Fedora 21 : mailx-12.5-14.fc21 (2014-17243)

Security fix for CVE-2004-2771, CVE-2014-7844 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 20 : ettercap-0.8.1-2.fc20 (2014-17107)

Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Tenable SecurityCenter Multiple DoS (TNS-2014-11)

The SecurityCenter application installed on the remote host is affected by multiple denial of service vulnerabilities in the bundled OpenSSL library. The library is version 1.0.1 prior to 1.0.1j. It is, therefore, affected by the following vulnerabilities : - A memory leak exists in the DTLS SRTP...

Fedora 20 : php-5.5.20-2.fc20 (2014-17229)

18 Dec 2014, PHP 5.5.20\r\n\r\nCore:\r\n Fixed bug 68091 Some Zend headers lack appropriate extern 'C' blocks. Adam\r\n Fixed bug 68185 'Inconsistent insteadof definition.'- incorrectly triggered. Julien\r\n Fixed bug 68370 'unset$this' can make the program crash. Laruence\r\n Fixed bug 68545 NUL...

Fedora 19 : seamonkey-2.31-1.fc19 (2014-17217)

Update to 2.31 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 21 : nss-3.17.3-2.fc21 (2014-17085)

Updated nss package fixes a conflict among the nss-tools pp man page an the similarly named one from perl-PARPackager. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

GitHub < 1.9.4 .git/config Command Execution (Mac OS X)

The remote Mac OS X host has a version of GitHub prior to 194 installed. It is, therefore, affected by a remote command execution vulnerability when processing git trees in a case-insensitive or case-normalizing file system. A remote attacker, using a specially crafted git tree, can overwrite a...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3106)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3106 advisory. - isofs: Fix unbounded recursion when processing relocated directories Jan Kara Orabug: 20224059 CVE-2014-5471 CVE-2014-5472 Tenable has extracted...

Oracle Linux 6 / 7 : jasper (ELSA-2014-2021)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-2021 advisory. - CVE-2014-8137 - double-free in in jasiccattrvaldestroy 1173566 - CVE-2014-8138 - heap overflow in jp2decode 1173566 - CVE-2014-9029 - incorrect...

SSL Custom CA Setup

Configure the loading of the certificate authorities for SSL validation. This will load the Tenable-managed default certificate authorities and allow Nessus users to load custom certificate authorities. Multiple custom CA files are available to help with the management of custom certificate...

Oracle Linux 6 : kernel (ELSA-2014-1997)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1997 advisory. - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 - fs udf: Avoid infinite loop when processing indirect ICBs Jacob...

Fedora 21 : dbus-1.8.12-1.fc21 (2014-16147)

Update to 1.8.12 1168438 - Fixes CVE-2014-3635 fd.o83622 - Fixes CVE-2014-3636 fd.o82820 - Fixes CVE-2014-3637 fd.o80559 - Fixes CVE-2014-3638 fd.o81053 - Fixes CVE-2014-3639 fd.o80919 - Fixes CVE-2014-7824 fd.o85105 Note that Tenable Network Security has extracted the preceding description block...

Fedora 21 : asterisk-11.14.1-1.fc21 (2014-15621)

Fri Nov 21 2014 Jeffrey C. Ollie - 11.14.1-1 - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28 and 11.6 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28-cert3, 11.6-cert8, 1.8.32.1, - 11.14.1, 12.7.1,...

Ubuntu 14.10 : linux vulnerabilities (USN-2448-1)

An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine KVM paravirt guests. A user in the guest OS could exploit this leak to obtain information that could potentially be used to aid in attacking the...

Ubuntu 14.04 LTS : Mutt vulnerability (USN-2440-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2440-1 advisory. Jakub Wilk discovered that the writeoneheader function in mutt did not properly handle newline characters at the beginning of a header. An attacker could speciall...

Fedora 21 : libuv-0.10.29-1.fc21 / nodejs-0.10.33-1.fc21 (2014-15411) (POODLE)

This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default for the most predominate uses of TLS in Node.js. It took longer than expected to get this release accomplished in a way that would provide appropriate default security settings, while minimizing the surface...

Fedora 20 : libuv-0.10.29-1.fc20 / nodejs-0.10.33-1.fc20 (2014-15379) (POODLE)

This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default for the most predominate uses of TLS in Node.js. It took longer than expected to get this release accomplished in a way that would provide appropriate default security settings, while minimizing the surface...

Oracle Linux 5 / 6 / 7 : bind (ELSA-2014-1984)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1984 advisory. 32:9.9.4-14.0.1.el70.1 - Rebuild to fix libmysqlclient dependency 32:9.9.4-14.1 - Fix CVE-2014-8500 1171975 Tenable has extracted the preceding...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2446-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2446-1 advisory. Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment SS register in the x86 architecture. A...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3104)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3104 advisory. - HID: magicmouse: sanity check report size in rawevent callback Jiri Kosina Orabug: 19849355 CVE-2014-3181 - ALSA: control: Protect user controls...