SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2710-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2017-18595: A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c bnc1149555. CVE-2019-14821: An out-of-bounds acce...

Debian DLA-1966-1 : aspell security update

It was discovered that Aspell, the GNU spell checker, incorrectly handled certain inputs which leads to a stack-based buffer over-read. An attacker could potentially access sensitive information. For Debian 8 'Jessie', this problem has been fixed in version 0.60.720110707-1.3+deb8u1. We recommend...

Fedora 30 : python-ecdsa (2019-5297458c78)

Update to 0.13.3 - CVE-2019-14853 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2019:2674-1)

This update for tcpdump fixes the following issues : CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716 bsc1153098. CVE-2018-10103: Fixed a mishandling of the printing of SMB data bsc1153098. CVE-2018-10105: Fixed a mishandling of the printing of SMB...

Ubuntu 16.04 LTS / 18.04 LTS : Aspell vulnerability (USN-4155-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4155-1 advisory. It was discovered that Aspell incorrectly handled certain inputs. An attacker could potentially access sensitive information. Tenable has extracted th...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:1299-2)

This update for ffmpeg fixes the following issues : Security issue fixed : CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS bsc1101889 CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a D...

Ubuntu 16.04 LTS / 18.04 LTS : Sudo vulnerability (USN-4154-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4154-1 advisory. Joe Vennix discovered that Sudo incorrectly handled certain user IDs. An attacker could potentially exploit this to execute arbitrary commands as the...

Fedora 29 : golang (2019-e99c1603c3)

Security fix for CVE-2019-16276 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

RHEL 6 : Red Hat Single Sign-On 7.3.4 security update on RHEL 6 (Important) (RHSA-2019:3044)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3044 advisory. Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

Nessus CVE-2019-3982 Denial of Service Vulnerability

Description Nessus is prone to a denial-of-service vulnerability. Attackers may leverage this issue to cause a denial-of-service condition. Nessus versions 8.6.0 and prior are vulnerable. Technologies Affected Tenable Nessus 1.0.1 Tenable Nessus 3.0.3 Tenable Nessus 4.0 Tenable Nessus 4.4.1 Tenab...

Fedora 29 : krb5 (2019-dc4e1d0fb6)

Fix KDC crash when logging PKINIT enctypes CVE-2019-14844 This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Debian DLA-1951-1 : libtomcrypt security update

It was discovered that there was a denial of service vulnerability in the libtomcrypt cryptographic library. An out-of-bounds read and crash could occur via carefully-crafted 'DER' encoded data eg. by importing an X.509 certificate. For Debian 8 'Jessie', this issue has been fixed in libtomcrypt...

Ubuntu 16.04 LTS / 18.04 LTS : OpenEXR vulnerabilities (USN-4148-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4148-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image...

Fedora 31 : libnbd (2019-ec2eedaa9e)

New upstream version 1.0.2. Contains fix for NBD Protocol Downgrade Attack CVE-2019-14842. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 31 : expat (2019-613edfe68b)

This update of expat fixes the following security issue : - CVE-2019-15903 -- Fix heap overflow triggered by XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber, and deny internal entities closing the doctype The following bug fixes are also included : - Fix cases where XMLStopParser did not hav...

Fedora 31 : bird (2019-ff0f9ce167)

BIRD 2.0.6 2019-09-10 ======================= - RAdv: Solicited unicast RAs - BGP: Optional Adj-RIB-Out - BGP: Extended optional parameters length - Filter: Sets and set expressions in path masks - Several important bugfixes Note that Tenable Network Security has extracted the preceding descripti...

Fedora 31 : miniupnpd (2019-0a26e06dd5)

Security patches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 31 : exim (2019-e080507ba5)

This is an update fixing CVE-2019-16928. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 31 : 1:java-1.8.0-openjdk-aarch32 (2019-0bb3cfd816)

8u222 update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...

Fedora 31 : pdfbox (2019-88f53a7433)

Update to 2.0.16 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...