Fedora 30 : mingw-wavpack (2020-73274c9df4)

Security fixes for: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841 CVE-2019-11498 CVE-2019-1010315 CVE-2019-1010319 CVE-2019-1010317 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Solaris 10 (sparc) : 144674-02

SunOS 5.10: GNU patch patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132893; scriptversion"1.1"; scriptcvsdate"Date:...

Debian DLA-2067-1 : wordpress security update

An input sanitization bypass was discovered in Wordpress, a popular content management framework. An attacker can use this flaw to send malicious scripts to an unsuspecting user. For Debian 8 'Jessie', this problem has been fixed in version 4.1.29+dfsg-0+deb8u1. We recommend that you upgrade your...

Fedora 30 : 1:dovecot (2019-72e5ac943a)

Security fix for CVE-2019-19722: NULL pointer dereference in push notification driver Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 30 : python36 (2019-7ec5bb5d22)

Python 3.6.10 is the latest security fix release of Python 3.6. Security fix for CVE-2019-16056, CVE-2019-16935. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2020:0069-1)

This update for openssl-11 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Various FIPS related improvements were done: FIPS: Backport SSH KDF to openssl...

Fedora 31 : chromium (2020-581537c8aa)

Update to 79.0.3945.117. Fixes CVE-2020-6377. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Debian DLA-2065-1 : apache-log4j1.2 security update

Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. For...

Debian DLA-2061-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltration or cross-site scripting. For Debian 8 'Jessie', these problems have been fixed in version 68.4.0esr-1deb8u1. We recommend that you...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2020:0043-1)

This update for nodejs8 to version 8.17.0 fixes the following issues : Security issues fixed : CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:0025-1)

This update for java-180-openjdk fixes the following issues : Update to version jdk8u232 icedtea 3.14.0 October 2019 CPU, bsc1154212 Security issues fixed : CVE-2019-2933: Windows file handling redux CVE-2019-2945: Better socket support CVE-2019-2949: Better Kerberos ccache handling CVE-2019-2958...

SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:0028-1)

This update for openssl-100 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Note that Tenable Network Security has extracted the preceding description block...

Fedora 31 : htmldoc (2019-e90a7032f2)

Update to latest release and include fix for CVE-2019-19630 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 30 : htmldoc (2019-e039dfaa30)

Update to latest release and include fix for CVE-2019-19630 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 30 : heimdal (2019-2fa7d6405b)

Security fix for CVE-2019-12098 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 31 : wordpress (2019-e16ba9e54e)

WordPress 5.3.2 Maintenance Release Shortly after WordPress 5.3.1 was released, a couple of high severity Trac tickets were opened. The Core team scheduled this quick maintenance release to resolve these issues. Main issues addressed in 5.3.2 : - Date/Time: Ensure that getfeedbuilddate correctly...

Fedora 30 : drupal7-webform (2019-6abe00cae1)

https://www.drupal.org/project/webform/releases/7.x-4.21 - https://www.drupal.org/sa-contrib-2019-096 - https://www.drupal.org/project/webform/releases/7.x-4.20 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable...

Fedora 31 : cyrus-imapd (2019-ad23a4522d)

Update to new upstream version 3.0.13, which includes a fix for CVE-2019-19783 and other minor fixes. Release notes: https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.13.htm l Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

EulerOS 2.0 SP8 : python2 (EulerOS-SA-2020-1024)

According to the version of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as...

EulerOS 2.0 SP8 : flatpak (EulerOS-SA-2020-1004)

According to the version of the flatpak packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address...