Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200806)

Security Fixes : - chromium-browser: Use after free in ANGLE CVE-2020-6463 - chromium-browser: Inappropriate implementation in WebRTC CVE-2020-6514 - Mozilla: Potential leak of redirect targets when loading scripts in a worker CVE-2020-15652 - Mozilla: Memory safety bugs fixed in Firefox 79 and...

Debian DSA-4740-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird which could result in denial of service or potentially the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4740. The text...

GLSA-202007-53 : Dropbear: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-53 Dropbear: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

Photon OS 3.0: Linux PHSA-2020-3.0-0119

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0119. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139076;...

GLSA-202007-26 : SQLite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-26 SQLite: Multiple vulnerabilities Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

openSUSE Security Update : prboom-plus (openSUSE-2020-807)

This update for prboom-plus fixes the following issues : - CVE-2019-20797: Fixed a buffer overflow in client and server code responsible for handling received UDP packets boo1171974 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

RHEL 8 : .NET Core 3.1 (RHSA-2020:2954)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2954 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

VLC < 1.1.12 DoS

A denial of service DoS vulnerability exists in VLC media player before 1.1.12. Allows remote attackers to cause a denial of service crash via a long string in an amr file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid138341; scriptversion"1.5";...

Fedora 32 : python-flask-admin (2020-e8f384af5f)

Update to 1.5.6 upstream bugfix and security update. Fixes CVE-2018-16516 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Mozilla Firefox < 78.0

The version of Firefox installed on the remote Windows host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-24 advisory. - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler reported memory...

Photon OS 3.0: Gettext PHSA-2020-3.0-0105

An update of the gettext package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0105. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137777;...

Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2020-176-01)

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-176-01. The text itself is copyright C Slackware Linux,...

Fedora 31 : libexif (2020-085150ac6e)

New upstream release. It largely contains stability, security and bugfixes. Some EXIF 2.3 tags have been added. See also: https://github.com/libexif/libexif/releases/tag/libexif-0622-release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 32 : mingw-glib-networking (2020-a83c8cd358)

Security fix for CVE-2020-13645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Photon OS 1.0: Sqlite PHSA-2020-1.0-0298

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0298. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13732...

Photon OS 3.0: Apache PHSA-2020-3.0-0100

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0100. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137189;...

Fedora 32 : transmission (2020-e67318b4b4)

Backported patch for CVE-2018-10756. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

VanDyke Software SecureCRT < 8.7.2 Memory Corruption Vulnerability

The version of VanDyke Software SecureCRT installed on the remote Windows host is prior to 8.7.2. It is, therefore, affected by a memory corruption vulnerability. An attacker may be able to exploit this vulnerability, via a malformed response, to corrupt memory in the terminal process and execute...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openjpeg2 Vulnerability (NS-SA-2020-0026)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openjpeg2 packages installed that are affected by a vulnerability: - opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue th...

Fedora 30 : chromium (2020-06c54925d3)

The description provided by Fedora was far too silly to endure. Please consult the NIST CVEs for details on these Google Chromium vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted...