2018-20545: Fixed a WRITE memory access in the loadimage function at common-image.c for 4bpp bsc1120584 CVE-2018-20546: Fixed a READ memory...

Ubuntu 16.04 LTS / 18.04 LTS : Libxslt vulnerabilities (USN-4164-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4164-1 advisory. It was discovered that Libxslt incorrectly handled certain documents. An attacker could possibly use this issue to access sensitive...

Photon OS 3.0: Subversion PHSA-2019-3.0-0035

An update of the subversion package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130104;...

Photon OS 3.0: Openjdk8 PHSA-2019-3.0-0035

An update of the openjdk8 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130102;...

Ubuntu 16.04 LTS / 18.04 LTS : Exiv2 vulnerability (USN-4159-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4159-1 advisory. It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Tenable has...

Photon OS 3.0: Linux PHSA-2019-3.0-0034

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0034. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130120;...

Ubuntu 19.10 : Linux kernel vulnerability (USN-4161-1)

It was discovered that the IPv6 routing implementation in the Linux kernel contained a reference counting error leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. Note that Tenable Network Securi...

Debian DLA-1967-1 : libpcap security update

libpcap Packet CAPture, a low-level network monitoring library, does not properly validate the PHB header length before allocating memory. This update added sanity checks for PHB header length. For Debian 8 'Jessie', this problem has been fixed in version 1.6.2-2+deb8u1. We recommend that you...