EulerOS Virtualization 3.0.1.0 : scsi-target-utils (EulerOS-SA-2019-1427)

According to the versions of the scsi-target-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or...

EulerOS Virtualization for ARM 64 3.0.1.0 : sssd (EulerOS-SA-2019-1411)

According to the versions of the sssd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of...

EulerOS Virtualization for ARM 64 3.0.1.0 : dnsmasq (EulerOS-SA-2019-1380)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafte...

Debian DLA-1782-1 : openjdk-7 security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the execution of arbitrary code. For Debian 8 'Jessie', these problems have been fixed in version 7u221-2.6.18-1deb8u1...

SUSE SLES11 Security Update : samba (SUSE-SU-2019:14042-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issue fixed: Make init scripts create log directories before...

Fedora 30 : mosquitto (2019-cc896df591)

1.6.2 ===== Broker : - Fix memory access after free, leading to possible crash, when v5 client with Will message disconnects, where the Will message has as its first property one of content-type, correlation-data, payload-format-indicator, or response-topic. - Fix build for WITHTLS=no. - Fix Will...

Fedora 28 : 1:java-11-openjdk (2019-ca4ee3510d)

Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2019-April/0009 51.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...

Cisco Firepower Management Center XSS Vulnerability

According to its self-reported version, the Cisco Firepower Management Center is by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

JQuery < 3.4.0 Object Prototype Pollution Vulnerability

The version of JQuery library hosted on the remote web server is prior to 3.4.0. It is, therefore, affected by an object pollution vulnerability in jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could exte...

Fedora 30 : kernel / kernel-tools (2019-5b76e711b3)

The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi. Note that Tenable Network...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2019:1196-1)

This update for mutt fixes the following issues : Security issues fixed : bsc1101428: Mutt 1.10.1 security release update. CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

Fedora 28 : filezilla / libfilezilla (2019-d109db9c8a)

Fix for CVE-2019-5429 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2019:1181-1)

This update for freeradius-server fixes the following issues : Security issues fixed : CVE-2019-11235: Fixed an authentication bypass related to the EAP-PWD Commit frame and insufficent validation of elliptic curve points bsc1132549. CVE-2019-11234: Fixed an authentication bypass caused by...

Fedora 29 : drupal8 (2019-7eaf0bbe7c)

https://www.drupal.org/project/drupal/releases/8.6.15 - https://www.drupal.org/SA-CORE-2019-005 CVE-2019-10909 / CVE-2019-10910 / CVE-2019-10911 - https://www.drupal.org/SA-CORE-2019-006 CVE-2019-11358 - https://www.drupal.org/project/drupal/releases/8.6.14 Note that Tenable Network Security has...

Fedora 28 : kernel (2019-a6cd583a8d)

The 5.0.11 update contains a number of important fixes across the tree. Note there were no changes to headers or tools so there are no builds for those. ---- The 5.0.10 update contains a number of important fixes across the tree. Note there were no changes to the headers or tools packages so ther...

Debian DLA-1777-2 : jquery regression update

The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7 For Debian 8 'Jessie', this problem has been fixed in version 1.7.2+dfsg-3.2+deb8u7. We recommend that you upgrade your jquery...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2019:1136-1)

This update for openssl fixes the following issues : Reject invalid EC point coordinates bsc1131291 This helps openssl using services that do not do this verification on their own. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Fedora 30 : 1:java-11-openjdk (2019-a8996fb898)

Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2019-April/0009 51.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...

Fedora 29 : kernel (2019-8219efa9f6)

The 5.0.10 update contains a number of important fixes across the tree Note there were no updates to the header or tools so there are no builds for those packages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenab...

Fedora 30 : kernel (2019-87d807d7cb)

The 5.0.10 update contains a number of important fixes across the tree Note there were no changes to the tools or headers packages so those are not built. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...