SUSE SLED15 / SLES15 Security Update : gpg2 (SUSE-SU-2019:0023-1)

This update for gpg2 fixes the following issue : Security issue fixed : CVE-2018-1000858: Fixed a Cross Site Request ForgeryCSRF vulnerability in dirmngr that can result in Attacker controlled CSRF bsc1120346. Note that Tenable Network Security has extracted the preceding description block direct...

Fedora 29 : wget (2019-088875c43a)

Update to upstream release 1.20.1 to fix CVE-2018-20483. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 29 : tcpreplay (2018-5f91054677)

This release 4.3.1 contains bug fixes only : - Fix checkspell detected typos 531 - Heap overflow packet2tree and getl2len 530 This is Tcpreplay suite 4.3.0 This release contains several bug fixes and enhancements : - Fix maxOS TOS checksum failure 524 - TCP sequence edits seeding 514 - Fix issues...

Fedora 29 : python3 / python3-docs (2019-f9d5bbef82)

Python update to 3.7.2. Read the release announcement or the full changelog. Mostly bugfixes, but also 2 security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 28 : tcpreplay (2018-166b220ff1)

This release 4.3.1 contains bug fixes only : - Fix checkspell detected typos 531 - Heap overflow packet2tree and getl2len 530 This is Tcpreplay suite 4.3.0 This release contains several bug fixes and enhancements : - Fix maxOS TOS checksum failure 524 - TCP sequence edits seeding 514 - Fix issues...

Debian DLA-1624-1 : thunderbird security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For Debian 8 'Jessie', this problem has been fixed in version 1:60.4.0-1deb8u1. We recommend that you upgrade your thunderbird packages. NOTE: Tenable Network Security...

WAS Target Scanning for PCI

This plugin reports http addresses for http and https pages of a scanned system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109394; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/05/24"; scriptnameenglish:"WAS Target Scannin...

Fedora 28 : poppler (2018-c8c7d35b83)

Security fix for CVE-2018-13988. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora 29 : roundcubemail (2018-24d1e5a2c3)

Version 1.3.8 This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability plus updates to ensure compatibility with PHP 7.3 and recent versions of...

Fedora 28 : php-simplesamlphp-saml2 (2018-85cb15befd)

SSPSA 201803-01 / CVE-2018-7711 - SSPSA 201802-01 / CVE-2018-7644 - SSPSA 201801-01 / CVE-2018-6519 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

Fedora 28 : libgcrypt (2018-1ea5beb4cf)

Minor security update to version 1.8.3 from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 29 : drupal8 (2018-4381dd7d0b)

8.x release notes - SA-CORE-2018-006 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 28 : qt3 (2018-17843a895b)

This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing...

Fedora 28 : firefox (2018-3f177356b0)

Update to latest stable upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : drupal8 (2018-7d748596e9)

8.x release notes - SA-CORE-2018-006 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 28 : gnupg2 / libgpg-error (2018-3dc16842e2)

Important security update to new upstream gnupg version 2.2.8 and libgpg-error 1.31 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 28 : chromium (2018-aafdbb5554)

The remote Fedora 28 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-aafdbb5554 advisory. Update to Chromium 65. For EPEL7, it has been a long time since a successful build has been possible, so this will fix a LOT of CVEs. CVE-2017-15396...

Fedora 28 : ming (2018-5f31e1002a)

Security fixes for: CVE-2017-8782, CVE-2017-9988, CVE-2017-9989, CVE-2017-11704, CVE-2017-11728, CVE-2017-11729, CVE-2017-11730, CVE-2017-11731, CVE-2017-11732, CVE-2017-11733, CVE-2017-11734, CVE-2017-16883, CVE-2017-16898, CVE-2018-5251, CVE-2018-5294, CVE-2018-6315, CVE-2018-6359 Note that...

Fedora 29 : cairo (2018-3a195026f5)

This update lowers amount of color artefacts around glyphs when subpixel rendering is enabled for text by using freetype's default LCD filter. It also fixes a crash caused by using of wrong function for freeing of memory CVE-2018-19876. Note that Tenable Network Security has extracted the precedi...

Fedora 28 : roundcubemail (2018-928e15e1db)

Version 1.3.8 This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability plus updates to ensure compatibility with PHP 7.3 and recent versions of...