Fedora 31 : mingw-glib-networking (2020-cadbc5992f)

Security fix for CVE-2020-13645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 32 : python-django (2020-c2639662af)

Security fix for CVE-2020-7471. - Security fix for CVE-2020-9402. - Security fix for CVE-2020-13254. - Security fix for CVE-2020-13596. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

The vulnerability of the NSS libraries’ code set arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the NSS Network Security Services library set exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2020-14416

In the Linux kernel before 5.4.16, a race condition in tty-discdata handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1596-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called...

SUSE SLED15 / SLES15 Security Update : libcroco (SUSE-SU-2020:1535-1)

This update for libcroco fixes the following issues : Security issues fixed : CVE-2017-8834: Fixed denial of service memory allocation error via a crafted CSS file bsc1043898. CVE-2017-8871: Fixed denial of service infinite loop and CPU consumption via a crafted CSS file bsc1043899. Note that...

SUSE SLES12 Security Update : qemu (SUSE-SU-2020:1526-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code bsc1166240. CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation bsc1146873. CVE-2020-1983: Fixed a use-after-free in the ipreass...

SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2020:1553-1)

This update for libexif to 0.6.22 fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in...

SUSE SLES12 Security Update : python (SUSE-SU-2020:1524-1)

This update for python to version 2.7.17 fixes the following issues : Syncing with lots of upstream bug fixes and security fixes. Bug fixes : CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs bsc1162825. CVE-2019-18348: Fixed a CRLF injection via the host part of the u...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2020:1551-1)

This update for vim fixes the following issues : CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces bsc1172225. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2020:1571-1)

This update for java-170-openjdk to version 7u261 fixes the following issues : CVE-2020-2756: Better mapping of serial ENUMs bsc1169511 CVE-2020-2757: Less Blocking Array Queues bsc1169511 CVE-2020-2773: Better signatures in XML bsc1169511 CVE-2020-2781: Improve TLS session handling bsc1169511...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2020:1623-1)

This update for nodejs6 fixes the following issues : CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype bsc1166916. Note that Tenable Network...

SUSE SLES12 Security Update : libexif (SUSE-SU-2020:1534-1)

This update for libexif fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

SUSE SLES12 Security Update : adns (SUSE-SU-2020:1612-1)

This update for adns fixes the following issues : CVE-2017-9103,CVE-2017-9104,CVE-2017-9105,CVE-2017-9109: Fixed an issue in local recursive resolver which could have led to remote code execution bsc1172265. CVE-2017-9106: Fixed an issue with upstream DNS data sources which could have led to deni...

SUSE SLED15 / SLES15 Security Update : texlive-filesystem (SUSE-SU-2020:1580-1)

This update for texlive-filesystem fixes the following issues : Security issues fixed : CVE-2020-8016: Fixed a race condition in the spec file bsc1159740. CVE-2020-8017: Fixed a race condition on a cron job bsc1158910. Note that Tenable Network Security has extracted the preceding description blo...

USN-4397-2 nss vulnerability

USN-4397-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Cesar Pereida Garcia discovered that NSS incorrectly handled DSA key generation. A local attacker could possibly use this issue to perform a...

Fedora 32 : kernel / kernel-headers (2020-e47d28bc2b)

The 5.6.18 stable kernel update contains a number of important fixes across the tree. ---- The 5.6.17 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1475-1)

This update for the Linux Kernel 3.12.74-6064115 fixes several issues. The following security issues were fixed : CVE-2020-12653: Fixed a buffer overflow in mwifiexcmdappendvsietlv which could have allowed local users to gain privileges or cause a denial of service bsc1171254. CVE-2020-12654: Fix...

EulerOS 2.0 SP2 : openslp (EulerOS-SA-2020-1655)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the...

EulerOS 2.0 SP2 : libvncserver (EulerOS-SA-2020-1683)

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large heigh...