Ubuntu 18.04 LTS : poppler vulnerability (USN-4091-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4091-1 advisory. It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service. Tenable has extracte...

Fedora 29 : python-twisted (2019-b67877d7c2)

Fix CVE-2019-12387 rhbz1719503 rhbz1719501 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenab...

Ubuntu 18.04 LTS : BWA vulnerability (USN-4087-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4087-1 advisory. It was discovered that Burrows-Wheeler Aligner BWA mishandled certain crafted .alt files. An attacker could use this vulnerability to cause a denial of service...

Debian DSA-4493-1 : postgresql-11 - security update

Two security issues have been discovered in the PostgreSQL database system, which could result in privilege escalation, denial of service or memory disclosure. For additional information please refer to the upstream announcement at https://www.postgresql.org/about/news/1960/ C Tenable Network...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2019:2018-1)

This update for polkit fixes the following issues : Security issue fixed : CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend bsc1121826. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2071-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-20855: An issue was discovered in the Linux kernel In createqpcommon in drivers/infiniband/hw/mlx5/qp.c, mlx5ibcreateqpresp was never initialized, resulting ...

SUSE SLED15 / SLES15 Security Update : Linux Azure Kernel (SUSE-SU-2019:2068-1)

The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-20855: An issue was discovered in createqpcommon, mlx5ibcreateqpresp was never initialized, resulting in a leak of stack memory to userspace...

Fedora 30 : 7:squid (2019-c1e06901bc)

Security fix for CVE-2019-13345. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-4069-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4069-2 advisory. USN-4069-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.04. This update provides the corresponding updates for the Linux Hardware Enablement H...

Fedora 30 : openqa / os-autoinst (2019-c404576415)

This update provides recent git snapshots of os-autoinst and openQA, with the usual slate of bug fixes and changes from upstream. Also, the AMQP plugin is now enabled, as the dependencies have been packaged into Fedora. The update also addresses some potential security issues. Note that Tenable...

Fedora 29 : 1:java-1.8.0-openjdk (2019-3854a1727e)

July CPU update. See: http://openjdk.java.net/groups/vulnerability/advisories/2019-07-16 and http://mail.openjdk.java.net/pipermail/jdk8u-dev/2019-July/009840.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Ubuntu 16.04 LTS : Subversion vulnerabilities (USN-4082-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4082-1 advisory. Ace Olszowka discovered that Subversion incorrectly handled certain svnserve requests. A remote attacker could possibly use this issue to cause svnserver...

Debian DLA-1872-1 : python-django security update

It was discovered that there were two vulnerabilities in the Django web development framework : - CVE-2019-14232: Prevent a possible denial of service in django.utils.text.Truncator. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2070-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-20855: An issue was discovered in the Linux kernel In createqpcommon in drivers/infiniband/hw/mlx5/qp.c, mlx5ibcreateqpresp was never initialized,...

Debian DLA-1868-1 : squirrelmail security update

A XSS vulnerability was discovered in SquirrelMail. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mails can be executed within the application context via crafted use of for example a NOEMBED...

Fedora 29 : kernel / kernel-headers / kernel-tools (2019-6bda4c81f4)

The 5.2.7 stable kernel update contains a number of important fixes across the tree. ---- The 5.2.6 kernel rebase contains new hardware support, features, and a number of important bug fixes across the tree. ---- Update to v5.1.12 Note that Tenable Network Security has extracted the preceding...

Fedora 30 : kernel / kernel-headers / kernel-tools (2019-a7f551b8c9)

The 5.2.6 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 30 : upx (2019-9a0f02c8c8)

Patches for CVE-2019-14295, CVE-2019-14296 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenab...

Fedora 29 : aubio (2019-b1157fdfdc)

The remote Fedora 29 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-b1157fdfdc advisory. Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802 Tenable has extracted the preceding description block directly from the Fedora securit...

RHEL 7 : qemu-kvm-rhev (RHSA-2019:1968)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1968 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...