Fedora 30 : 7:squid (2019-c1e06901bc)

Security fix for CVE-2019-13345. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2019:2018-1)

This update for polkit fixes the following issues : Security issue fixed : CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend bsc1121826. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2071-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-20855: An issue was discovered in the Linux kernel In createqpcommon in drivers/infiniband/hw/mlx5/qp.c, mlx5ibcreateqpresp was never initialized, resulting ...

Fedora 29 : python-twisted (2019-b67877d7c2)

Fix CVE-2019-12387 rhbz1719503 rhbz1719501 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenab...

Debian DSA-4493-1 : postgresql-11 - security update

Two security issues have been discovered in the PostgreSQL database system, which could result in privilege escalation, denial of service or memory disclosure. For additional information please refer to the upstream announcement at https://www.postgresql.org/about/news/1960/ C Tenable Network...

SUSE SLED15 / SLES15 Security Update : Linux Azure Kernel (SUSE-SU-2019:2068-1)

The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-20855: An issue was discovered in createqpcommon, mlx5ibcreateqpresp was never initialized, resulting in a leak of stack memory to userspace...

Fedora 30 : upx (2019-9a0f02c8c8)

Patches for CVE-2019-14295, CVE-2019-14296 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenab...

Fedora 29 : kernel / kernel-headers / kernel-tools (2019-6bda4c81f4)

The 5.2.7 stable kernel update contains a number of important fixes across the tree. ---- The 5.2.6 kernel rebase contains new hardware support, features, and a number of important bug fixes across the tree. ---- Update to v5.1.12 Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2070-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-20855: An issue was discovered in the Linux kernel In createqpcommon in drivers/infiniband/hw/mlx5/qp.c, mlx5ibcreateqpresp was never initialized,...

Debian DLA-1872-1 : python-django security update

It was discovered that there were two vulnerabilities in the Django web development framework : - CVE-2019-14232: Prevent a possible denial of service in django.utils.text.Truncator. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely...

Debian DLA-1868-1 : squirrelmail security update

A XSS vulnerability was discovered in SquirrelMail. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mails can be executed within the application context via crafted use of for example a NOEMBED...

SUSE SLED12 / SLES12 Security Update : bzip2 (SUSE-SU-2019:2013-1)

This update for bzip2 fixes the following issues : Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors bsc1139083. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Fedora 30 : php (2019-ec40d89812)

PHP version 7.2.21 01 Aug 2019 Date: - Fixed bug php69044 discrepency between time and microtime. krakjoe EXIF: - Fixed bug php78256 heap-buffer-overflow on exifprocessusercomment. CVE-2019-11042 Stas - Fixed bug php78222 heap-buffer-overflow on exifscanthumbnail. CVE-2019-11041 Stas Fileinfo: -...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2019:2036-1)

This update for java-180-openjdk to version 8u222 fixes the following issues : Security issues fixed : CVE-2019-2745: Improved ECC Implementation bsc1141784. CVE-2019-2762: Exceptional throw cases bsc1141782. CVE-2019-2766: Improve file protocol handling bsc1141789. CVE-2019-2769: Better copies o...

Fedora 29 : aubio (2019-b1157fdfdc)

The remote Fedora 29 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-b1157fdfdc advisory. Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802 Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 30 : deepin-clone / dtkcore / dtkwidget (2019-3d418f349c)

Security fix for CVE-2019-13228, CVE-2019-13229, CVE-2019-13227, CVE-2019-13226. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 30 : sqlite (2019-02b81266b7)

Fixed out of bounds heap read in function rtreenode Enhance the rtreenode function of rtree used for testing so that it uses the newer sqlite3str object for better performance and improved error reporting. Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 30 : kernel / kernel-headers (2019-9d3fe6fd5b)

Update to v5.1.19 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 29 : postgresql (2019-e43f49b428)

New upstream release 10.9 Per release notes: https://www.postgresql.org/docs/10/release-10-9.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

EulerOS 2.0 SP8 : lua (EulerOS-SA-2019-1776)

According to the version of the lua packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Lua 5.3.5 has a use-after-free in luaupvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a...