Photon OS 1.0: Nss PHSA-2019-1.0-0239

An update of the nss package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0239. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126189;...

Fedora 29 : buildbot (2019-2ea119f414)

Update to 1.8.2 to fix CVE-2019-12300. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Photon OS 1.0: Bash PHSA-2019-1.0-0229

An update of the bash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0229. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid124869;...

CVE-2019-5495: Undefined Security Weakness

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

RHEL 7 : ovmf (RHSA-2019:0809)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0809 advisory. OVMF Open Virtual Machine Firmware is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for...

KB4493478: Security update for Adobe Flash Player (April 2019)

The remote Windows host is missing security update KB4493478. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in Adobe Flash. An unauthenticated, remote attacker could exploit this to execute arbitrary code. CVE-2019-7096 - An information disclosure...

Fedora 29 : wget (2019-7a0497cbc2)

update to 1.20.3 - fixed CVE-2019-5953 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Amazon Linux AMI : squid (ALAS-2019-1176)

A memory leak was discovered in the way Squid handles SNMP denied queries. A remote attacker may use this flaw to exhaust the resources on the server machine. CVE-2018-19132 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AM...

Amazon Linux 2 : libXcursor (ALAS-2019-1173)

XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.CVE-2015-9262 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Photon OS 1.0: Openjre PHSA-2016-0015

An update of the openjre package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2016-0015. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121661;...

Photon OS 2.0: Systemd PHSA-2018-2.0-0076

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0076. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Freetype2 PHSA-2018-2.0-0058

An update of the freetype2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0058. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Xerces PHSA-2018-1.0-0126

An update of the xerces package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0126. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12183...

Photon OS 2.0: Linux PHSA-2018-2.0-0043

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0043. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121945...

Photon OS 1.0: Linux PHSA-2017-0042

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0042. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121752;...

Photon OS 2.0: Binutils PHSA-2018-2.0-0064

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0064. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 29 : openssh (2019-f6ff819834)

This update fixes CVE-2018-20685 the first 'variant' and backports several fixes to unbreak ECDSA authentication from PKCS11, certificate authentication and so on. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Security Updates for Microsoft Office Web Apps (January 2019)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who...

Amazon Linux 2 : wget (ALAS-2018-1121)

A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary domains.CVE-2018-0494 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2...

Security Updates for Microsoft Team Foundation Server (November 2018)

The Microsoft Team Foundation Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Team Foundation Server TFS does not enable basic authorization on the communication betwee...