Debian DLA-2196-2 : pound regression update

A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 'Jessie', this problem has been fixed in version 2.6-6+deb8u3. We recommend that you upgrade...

Debian DLA-2195-1 : w3m security update

Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support. One issue is related to a stack overflow, the other one is a fix for a NULL pointer dereference. Brief introduction CVE-2018-6196 Description CVE-2018-6197 Description For Debian 8 'Jessie', these problem...

EulerOS Virtualization for ARM 64 3.0.2.0 : libdb (EulerOS-SA-2020-1535)

According to the version of the libdb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain...

EulerOS Virtualization for ARM 64 3.0.2.0 : edk2 (EulerOS-SA-2020-1574)

According to the versions of the edk2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the socket.recvfrominto function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3....

Fedora 31 : python-bleach (2020-e1fa96c506)

Update to version 3.1.4, an upstream security release. See the upstream changelog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

SUSE SLES15 Security Update : salt (SUSE-SU-2020:1151-1)

This update for salt fixes the following issues : Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 30 : python-bleach (2020-827b677e15)

Update to version 3.1.4, an upstream security release. See the upstream changelog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 30 : libxml2 (2020-0c71c00af4)

Update to 2.9.10 and fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:1150-1)

This update for salt fixes the following issues : Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 31 : pxz (2020-07fcbfddbd)

Update to GIT 20200421 - Added patch against race condition in setting permissions on output file 1182024 - Added patch to revert environment redirect allowing export XZOPT='-9' or similar Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 30 : 1:openssl (2020-da2d1ef2d7)

Update to version 1.1.1g from upstream fixing possible remote DoS security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Google Chrome < 81.0.4044.129 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 81.0.4044.129. It is, therefore, affected by multiple vulnerabilities as referenced in the 202004stable-channel-update-for-desktop27 advisory. - Use after free in task scheduling in Google Chrome prior to 81.0.4044.129...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1141-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a stack...

SUSE SLED15 / SLES15 Security Update : apache2 (SUSE-SU-2020:1126-1)

This update for apache2 fixes the following issues : CVE-2020-1934: modproxyftp may use uninitialized memory when proxying to a malicious FTP server bsc1168404. CVE-2020-1927: modrewrite configurations vulnerable to open redirect bsc1168407. CVE-2020-1938: modproxyajp: Add 'secret' parameter to...

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2020:1135-1)

This update for webkit2gtk3 to version 2.28.1 fixes the following issues : Security issues fixed : CVE-2020-10018: Fixed a denial of service because the mdeferredFocusedNodeChange data structure was mishandled bsc1165528. CVE-2020-11793: Fixed a potential arbitrary code execution caused by a...

Photon OS 1.0: Libvirt PHSA-2020-1.0-0289

An update of the libvirt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1118-1)

The SUSE Linux Enterprise 12 SP5 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a...

Fedora 31 : php (2020-62ee541bbb)

PHP version 7.3.17 16 Apr 2020 Core: - Fixed bug php79364 When copy empty array, next key is unspecified. cmb - Fixed bug php78210 Invalid pointer address. cmb, Nikita CURL: - Fixed bug php79199 curlcopyhandle memory leak. cmb Date: - Fixed bug php79396 DateTime hour incorrect during DST jump...

Fedora 31 : git (2020-f6b3b6fb18)

Security fix for CVE-2020-5260 From the upstream release notes : With a crafted URL that contains a newline or empty host, or lacks a scheme, the credential helper machinery can be fooled into providing credential information that is not appropriate for the protocol in use and host being contacte...

Fedora 31 : gnuchess (2020-dbccd7e9be)

6.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...