Fedora 31 : community-mysql (2020-0ca47c5a7a)

MySQL 8.0.19 Release notes : https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-19.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 31 : elog (2020-f49fe7f011)

Security fix for CVE-2019-3993, CVE-2019-3994, CVE-2019-3995, CVE-2019-3992, CVE-2019-3996 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 30 : 1:transfig / xfig (2020-6a2824178e)

Security fix for CVE-2019-19746, CVE-2019-19797 - New upstream release 3.2.7b - Add patch fixing CVE-2019-19746 rhbz1787040 - Add patch fixing CVE-2019-19797 rhbz1786726 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora 30 : elog (2020-9f8bc040c8)

Security fix for CVE-2019-3993, CVE-2019-3994, CVE-2019-3995, CVE-2019-3992, CVE-2019-3996 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Debian DLA-2076-1 : slirp security update

An issue has been found in slirp, a SLIP/PPP emulator using a dial up shell account. Due to bad memory handling in slirp a heap-based buffer overflow or other out-of-bounds access could happen, which can lead to a DoS or potential execute arbitrary code. For Debian 8 'Jessie', this problem has be...

SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2020:0132-1)

This update for Mesa fixes the following issues : Security issue fixed : CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Fedora 30 : chromium (2020-4355ea258e)

Update to 79.0.3945.117. Fixes CVE-2020-6377. ---- Security fix for CVE-2019-13767. ---- Update to Chromium 79. Fixes the usual giant pile of bugs and security issues. This time, the list is : CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:0140-1)

This update for java-11-openjdk fixes the following issues : Update to version jdk-11.0.6-10 January 2020 CPU, bsc1160968 Fixing these security related issues : CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2020-2590: Improve Kerberos interop capabilities CVE-2020-2593: Normalize normalization...

Fedora 31 : 1:rubygem-rack (2020-57fc0d0156)

Update to Rack 2.0.8. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Photon OS 3.0: Ruby PHSA-2020-3.0-0047

An update of the ruby package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0047. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133068;...

Fedora 31 : 1:ImageMagick / rubygem-rmagick (2020-f006145643)

Security and bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Fedora 31 : gnulib (2020-663f619e9c)

Security fix for CVE-2018-17942 - Update on 2020-01-07 - CVE-2018-17942 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 31 : phpMyAdmin (2020-a1b4afe7b5)

Version 5.0.1 2020-01-07 - issue 15719 Fixed error 500 when browsing a table when $cfg'LimitChars' used a string and not an int value - issue 14936 Fixed display NULL on numeric fields has showing empty string since 5.0.0 - issue 15722 Fix get Database structure fails with PHP error on replicated...

Fedora 31 : kernel (2020-7fcf62839f)

Update to Linux v5.4.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Cisco FTD Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)

According to its self-reported version the Cisco Firepower Threat Defense FTD software running on the remote device is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisories for more information. Note that Nessus has not tested for this issue but ha...

Fedora 31 : ocsinventory-agent (2020-4c8a066b83)

Per Upstream, a malicious CA could result in unexpected inventory access with the System CA patch. The risk is very low. That patch is now dropped. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempte...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2020:0104-1)

This update for nodejs10 to version 10.18.0 fixes the following issues : Security issues fixed : CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. Added support for chacha20-poly1305 for Authenticated...

SUSE SLED12 / SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:0088-1)

This update for mozilla-nspr, mozilla-nss fixes the following issues : mozilla-nss was updated to NSS 3.47.1 : Security issues fixed : CVE-2019-17006: Added length checks for cryptographic primitives bsc1159819. CVE-2019-11745: EncryptUpdate should use maxout, not block size bsc1158527...

Solaris 10 (sparc) : 152252-03

SunOS 5.10: sudo Patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132896; scriptversion"1.1"; scriptcvsdate"Date:...

Debian DLA-2067-1 : wordpress security update

An input sanitization bypass was discovered in Wordpress, a popular content management framework. An attacker can use this flaw to send malicious scripts to an unsuspecting user. For Debian 8 'Jessie', this problem has been fixed in version 4.1.29+dfsg-0+deb8u1. We recommend that you upgrade your...