PT-2019-1032

Name of the Vulnerable Software and Affected Versions: No vulnerable software versions are specified in the provided descriptions. Description: The descriptions describe GCC Toolset as a compiler toolset providing recent development tools, packaged as a Software Collection. An enhancement update...

Security fix for the ALT Linux 8 package samba version 4.9.15-alt1

4.9.15-alt1 built Nov. 5, 2019 Evgeny Sinelnikov in task 239962 Oct. 29, 2019 Evgeny Sinelnikov - Update to second security autumn release - Security fixes: + CVE-2019-10218 Client code can return filenames containing path separators + CVE-2019-14833 Samba AD DC check password script does not...

Security fix for the ALT Linux 8 package samba-DC version 4.9.15-alt1

4.9.15-alt1 built Nov. 5, 2019 Evgeny Sinelnikov in task 239962 Oct. 29, 2019 Evgeny Sinelnikov - Update to second security autumn release - Security fixes: + CVE-2019-10218 Client code can return filenames containing path separators + CVE-2019-14833 Samba AD DC check password script does not...

SQLite CVE-2019-16168 Denial of Service Vulnerability

Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.29.0 and prior versions are vulnerable. Technologies Affected Oracle Communications Design Studio 7.3.4.3.0 Oracle Communications Design Studio...

PT-2019-1096

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The GCC Toolset is a compiler toolset providing recent development tools, packaged as a Software Collection. An enhancement update adds the gcc-toolset-9-systemtap packages t...

PT-2019-1033

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The GCC Toolset is a compiler toolset providing recent versions of development tools, packaged as a Software Collection. An enhancement update has added the...

PT-2019-1093

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability. It appears to be an update for GCC Toolset, adding the gcc-toolset-9-elfutils packages to AlmaLinux Enterprise Lin...

Squid Multiple Security Vulnerabilities

Description Squid is prone to the following vulnerabilities: 1. Multiple buffer-overflow vulnerabilities. 2. An information disclosure vulnerability. 3. A cross-site request-forgery vulnerability. 4. An HTTP request-splitting vulnerability 5. A security-bypass vulnerability. Successful...

PT-2019-1094

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability. It appears to be an update for GCC Toolset, adding gcc-toolset-9-valgrind packages to AlmaLinux Enterprise Linux 8...

Oracle Linux 8 : thunderbird (ELSA-2019-3237)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-3237 advisory. 68.2.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.2.0-1 - Update to 68.2.0 68.1.1-2 - Update to...

Security fix for the ALT Linux 8 package sudo version 1:1.8.28-alt1

1:1.8.28-alt1 built Oct. 31, 2019 Ivan Zakharyaschev in task 240030 Oct. 15, 2019 Evgeny Sinelnikov - Update to autumn security release closes: 37334 - Code execution with euid==0 in rare box configurations fixes: CVE-2019-14287 - Fix post script for sudowheel control in case of upgrade in not...

GNU GRUB2 'grub2-set-bootflag' Utility Local Denial of Service Vulnerability

Description GNU GRUB2 is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected GNU GRUB2 Redhat Enterprise Linux 8 Recommendations Permit local access for trusted individuals only. Where possible, us...

Oracle Linux 8 : sudo (ELSA-2019-4822)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-4822 advisory. - Treat an ID of -1 as invalid since that means 'no change' Orabug: 30421281 CVE-2019-14287 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : nodejs:10 (ELSA-2019-2925)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2925 advisory. nodejs-packaging 17-3 - Change Requires to Recommends on nodejs dependency, so it is usable for building nodejs Tenable has extracted the preceding...

nodejs:10 security update

An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a software development platform for...

Security fix for the ALT Linux 8 package samba-DC version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release for domain controller release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Security fix for the ALT Linux 8 package samba version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Oracle Linux 8 : dovecot (ELSA-2019-2822)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2822 advisory. 1:2.2.36-5.1 - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap...

Oracle Linux 8 : httpd:2.4 (ELSA-2019-2893)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2893 advisory. - Resolves: 1744997 - CVE-2019-9511 httpd:2.4/modhttp2: HTTP/2: large amount of data request leads to denial of service - Resolves: 1745084 - CVE-2019-9516...

Oracle Linux 8 : kernel (ELSA-2019-2827)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2827 advisory. - 4.18.0-80.11.20.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...