EulerOS 2.0 SP8 : gcc (EulerOS-SA-2019-1825)

According to the versions of the gcc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The gcc package contains the GNU Compiler Collection version 4.8.You'll need this package in order to compile C code. - Security fixes: -...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20190806)

Security Fixes : - httpd: modauthdigest: access control bypass due to race condition CVE-2019-0217 - httpd: URL normalization inconsistency CVE-2019-0220 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128223;...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20190806)

Security Fixes : - systemd: line splitting via fgets allows for state injection during daemon-reexec CVE-2018-15686 - systemd: out-of-bounds read when parsing a crafted syslog message CVE-2018-16866 - systemd: kills privileged process if unprivileged PIDFile was tampered CVE-2018-16888 C Tenable...

Fedora 30 : libmodbus (2019-4942e01cdc)

Addresses CVE-2019-14462 and CVE-2019-14463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora 29 : 1:nodejs (2019-6a2980de56) (0-Length Headers Leak) (Empty Frames Flood) (Internal Data Buffering) (Ping Flood) (Reset Flood) (Resource Loop) (Settings Flood)

Update to Node.js 10.6.13 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Debian DLA-1895-1 : libmspack security update

JsHuang found an issue in libmspack, a library for Microsoft compression format. Opening a crafted chm file might result in a buffer overflow which might disclose confidential information. For Debian 8 'Jessie', this problem has been fixed in version 0.5-1+deb8u4. We recommend that you upgrade yo...

Virtuozzo 6 : openssl / openssl-devel / openssl-perl / etc (VZLSA-2019-2471)

An update for openssl is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 7 : Ansible (RHSA-2019:2544)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2544 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-1804)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application...

Tenable Nessus < 8.6.0 Denial of Service vulnerability (TNS-2019-05)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior or equal to 8.5.2. It is, therefore, affected by a denial of service vulnerability due to a flaw where certain files could be overwritten arbitrarily. An authenticated, remote attacker could...

SUSE SLES12 Security Update : postgresql96 (SUSE-SU-2019:2159-1)

This update for postgresql96 fixes the following issues : Security issue fixed : CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner bsc1145092. Note that Tenable Network Security has extracted the preceding description blo...

Ubuntu 18.04 LTS : OpenJPEG vulnerabilities (USN-4109-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4109-1 advisory. It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly...

Ubuntu 18.04 LTS : Zstandard vulnerability (USN-4108-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4108-1 advisory. It was discovered that Zstandard incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. Tenable has extracted th...

Ubuntu 16.04 LTS / 18.04 LTS : GIFLIB vulnerabilities (USN-4107-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4107-1 advisory. It was discovered that GIFLIB incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of service...

Ubuntu 16.04 LTS / 18.04 LTS : NLTK vulnerability (USN-4106-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4106-1 advisory. Mike Salvatore discovered that NLTK mishandled crafted ZIP archives during extraction. A remote attacker could use this vulnerability to write arbitra...

Fedora 30 : python-django (2019-647f74ce51)

fixes for CVE-2019-14232 to 14235 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

Fedora 30 : 1:libreoffice (2019-dd9d207c17)

CVE-2019-9850 Insufficient url validation allowing LibreLogo script execution - CVE-2019-9851 LibreLogo global-event script execution - CVE-2019-9852 Insufficient URL encoding flaw in allowed script location check - latest stable version Note that Tenable Network Security has extracted the...

Fedora 29 : mgetty (2019-732b5488c2)

Security fix for CVE-2019-1010189 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

Fedora 29 : 3:mariadb / mariadb-connector-c / mariadb-connector-odbc (2019-f873e2799f)

MariaDB 10.3.17 Release notes : https://mariadb.com/kb/en/mariadb-10317-release-notes/ MariaDB Connector/C 3.1.3 Release notes : https://mariadb.com/kb/en/mariadb-connector-c-313-release-notes/ MariaDB Connector/ODBC 3.1.2 Release notes :...

Ubuntu 16.04 LTS / 18.04 LTS : Nova vulnerability (USN-4104-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4104-1 advisory. Donny Davis discovered that the Nova Compute service could return configuration or other information in response to a failed API request in some...