CentOS 7 : 389-ds-base (CESA-2019:1896)

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

RHEL 7 : systemd (RHSA-2019:2402)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2402 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides...

Oracle Linux 7 : httpd (ELSA-2019-1898)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1898 advisory. 2.4.6-89.0.1 - replace index.html with Oracle's index page oracleindex.html 2.4.6-89.1 - Resolves: 1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce...

Oracle Linux 7 : icedtea-web (ELSA-2019-2003)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2003 advisory. - added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 Tenable...

Oracle Linux 7 : qemu-kvm (ELSA-2019-1883)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1883 advisory. 1.5.3-160.el76.3 - kvm-slirp-check-sscanf-result-when-emulating-ident.patch bz1669067 - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch bz1669067...

Oracle Linux 7 : libssh2 (ELSA-2019-1884)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1884 advisory. 1.4.3-12.0.1.el76.3 - Bump and rebuild. 1.4.3-12.el76.3 - fix out-of-bounds memory comparison with specially crafted message channel request CVE-2019-3862 Tenab...

Oracle Linux 7 : 389-ds-base (ELSA-2019-1896)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1896 advisory. - Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections Tenable has extracted the preceding description block directly from the...

CentOS 7 : qemu-kvm (CESA-2019:1883)

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Oracle Linux 7 : curl (ELSA-2019-1880)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1880 advisory. - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case insensitive password comparison...

RHEL 7 : python (RHSA-2019:2030)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2030 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RHEL 7 : libsolv (RHSA-2019:2290)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2290 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: NULL...

RHEL 7 : mercurial (RHSA-2019:2276)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2276 advisory. Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Securi...

RHEL 7 : zziplib (RHSA-2019:2196)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2196 advisory. The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: Bus error caused by loading of a...

RHEL 7 : opensc (RHSA-2019:2154)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2154 advisory. The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic...

RHEL 7 : unixODBC (RHSA-2019:2336)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2336 advisory. The unixODBC packages contain a framework that supports accessing databases through the ODBC protocol. Security Fixes: unixODBC: Buffer...

RHEL 7 : perl-Archive-Tar (RHSA-2019:2097)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2097 advisory. The Archive::Tar module provides a mechanism for Perl scripts to manipulate tar archive files. Security Fixes: perl: Directory traversal in...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4739)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4739 advisory. - Input: gtco - bounds check collection indent level Grant Hernandez Orabug: 30074413 CVE-2019-13631 Tenable has extracted the preceding description block...

An Update For Exempi Is Now Available For Red Hat Enterprise Linux 7. Red Hat Product Security Has Rated This Update As Having A Security Impact Of Low. A Common Vulnerability Scoring System (CVSS) Base Score, Which Gives A Det...(exceeded 255 Characters)

exempi is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop in ASFSupport::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASFSupport.cpp...

An Update For Exempi Is Now Available For Red Hat Enterprise Linux 7. Red Hat Product Security Has Rated This Update As Having A Security Impact Of Low. A Common Vulnerability Scoring System (CVSS) Base Score, Which Gives A Det...(exceeded 255 Characters)

exempi is vulnerable to denial of service DoS. The vulnerability exists through a use after free issue via a PDF file containing JPEG data...

Vulnerabilities fixed in Python

Vulnerabilities have been fixed in Python. The vulnerabilities allow a malicious person to perform attacks execute attacks that lead to the following categories of damage: Denial-of-Service Manipulation of data Circumvention of security measure Access to sensitive data Accessing system data -= Re...