Security Bulletin: IBM Multicloud Manager contains sensitive information upon deployment (CVE-2019-4118)

Summary The IBM Multicloud Manager ibm-mcm-chart contains sensitive information upon deployment. Vulnerability Details CVEID: CVE-2019-4118 DESCRIPTION: IBM Multicloud Manager ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment...

Photon OS 2.0: Systemd PHSA-2019-2.0-0166

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0166. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Kubernetes PHSA-2019-1.0-0242

An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0242. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Envoy PHSA-2019-1.0-0241

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0241. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126478...

Photon OS 1.0: Binutils PHSA-2019-1.0-0242

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0242. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Bzip2 PHSA-2019-1.0-0242

An update of the bzip2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0242. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid126471...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20190702)

Security Fixes : - QEMU: Slirp: information leakage in tcpemu due to uninitialized stack variables CVE-2019-9824 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid126455; scriptversion"1.4";...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Android July 2019 Security Update Patches 33 New Vulnerabilities

Google has started rolling out this month's security updates for its mobile operating system platform to address a total of 33 new security vulnerabilities affecting Android devices, 9 of which have been rated critical in severity. The vulnerabilities affect various Android components, including...

Photon OS 3.0: Linux PHSA-2019-3.0-0009

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126378;...

Photon OS 3.0: Python PHSA-2019-3.0-0009

An update of the python package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126379;...

FreeBSD : Django -- Incorrect HTTP detection with reverse-proxy connecting via HTTPS (b805d7b4-9c0c-11e9-97f0-000c29e96db4)

Django security releases issued : When deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme would incorrectly detect client requests made via HTTP as using HTTPS. This entails incorrect results for issecure, and buildabsoluteuri, and that HTTP requests...

Photon OS 3.0: Libseccomp PHSA-2019-3.0-0009

An update of the libseccomp package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126376;...

Photon OS 3.0: Python2 PHSA-2019-3.0-0009

An update of the python2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126380;...

FreeBSD : TYPO3 -- multiple vulnerabilities (5e35cfba-9994-11e9-b07f-df5abf8b84d6)

TYPO3 news : Please read the corresponding Security Advisories for details. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use in sourc...

Security Bulletin: IBM Cloud Private Monitoring is vulnerable to XSS attack in Prometheus (CVE-2018-14041)

Summary IBM Cloud Private Monitoring is vulnerable to XSS attack in Prometheus Vulnerability Details CVEID: CVE-2018-14041 DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the data-target property of scrollspy. A remote attacker...

Fedora 30 : php-brumann-polyfill-unserialize / php-typo3-phar-stream-wrapper2 (2019-a8121923d5)

Two security updates have been released for PharStreamWrapper. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

RHEL 6 : firefox (RHSA-2019:1604)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1604 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

June 26, 2019—KB4509478 (OS Build 17134.860)

None None...

RHEL 7 : firefox (RHSA-2019:1603)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1603 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...