Debian DLA-1856-1 : patch security update

Handling of symlinks in patch, a tool to apply a diff file to an original, was wrong in certain cases. For Debian 8 'Jessie', this problem has been fixed in version 2.7.5-1+deb8u2. We recommend that you upgrade your patch packages. NOTE: Tenable Network Security has extracted the preceding...

EulerOS 2.0 SP2 : php (EulerOS-SA-2019-1723)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read pa...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:1910-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

This update for ucode-intel fixes the following issues : This update contains the Intel QSR 2019.1 Microcode release bsc1111331 Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS...

Fedora 30 : gvfs (2019-6ed5523cc0)

Update to 1.40.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

EulerOS 2.0 SP2 : perl (EulerOS-SA-2019-1717)

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write...

Debian DLA-1857-1 : nss security update

Vulnerabilities have been discovered in nss, the Mozilla Network Security Service library. CVE-2019-11719: Out-of-bounds read when importing curve25519 private key When importing a curve25519 private key in PKCS8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in th...

EulerOS 2.0 SP2 : dump (EulerOS-SA-2019-1740)

According to the version of the dump package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could creat...

EulerOS 2.0 SP2 : binutils (EulerOS-SA-2019-1728)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - binutils: integer overflow leads to heap-based buffer overflow in objdumpCVE-2018-1000876 - An issue was discovered in GNU Binutils 2.32. It i...

SUSE SLED15 / SLES15 Security Update : LibreOffice (SUSE-SU-2019:1894-1)

This update for libreoffice and libraries fixes the following issues : LibreOffice was updated to 6.2.5.2 fate327121 bsc1128845 bsc1123455, bringing lots of bug and stability fixes. Additional bugfixes : If there is no firebird engine we still need java to run hsqldb bsc1135189 PPTX: Rectangle...

SUSE SLED12 / SLES12 Security Update : libxslt (SUSE-SU-2019:1867-1)

This update for libxslt fixes the following issues : Security issues fixed : CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095. Note th...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1870-1) (SACK Slowness)

The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario...

SUSE SLED15 / SLES15 Security Update : glibc (SUSE-SU-2019:1877-1)

This update for glibc fixes the following issues : Security issues fixed : CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match bsc1127308. CVE-2009-5155: Fixed a denial of service in parseregexp bsc1127223. Non-security issues fixed: Does ...

Fedora 29 : kernel / kernel-headers (2019-a95015e60f)

Update to v5.1.18 ---- Update to v5.1.17 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

SUSE SLED15 / SLES15 Security Update : bzip2 (SUSE-SU-2019:1846-1)

This update for bzip2 fixes the following issues : Security issue fixed : CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1139083. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

Solaris 10 (sparc) : 125731-15

SunOS 5.10: XML and XSLT libraries patch. Date this patch was last updated by Sun : Jul/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid126717; scriptversion"1.3";...

Fedora 29 : python36 (2019-7df59302e0)

Update Python 3.6 to 3.6.9, the latest security release of the 3.6 branch. Changelog for 3.6.9 final and 3.6.9 release candidate 1. Includes security fixes for CVE-2019-9636, CVE-2019-9740, CVE-2019-10160. Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLED12 / SLES12 Security Update : Test update for SUSE:SLE-12-SP5:Update (security) (SUSE-SU-2019:1793-1)

This is a security test update for SUSE:SLE-12-SP5:Update Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian DLA-1852-1 : python3.4 security update

The urllib library in Python ships support for a second, not well known URL scheme for accessing local files 'localfile://'. This scheme can be used to circumvent protections that try to block local file access and only block the well-known 'file://' schema. This update addresses the vulnerabilit...

Slackware 14.2 / current : mozilla-firefox (SSA:2019-191-01)

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-191-01. The text itself is copyright C Slackware Linux,...

Debian DLA-1850-1 : redis security update

It was discovered that there were two heap buffer overflows in the Hyperloglog functionality provided by the Redis in-memory key-value database. For Debian 8 'Jessie', these issues have been fixed in redis version 2:2.8.17-1+deb8u7. We recommend that you upgrade your redis packages. NOTE: Tenable...