Virtuozzo 6 : python / python-devel / python-libs / python-test / etc (VZLSA-2019-1467)

An update for python is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Virtuozzo 6 : qemu-guest-agent / qemu-img / qemu-kvm / etc (VZLSA-2020-4056)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4056 advisory. - QEMU: usb: out-of-bounds r/w access issue while processing usb packets CVE-2020-14364 Note that Nessus has not tested for this issue but has instea...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2020:3895-1)

This update for ceph fixes the following issues : Security issue fixed : CVE-2020-27781: Fixed a privilege escalation via the cephvolumeclient Python interface bsc1180155, bsc1179802. Non-security issues fixed : Update to 15.2.8-80-g1f4b6229ca : + Rebase on tip of upstream 'octopus' branch, SHA1...

CVE-2020-5808

In certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the user's defined scan zone without a particular zone being specified within the Automatic Distribution configuration...

Fedora 32 : phpldapadmin (2020-c6fa47ecd7)

Update to 1.2.6.2 1906752 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 33 : mingw-jasper (2020-c549cf2462)

This update backports a patch for CVE-2020-27828. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. ...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:3883-1)

This update for ovmf fixes the following issues : CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

Fedora 33 : matrix-synapse (2020-eeb66c2ece)

Upstream release notes: https://github.com/matrix-org/synapse/blob/master/CHANGES.mdsynapse-1 240rc1-2020-12-02 This release includes some minor changes which may affect homeserver admins: https://github.com/matrix-org/synapse/blob/develop/UPGRADE.rstupgradi ng-to-v1240 Note that Tenable Network...

Debian DLA-2502-1 : postsrsd security update

A potential denial of service attack through malicious timestamp tags was fixed in PostSRSd, a Sender Rewriting Scheme SRS lookup table for Postfix. For Debian 9 stretch, this problem has been fixed in version 1.4-1+deb9u1. We recommend that you upgrade your postsrsd packages. For the detailed...

Tenable Network Security Tenable.Sc Security Vulnerability

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, USA. The product supports real-time vulnerability assessment and management, among other things. A security vulnerability exists in versions of Tenable.sc prior to 5.17.0, which stems from the...

Fedora 32 : matrix-synapse (2020-a2172c484d)

Upstream release notes: https://github.com/matrix-org/synapse/blob/master/CHANGES.mdsynapse-1 240rc1-2020-12-02 This release includes some minor changes which may affect homeserver admins: https://github.com/matrix-org/synapse/blob/develop/UPGRADE.rstupgradi ng-to-v1240 Note that Tenable Network...

Fedora 33 : phpldapadmin (2020-6cc5654c0e)

Update to 1.2.6.2 1906752 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 32 : chromium (2020-5b9c42f1b9)

Update to 87.0.4280.88. As with pretty much every chromium release ever, this fixes some security bugs. This batch is : CVE-2020-16037 CVE-2020-16038 CVE-2020-16039 CVE-2020-16040 CVE-2020-16041 CVE-2020-16042 Note that Tenable Network Security has extracted the preceding description block direct...

RHEL 8 : CloudForms 5.0.10 (RHSA-2020:5554)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5554 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments...

Virtuozzo 7 : librepo / librepo-devel / python-librepo (VZLSA-2020-5012)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5012 advisory. - librepo: missing path validation in repomd.xml may lead to directory traversal CVE-2020-14352 Note that Nessus has not tested for this issue but ha...

SUSE SLES12 Security Update : python36 (SUSE-SU-2020:3865-1)

This update for python36 fixes the following issues : CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen bsc1155094 CVE-2019-20916: Fixed a directory traversal in downloadhttpurl bsc1176262. CVE-2020-27619: Fixed an issue where the CJK codec tests call eval on...

Virtuozzo 7 : fence-agents-aliyun / fence-agents-all / etc (VZLSA-2020-5003)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5003 advisory. - python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function CVE-2020-11078 Note that Nessus...

RHEL 7 : python-XStatic-Bootstrap-SCSS (RHSA-2020:5571)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5571 advisory. python-XStatic-Bootstrap-SCSS is the Bootstrap-SCSS JavaScript library packaged for setuptools / pip. Security Fixes: XSS in the data-target...

[R1] Nessus 8.13.1 Fixes Multiple Vulnerabilities

Nessus leverages third-party software to help provide underlying functionality. One third-party component OpenSSL was found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good practice, Tenable opted to upgrade the bundl...

Fedora 32 : kernel (2020-bc0cc81a7a)

The 5.9.14 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...