RHEL 8 : virt:rhel (RHSA-2020:2774)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2774 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contai...

Photon OS 2.0: Curl PHSA-2020-2.0-0255

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0255. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137873;...

Photon OS 1.0: Python3 PHSA-2020-1.0-0304

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0304. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : microcode_ctl (RHSA-2020:2757)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2757 advisory. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: L1D Cache Eviction Sampling CVE-2020-0549 hw: Vector...

Photon OS 1.0: Curl PHSA-2020-1.0-0304

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0304. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137875;...

Oracle Linux 8 : nghttp2 (ELSA-2020-2755)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2755 advisory. - prevent DoS caused by overly large SETTINGS frames CVE-2020-11080 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Photon OS 1.0: Redis PHSA-2020-1.0-0304

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0304. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137878...

About the security content of Safari 13.0.5 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of watchOS 5.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Photon OS 3.0: Gettext PHSA-2020-3.0-0105

An update of the gettext package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0105. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137777;...

Photon OS 1.0: Linux PHSA-2020-1.0-0303

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0303. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137781...

Photon OS 3.0: Nghttp2 PHSA-2020-3.0-0105

An update of the nghttp2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0105. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137778;...

Oracle Linux 8 : gnutls (ELSA-2020-2637)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2637 advisory. 3.6.8-11 - Fix CVE-2020-13777 1844147 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

VMware Releases Security Updates for Multiple Products

VMware has released security updates to address multiple vulnerabilities in VMware ESXi, Workstation, Fusion, and Cloud Foundation. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages...

CentOS 7 : ntp (RHSA-2020:2663)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2663 advisory. - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet wi...

HPSBHF03672 rev. 2 - NVIDIA GPU Display Driver June 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

RHEL 8 : microcode_ctl (RHSA-2020:2677)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2677 advisory. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: L1D Cache Eviction Sampling CVE-2020-0549 hw: Vector...

Oracle Linux 7 : unbound (ELSA-2020-2642)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2642 advisory. 1.6.6-5 - Fix incomplete amplifying-an-incoming-query patch - Resolves: rhbz1846424 Tenable has extracted the preceding description block directly from the Orac...

Adobe Releases Security Updates for Magento

Adobe has released security updates to address vulnerabilities in Magento Commerce 1 and Magento Open Source 1. An attacker could exploit one of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrato...

About the security content of iOS 13.3.1 and iPadOS 13.3.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...