SUSE SLES12 Security Update : squid (SUSE-SU-2020:1770-1)

This update for squid fixes the following issues : squid was updated to version 4.12 Security issue fixed : CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server during TLS Handshake bsc1173304. Other issues addressed : Reverted to slow search for new SMP sh...

Fedora 32 : putty (2020-35442ce9b7)

Security fix for CVE-2020-14002. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2020:1682-2)

This update for perl fixes the following issues : CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data bsc1171863. CVE-2020-10878: Fixed multiple integer overflows which could have allowed the...

Ubuntu 18.04 LTS / 20.04 LTS : Cinder and os-brick vulnerability (USN-4420-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4420-1 advisory. David Hill and Eric Harney discovered that Cinder and os-brick incorrectly handled ScaleIO backend credentials. An attacker could possibly use this...

Fedora 31 : python-flask-admin (2020-4aaf6e6d7c)

Update to 1.5.6 upstream bugfix and security update. Fixes CVE-2018-16516 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 32 : python-flask-admin (2020-e8f384af5f)

Update to 1.5.6 upstream bugfix and security update. Fixes CVE-2018-16516 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

Cross site scripting

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

RHEL 7 : gettext (RHSA-2020:2846)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2846 advisory. The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be writte...

RHEL 7 : kernel (RHSA-2020:2832)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2832 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : coTURN vulnerabilities (USN-4415-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4415-1 advisory. Felix Drre discovered that coTURN response buffer is not initialized properly. An attacker could possibly use this issue to obtai...

RHEL 8 : firefox (RHSA-2020:2828)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2828 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 7 : ruby (RHSA-2020:2839)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2839 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks...

Fedora 31 : gst (2020-3d23d3ea02)

Update to latest version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Securit...

Ubuntu 20.04 LTS : Net-SNMP vulnerability (USN-4410-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4410-1 advisory. A double-free bug was discovered in snmpd server. An authenticated user could potentially cause a DoS by sending a crafted request to the server. CVE-2019-20892...

Fedora 31 : 5:mutt (2020-31af2ac7fd)

Security fix for CVE-2020-14954 ---- Minor update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. ...

Fedora 32 : hostapd (2020-df3e1cfde9)

Fix CVE-2020-12695 UPnP SUBSCRIBE misbehavior in hostapd WPS AP Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 32 : 5:mutt (2020-1cb4c3697b)

Security fix for CVE-2020-14954 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...