Fedora 30 : kmplayer (2019-9b1da08d62)

Update to 0.12.0b - Clean up SPEC - Remove patches - Use sed for make Phonon default - Use KF5 instead of KDE4 - Renew URLs - CVE-2019-9133 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

EulerOS 2.0 SP5 : openldap (EulerOS-SA-2019-1914)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for...

Ubuntu 16.04 LTS / 18.04 LTS : Wireshark vulnerabilities (USN-4133-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4133-1 advisory. It was discovered that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting...

Fedora 30 : sphinx (2019-9231a18768)

Security fix for CVE-2019-14511 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

EulerOS 2.0 SP5 : openssh (EulerOS-SA-2019-1908)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle...

OpenVPN Server 2.0.x < 2.0.4 Denial of Service Vulnerability

According to its self-reported version number, the version of OpenVPN server installed on the remote Windows host is version 2.0.x prior to 2.0.4. It is, therefore, affected by a denial of service DoS vulnerability in its TCP/IP accept function component. An unauthenticated, remote attacker can...

Debian DLA-1917-1 : curl security update

It was discovered that there was a heap buffer overflow vulnerability in curl, the library and command-line tool for transferring data over the internet. For Debian 8 'Jessie', this issue has been fixed in curl version 7.38.0-4+deb8u16. We recommend that you upgrade your curl packages. NOTE:...

Ubuntu 18.04 LTS : VLC vulnerabilities (USN-4131-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4131-1 advisory. It was discovered that VLC incorrectly handled certain media files. If a user were tricked into opening a specially-crafted file, a remote attacker could...

Photon OS 2.0: Python3 PHSA-2019-2.0-0171

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0171. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Binutils PHSA-2019-2.0-0173

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0173. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Expat PHSA-2019-3.0-0026

An update of the expat package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0026. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid128730...

Fedora 29 : cobbler (2019-cd24f60a94)

Update to 2.5.0 pre-release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Debian DLA-1914-1 : icedtea-web security update

Several security vulnerabilities were found in icedtea-web, an implementation of the Java Network Launching Protocol JNLP. CVE-2019-10181 It was found that in icedtea-web executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this fl...

Ubuntu 16.04 LTS / 18.04 LTS : Memcached vulnerability (USN-4125-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4125-1 advisory. It was discovered that Memcached incorrectly handled certain UNIX sockets. An attacker could possibly use this issue to access sensitive information...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2019:2336-1)

This update for java-171-ibm fixes the following issues : Update to Java 7.1 Service Refresh 4 Fix Pack 50. Security issues fixed : CVE-2019-11771: IBM Security Update July 2019 bsc1147021 CVE-2019-11775: IBM Security Update July 2019 bsc1147021 CVE-2019-4473: IBM Security Update July 2019...

Fedora 29 : qt5-qtwebengine (2019-5e4316109b)

Update to latest qtwebengine release, includes bug and security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 30 : pdfresurrect (2019-e01bc28777)

Security fix for CVE-2019-14267 - Security fix for CVE-2019-14934 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 29 : roundcubemail (2019-d9c2f1ec70)

Version 1.3.10 - Managesieve: Fix so 'Create filter' option does not show up when Filters menu is disabled 6723 - Enigma: Fix bug where revoked users/keys were not greyed out in key info - Enigma: Fix error message when trying to encrypt with a revoked key 6607 - Enigma: Fix 'decryption oracle' b...

Fedora 29 : golang (2019-65db7ad6c7) (Ping Flood) (Reset Flood)

Rebase to go1.11.13 - Security fix for CVE-2019-9512, CVE-2019-9514 and CVE-2019-14809 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Ubuntu 18.04 LTS : npm/fstream vulnerability (USN-4123-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4123-1 advisory. It was discovered that npm/fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write aritrary files to the filesyste...