Ubuntu 14.04 LTS : NSS update (USN-2504-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2504-1 advisory. The NSS package contained outdated CA certificates. This update refreshes the NSS package to version 3.17.4 which includes the latest CA certificate bundle. Tenab...

Ubuntu 14.04 LTS : Bind vulnerability (USN-2503-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2503-1 advisory. Jan-Piet Mens discovered that Bind incorrectly handled Trust Anchor Management. A remote attacker could use this issue to cause bind to crash, resulting in a deni...

Ubuntu 14.04 LTS : X.Org X server vulnerabilities (USN-2500-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2500-1 advisory. Olivier Fourdan discovered that the X.Org X server incorrectly handled XkbSetGeometry requests resulting in an information leak. An attacker able to...

Oracle Linux 5 : kernel (ELSA-2015-0164)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0164 advisory. - fs splice: perform generic write checks Eric Sandeen 1155908 CVE-2014-7822 - x86 traps: stop using IST for SS Petr Matousek 1172809 CVE-2014-9322 Tenable has...

Ubuntu 14.04 LTS : PostgreSQL vulnerabilities (USN-2499-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2499-1 advisory. Stephen Frost discovered that PostgreSQL incorrectly displayed certain values in error messages. An authenticated user could gain access to seeing certai...

Ubuntu 14.04 LTS : NTP vulnerabilities (USN-2497-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2497-1 advisory. Stephen Roettger, Sebastian Krahmer, and Harlan Stenn discovered that NTP incorrectly handled the length value in extension fields. A remote attacker cou...

Fedora 20 : kernel-3.18.5-101.fc20 (2015-1672)

This update should fix the adjtimex issues seen on 32bit systems with 3.18.5-100 The 3.18.5 stable update contains a number of important fixes across the tree. The 3.18.4 stable update contains a number new features and drivers as well as several important fixes across the tree. Note that Tenable...

Fedora 21 : e2fsprogs-1.42.12-1.fc21 (2015-1840)

New upstream release Security fix for CVE-2015-0247 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

McAfee DLPe Agent Privilege Escalation Vulnerability on Windows XP (SB10097)

The remote Windows XP host is running a version of the McAfee DLPe agent that is affected by a privilege escalation vulnerability, which a local attacker can exploit by sending specially crafted commands to a kernel mode driver. C Tenable Network Security, Inc. include"compat.inc"; if description...

Ubuntu 14.04 LTS : file vulnerabilities (USN-2494-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2494-1 advisory. Francisco Alonso discovered that file incorrectly handled certain ELF files. An attacker could use this issue to cause file to crash, resulting in a deni...

Fedora 20 : clamav-0.98.6-1.fc20 (2015-1437)

ClamAV 0.98.6 ============= ClamAV 0.98.6 is a bug fix release correcting the following : - library shared object revisions. - installation issues on some Mac OS X and FreeBSD platforms. - includes a patch from Sebastian Andrzej Siewior making ClamAV pid files compatible with systemd. - Fix a hea...

Fedora 20 : thunderbird-31.4.0-1.fc20 (2015-0809)

For list of changes see https://www.mozilla.org/en-US/thunderbird/31.4.0/releasenotes/ See https://www.mozilla.org/en-US/thunderbird/31.3.0/releasenotes/ for changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

Fedora 20 : drupal7-context-3.6-1.fc20 (2015-0726)

CVE-2015-1051 / SA-CONTRIB-2015-004 - Context - Open Redirect Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Oracle Linux 6 : kernel (ELSA-2015-0087)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0087 advisory. - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 - net sctp: fix NULL pointer dereference in af-fromaddrparam on malforme...

Fedora 20 : suricata-2.0.6-1.fc20 (2015-0792)

This is a new upstream release fixing several serious bugs: reports of eveasion issues, sequence gaps in tcp stream reassembly under TLS detection, segfault in libhtp 0.5.15 which can lead to denial of service, and several others. See change log for details. Note that Tenable Network Security has...

Fedora 21 : suricata-2.0.6-1.fc21 (2015-0727)

This is a new upstream release fixing several serious bugs: reports of eveasion issues, sequence gaps in tcp stream reassembly under TLS detection, segfault in libhtp 0.5.15 which can lead to denial of service, and several others. See change log for details. Note that Tenable Network Security has...

Oracle Linux 5 : glibc (ELSA-2015-0090)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0090 advisory. 2.5-123.0.1.el511.1 - Switch to use malloc when the input line is too long Orabug 19951108 - Use a /sys/devices/system/cpu/online for SCNPROCESSORSONLN...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2486-1) (POODLE)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,...

Ubuntu 14.04 LTS : Unbound vulnerability (USN-2484-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2484-1 advisory. Florian Maury discovered that Unbound incorrectly handled delegation. A remote attacker could possibly use this issue to cause Unbound to consume resources,...

Ubuntu 14.04 LTS : JasPer vulnerabilities (USN-2483-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2483-1 advisory. Jose Duart discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafte...