Fedora 31 : python39 (2020-aab24d3714)

Python 3.9.0b5 update. Contains security fix for CVE-2019-20907. Full changelog. Large autogenerated modules pydocdata and several encodings are now present as pyc optimization 0 files only. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 32 : systemd (2020-2faf839786)

Contains a bunch of patches for the assorted linked bugzillas. Handling of user names that resemble numerical uids is tightened CVE-2020-13776. The hardware database is updated to the upstream version. Note that Tenable Network Security has extracted the preceding description block directly from...

EulerOS 2.0 SP8 : ntp (EulerOS-SA-2020-1817)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet...

EulerOS 2.0 SP8 : ant (EulerOS-SA-2020-1794)

According to the version of the ant packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2077-1)

This update for grub2 fixes the following issues : CVE-2020-10713 bsc1168994 CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 CVE-2020-15706 bsc1174463 CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expression for buffer allocations may...

Debian DLA-2295-1 : curl security update

A vulnerbailty was found in curl, a command line tool for transferring data with URL syntax. When using when using -J --remote-header-name and -i --include in the same command line, a malicious server could force curl to overwrite the contents of local files with incoming HTTP headers. For Debian...

SUSE SLES15 Security Update : grub2 (SUSE-SU-2020:2073-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2074-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2078-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

Photon OS 1.0: Mysql PHSA-2020-1.0-0309

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0309. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139049...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2020:1990-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.28.3 bsc1173998 : + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:1974-1)

This update for salt contains the following fixes : Fix for TypeError in Tornado importer bsc1174165 Require python3-distro only for TW bsc1173072 Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/3000.html Add docker.logout to docker execution...

Fedora 31 : 2:samba / libldb (2020-5131d30947)

Update to Samba 4.11.11 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

openSUSE Security Update : rust / rust-cbindgen (openSUSE-2020-933)

This update for rust, rust-cbindgen fixes the following issues : - Updated openssl-src to 1.1.1g for CVE-2020-1967. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-933. The text description of this...

Fedora 32 : nspr / nss (2020-3ef1937475)

Updates the nspr and nss package to upstream NSPR 4.26 and NSS 3.54. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes : - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.54releasenotes Note that Tenable Network...

Fedora 32 : python39 (2020-705c6ea5be)

Update to 3.9.0b4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

SUSE SLED15 / SLES15 Security Update : xrdp (SUSE-SU-2020:1933-1)

This update for xrdp fixes the following issues : Security fixes bsc1173580, CVE-2020-4044 : + Add patches : - xrdp-cve-2020-4044-fix-0.patch - xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch : - xrdp-fate318398-change-expired-password.patch Note that Tenable Network Security has extracted the...

Photon OS 3.0: Sqlite PHSA-2020-3.0-0113

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0113. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13852...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:1891-1)

This update for xen fixes the following issues : CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. CVE-2020-15566: Fixed incorrect error handling in event channel port allocation bsc1173376...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:1913-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets bsc1173359...