Debian DLA-1815-1 : poppler security update

Several vulnerabilities have been found in the poppler PDF rendering library, which could result in denial of service or possibly other unspecified impact when processing malformed or maliciously crafted files. For Debian 8 'Jessie', these problems have been fixed in version 0.26.5-2+deb8u10. We...

Fedora 30 : buildbot (2019-3270dc130b)

Update to 2.3.1 to fix CVE-2019-12300. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Ubuntu 18.04 LTS : Exim vulnerability (USN-4010-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4010-1 advisory. It was discovered that Exim incorrectly handled certain decoding operations. A remote attacker could possibly use this issue to execute arbitrary commands. Tenabl...

EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2019-1637)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The recent speculative execution CVEs address three potential attacks across a wide variety of architectures and hardware...

Fedora 30 : hostapd (2019-28d3ca93d2)

Update to version 2.8 from upstream, Security fix for CVE-2019-11555 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1422-1)

This update for the Linux Kernel 3.12.74-606496 fixes one issue. The following security issue was fixed : CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial ...

Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-4009-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4009-1 advisory. It was discovered that PHP incorrectly handled certain exif tags in images. A remote attacker could use this issue to cause PHP to crash,...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2019:1439-1)

This update for python fixes the following issues : Security issues fixed : CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead bsc1130847. CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC...

Fedora 29 : nss (2019-e2f5e10754)

Updates the nss package to upstream NSS 3.44. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.44 releasenotes ---- This fixes a PKCS11 module leak if CGetSlotInfo...

Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerability (USN-4006-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4006-2 advisory. USN-4006-1 fixed a vulnerability in the Linux kernel for Ubuntu 18.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel...

Ubuntu 18.04 LTS : Linux kernel vulnerability (USN-4007-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4007-1 advisory. Federico Manuel Bento discovered that the Linux kernel did not properly apply Address Space Layout Randomization ASLR in some situations for setuid a.out binaries...

Fedora 29 : sqlite (2019-a01751837d)

Security fix for CVE-2019-5827, CVE-2019-9937, CVE-2019-9936 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Ubuntu 16.04 LTS : Doxygen vulnerability (USN-4002-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4002-1 advisory. It was discovered that Doxygen incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code and compromise sensitive...

Fedora 29 : drupal7-module_filter (2019-0e10310204)

https://www.drupal.org/project/modulefilter/releases/7.x-2.2 - Moderately critical - Cross site scripting - SA-CONTRIB-2019-042 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 29 : drupal7-context (2019-62eba285ee)

https://www.drupal.org/project/context/releases/7.x-3.10 - Moderately critical - Cross site scripting - SA-CONTRIB-2019-028 - https://www.drupal.org/project/context/releases/7.x-3.9 - https://www.drupal.org/project/context/releases/7.x-3.8 Note that Tenable Network Security has extracted the...

Fedora 30 : sleuthkit (2019-b860f718ec)

Update to 4.6.6 Various bugfixes on the 4.6 branch Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....

Fedora 30 : drupal7-uuid (2019-e454116a1a)

https://www.drupal.org/project/uuid/releases/7.x-1.2 - https://www.drupal.org/project/uuid/releases/7.x-1.1 - Moderately critical - Arbitrary file upload - SA-CONTRIB-2018-045 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Debian DLA-1810-1 : tomcat7 security update

Nightwatch Cybersecurity Research team identified a XSS vulnerability in tomcat7. The SSI printenv command echoes user provided data without escaping. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website. For Debian 8...

Ubuntu 16.04 LTS / 18.04 LTS : Evolution Data Server vulnerability (USN-3998-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3998-1 advisory. Marcus Brinkmann discovered that Evolution Data Server did not correctly interpret the output from GPG when decrypting encrypted messages. Under certa...

Ubuntu 16.04 LTS / 18.04 LTS : GnuTLS vulnerabilities (USN-3999-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3999-1 advisory. Eyal Ronen, Kenneth G. Paterson, and Adi Shamir discovered that GnuTLS was vulnerable to a timing side- channel attack known as the Lucky...