CentOS 8 : bluez (CESA-2020:1912)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1912 advisory. - bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices CVE-2018-10910 Note that Ness...

CentOS 8 : container-tools:rhel8 (CESA-2020:1932)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1932 advisory. - buildah: Crafted input tar file may lead to local file overwrite during image build process CVE-2020-10696 Note that Nessus has not tested for this issue but...

Photon OS 3.0: Sudo PHSA-2021-3.0-0188

An update of the sudo package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0188. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

CentOS 8 : libvorbis (CESA-2019:3703)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3703 advisory. - libvorbis: heap buffer overflow in mapping0forward function CVE-2018-10392 - libvorbis: stack buffer overflow in barknoisehybridmp function...

RHEL 8 : sudo (RHSA-2021:0220)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0220 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

Photon OS 2.0: Atftp PHSA-2021-2.0-0313

An update of the atftp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0313. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145417...

Photon OS 2.0: Linux PHSA-2021-2.0-0308

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144891...

Fedora 32 : rubygem-em-http-request (2020-117f1b67fb)

Security fix for CVE-2020-13482. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Debian DSA-4819-1 : kitty - security update

Stephane Chauveau discovered that the graphics protocol implementation in Kitty, a GPU-based terminal emulator, did not sanitise a filename when returning an error message, which could result in the execution of arbitrary shell commands when displaying a file with cat. C Tenable Network Security,...

Fedora 33 : mingw-jasper (2020-c549cf2462)

This update backports a patch for CVE-2020-27828. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. ...

Fedora 33 : phpldapadmin (2020-6cc5654c0e)

Update to 1.2.6.2 1906752 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Photon OS 1.0: Curl PHSA-2020-1.0-0346

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0346. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144082;...

Photon OS 3.0: Linux PHSA-2020-3.0-0174

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0174. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144068...

Photon OS 3.0: Curl PHSA-2020-3.0-0174

An update of the curl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0174. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144069;...

Photon OS 2.0: Curl PHSA-2020-2.0-0304

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0304. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144072;...

Security Update for Microsoft Exchange Server 2010 SP 3 (December 2020)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - A remote code execution vulnerability. An attacker could exploit this to execute unauthorized arbitrary code. CVE-2020-17144 %NASLMINLEVEL 70300 C Tenable...

Photon OS 2.0: Glibc PHSA-2020-2.0-0303

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0303. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid143487...

openSUSE Security Update : perl-DBI (openSUSE-2020-2064)

This update for perl-DBI fixes the following issues : - DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 This update was imported from the SUSE:SLE-15-SP2:Update update...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2020:5099)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5099-1 advisory. - Mozilla: Write side effects in MCallGetProperty opcode not accounted for CVE-2020-26950 Note that Nessus has not tested for this issue but has instead...

Fedora 31 : freetype (2020-6b35849edd)

Security fix for CVE-2020-15999. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...