Vulnerabilities fixed in Clustered Data ONTAP

NetApp has fixed two vulnerabilities. An unauthorized malicious party can use the vulnerabilities to discover the presence of data, which is stored outside his authorizations. stored. NetApp has released updates to fix the vulnerabilities in Clustered Data ONTAP. For more information, see:...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in macOS Big Sur 11.0.1, macOS Catalina 10.15.7, and macOS Mojave 10.14.6. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple...

About the security content of tvOS 14.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of watchOS 7.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

CentOS 8 : go-toolset:rhel8 (CESA-2020:0329)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0329 advisory. - golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling CVE-2019-16276 - golang: invalid public key causes...

CentOS 8 : python3 (CESA-2020:1764)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1764 advisory. - python: Cookie domain check returns incorrect results CVE-2018-20852 - python: email.utils.parseaddr wrongly parses email addresses CVE-2019-16056 No...

Fedora 33 : thunderbird (2021-67a539137d)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-67a539137d advisory. - Update to latest upstream version. FEDORA-2021-67a539137d Note that Nessus has not tested for this issue but has instead relied only on the application's...

Fedora 33 : libebml (2021-e84e1aaa2c)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-e84e1aaa2c advisory. - Fixes heap use-after-free when parsing malformed file upstream issue 2989. FEDORA-2021-e84e1aaa2c Note that Nessus has not tested for this issue but has...

CentOS 8 : systemd (CESA-2020:1794)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1794 advisory. - systemd: services with DynamicUser can create SUID/SGID binaries CVE-2019-3843 - systemd: services with DynamicUser can get new privileges and create...

About the security content of Safari 14.0.3

About the security content of Safari 14.0.3 This document describes the security content of Safari 14.0.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CentOS 8 : dovecot (CESA-2020:4763)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4763 advisory. - dovecot: command followed by sufficient number of newlines leads to use-after-free CVE-2020-10958 - dovecot: sending mail with empty quoted localpart...

CentOS 8 : microcode_ctl (CESA-2020:5085)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5085 advisory. - hw: Information disclosure issue in Intel SGX via RAPL interface CVE-2020-8695 - hw: Vector Register Leakage-Active CVE-2020-8696 - hw: Fast forward...

CentOS 8 : virt:rhel (CESA-2020:1358)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1358 advisory. - QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server CVE-2020-1711 - QEMU: slirp: OOB buffer access while emulating tcp...

CentOS 8 : cups (CESA-2020:1765)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1765 advisory. - cups: stack-buffer-overflow in libcups's asn1gettype function CVE-2019-8675 - cups: stack-buffer-overflow in libcups's asn1getpacked function...

CentOS 8 : python27:2.7 (CESA-2020:4654)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4654 advisory. - python: infinite loop in the tarfile module via crafted TAR archive CVE-2019-20907 - python-pip: directory traversal in downloadhttpurl function in...

CentOS 8 : sane-backends (CESA-2020:2902)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2902 advisory. - sane-backends: Heap buffer overflow in epsondsnetread in epsonds-net.c CVE-2020-12861 - sane-backends: Heap buffer overflow in esci2img CVE-2020-1286...

CentOS 8 : libssh (CESA-2020:4545)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4545 advisory. - libssh: unsanitized location in scp could lead to unwanted command execution CVE-2019-14889 - libssh: denial of service when handling AES-CTR or DES...

CentOS 8 : unbound (CESA-2020:2416)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2416 advisory. - unbound: amplification of an incoming query into a large number of queries directed to a target CVE-2020-12662 - unbound: infinite loop via malformed...

CentOS 8 : libxslt (CESA-2020:4464)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4464 advisory. - libxslt: xsltCheckRead and xsltCheckWrite routines security bypass by crafted URL CVE-2019-11068 - libxslt: use after free in xsltCopyText in...

Fedora 33 : firefox / nss (2021-1d4180de72)

The remote Fedora 33 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-1d4180de72 advisory. - New Firefox version 85.0 with various Wayland fixes. New NSS version 3.60. FEDORA-2021-1d4180de72 Note that Nessus has not tested for this issue but has...