perl security update

CentOS Errata and Security Advisory CESA-2021:0343 An update for perl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Cisco Advisories and apply the necessary updates. For...

CentOS 7 : qemu-kvm (RHSA-2021:0347)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0347 advisory. - romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an...

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights As usual, Google reveals little information...

RHEL 7 : qemu-kvm-ma (RHSA-2021:0346)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0346 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide...

Google Releases Security Updates for Chrome

Google has released Chrome version 88.0.4324.146 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that that an attacker could exploit to take control of an affected system. CISA encourages users and administrators to review the Chrome Release and apply the necessary...

RHEL 7 : qemu-kvm (RHSA-2021:0347)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0347 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide th...

RHEL 7 : kernel (RHSA-2021:0336)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0336 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in fs/blockdev....

Vulnerabilities fixed in Clustered Data ONTAP

NetApp has fixed two vulnerabilities. An unauthorized malicious party can use the vulnerabilities to discover the presence of data, which is stored outside his authorizations. stored. NetApp has released updates to fix the vulnerabilities in Clustered Data ONTAP. For more information, see:...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in macOS Big Sur 11.0.1, macOS Catalina 10.15.7, and macOS Mojave 10.14.6. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple...

About the security content of watchOS 7.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of tvOS 14.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

CentOS 8 : python3 (CESA-2020:1764)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1764 advisory. - python: Cookie domain check returns incorrect results CVE-2018-20852 - python: email.utils.parseaddr wrongly parses email addresses CVE-2019-16056 No...

CentOS 8 : go-toolset:rhel8 (CESA-2020:0329)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0329 advisory. - golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling CVE-2019-16276 - golang: invalid public key causes...

Fedora 33 : thunderbird (2021-67a539137d)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-67a539137d advisory. - Update to latest upstream version. FEDORA-2021-67a539137d Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : systemd (CESA-2020:1794)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1794 advisory. - systemd: services with DynamicUser can create SUID/SGID binaries CVE-2019-3843 - systemd: services with DynamicUser can get new privileges and create...

Fedora 33 : libebml (2021-e84e1aaa2c)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-e84e1aaa2c advisory. - Fixes heap use-after-free when parsing malformed file upstream issue 2989. FEDORA-2021-e84e1aaa2c Note that Nessus has not tested for this issue but has...

CentOS 8 : python27:2.7 (CESA-2020:4654)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4654 advisory. - python: infinite loop in the tarfile module via crafted TAR archive CVE-2019-20907 - python-pip: directory traversal in downloadhttpurl function in...

About the security content of Safari 14.0.3

About the security content of Safari 14.0.3 This document describes the security content of Safari 14.0.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CentOS 8 : libssh (CESA-2020:4545)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4545 advisory. - libssh: unsanitized location in scp could lead to unwanted command execution CVE-2019-14889 - libssh: denial of service when handling AES-CTR or DES...