Fedora 30 : 1:libuv (2019-1686ae9b59)

Update to Node.js upstream release 12.13.1 https://nodejs.org/en/blog/release/v12.13.1/ Also fixes an issue where running npm -g was risky on RPM-installed systems. Fedora's packaged NPM will now install global content in /usr/local instead of /usr where it could conflict with RPM-provided...

D-Link DIR-615 CVE-2019-19743 Privilege Escalation Vulnerability

Description D-Link DIR-615 is prone to a privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Technologies Affected D-Link DIR-615 Recommendations Block external access at the network boundary, unless external parties require service. If applicable,...

EulerOS 2.0 SP2 : perl (EulerOS-SA-2019-2419)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of servic...

EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2019-2407)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execu...

EulerOS 2.0 SP2 : coreutils (EulerOS-SA-2019-2417)

According to the version of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSI...

Debian DLA-2026-1 : htmldoc security update

In HTMLDOC, there was a one-byte underflow in htmldoc/ps-pdf.cxx caused by a floating point math difference between GCC and Clang. For Debian 8 'Jessie', this issue has been fixed in htmldoc version 1.8.27-8+deb8u1. We recommend that you upgrade your htmldoc packages. This upload was prepared by...

Siemens XHQ Operations Intelligence

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: XHQ Operations Intelligence Vulnerabilities: Cross-site Request Forgery, Improper Neutralization of Script-Related HTML Tags in a Web Page, Improper Input Validation 2. RISK...

EulerOS 2.0 SP2 : java-1.8.0-openjdk (EulerOS-SA-2019-2374)

According to the version of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.Security...

Fedora 31 : 1:xpdf (2019-224d8cb07a)

Apply upstream fix for CVE-2019-17064. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

EulerOS 2.0 SP2 : gdk-pixbuf2 (EulerOS-SA-2019-2386)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and applicati...

Microsoft Git for Visual Studio CVE-2019-1349 Remote Code Execution Vulnerability

Description Microsoft Git for Visual Studio is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Siemens XHQ Operations Intelligence SSA-525454 Multiple Input Validation Vulnerabilities

Description Siemens XHQ Operations Intelligence is prone to multiple input-validation vulnerabilities. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, o...

Oracle Linux 8 : nss (ELSA-2019-4114)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4114 advisory. 3.44.0-9 - Fix out-of-bounds write in NSCEncryptUpdate 1775912 Tenable has extracted the preceding description block directly from the Oracle Linux security...

EulerOS 2.0 SP2 : policycoreutils (EulerOS-SA-2019-2400)

According to the version of the policycoreutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the...

Microsoft Git for Visual Studio CVE-2019-1350 Remote Code Execution Vulnerability

Description Microsoft Git for Visual Studio is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Fedora 30 : librabbitmq (2019-dd7c8f5435)

Added: - amqpsslsocketgetcontext can be used to get the current OpenSSL CTX associated with a connection. Changed: - openssl: missing OpenSSL config is ignored as an OpenSSL init error 523 - AMQPDEFAULTMAXCHANNELS is now set to 2047 to follow current default channel limit in the RabbitMQ broker...

EulerOS 2.0 SP2 : openldap (EulerOS-SA-2019-2358)

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security...

Important: Red Hat Security Advisory: nss security update

An update for nss is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

USN-4215-1 nss vulnerability

It was discovered that NSS incorrectly handled certain certificates. An attacker could possibly use this issue to cause a denial of service...

Fedora 31 : community-mysql (2019-08c700185f)

MySQL 8.0.18 Release notes : https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html Security Advisory : https://www.oracle.com/security-alerts/cpuoct2019.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...