Ubuntu 16.04 LTS / 18.04 LTS : Apport regression (USN-4171-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4171-3 advisory. USN-4171-1 fixed vulnerabilities in Apport. The update caused a regression in the Python Apport library. This update fixes the problem. We apologize f...

Ubuntu 16.04 LTS / 18.04 LTS : HAproxy vulnerability (USN-4174-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4174-1 advisory. It was discovered that HAproxy incorrectly handled certain HTTP requests. An attacker could possibly use this issue to a privilege escalation Request...

Ubuntu 16.04 LTS / 18.04 LTS : Firefox regressions (USN-4165-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4165-2 advisory. USN-4165-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the...

Solaris 10 (sparc) : 119059-74

X11 6.6.2: Xsun patch. Date this patch was last updated by Sun : Nov/04/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid130508; scriptversion"1.3"; scriptcvsdate"Date: 2020/01/07...

Solaris 10 (sparc) : 125719-60

X11 6.8.0: Xorg server patch. Date this patch was last updated by Sun : Nov/04/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid130509; scriptversion"1.4";...

Fedora 30 : varnish (2019-a2110fa094)

New upstream release. A security release, fixing VSV00004. References : - Changelog: https://github.com/varnishcache/varnish-cache/blob/6.3/d oc/changes.rstvarnish-cache-631-2019-10-21 - VSV00004: https://varnish-cache.org/security/VSV00004.html Note that Tenable Network Security has extracted th...

Fedora 29 : 1:java-latest-openjdk (2019-d81be00640)

This update brings security updates for OpenJDK 13 and updates it to most current version 13.0.1.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora 31 : 12:aspell (2019-1e0f7ac968)

Rebase to upstream version 0.60.8, that fixes potential security flaw. ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 30 : python3 (2019-aba3cca74a)

Python 3.7.5 is the fifth and most recent maintenance release of Python 3.7. Includes a security fix for CVE-2019-16056. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 31 : nspr / nss (2019-4175e7cb56)

Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.47releasenotes Note that Tenab...

SUSE SLES12 Security Update : samba (SUSE-SU-2019:2875-1)

This update for samba fixes the following issues : CVE-2019-10218: Fixed a path injection caused by filenames containing path separators bso14071 bsc1144902. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Tenable Nessus < 8.7.0 DoS (TNS-2019-06)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 8.7.0. It is, therefore, affected by a denial of service vulnerability due to improper validation of specific imported scan types. An authenticated, remote attacker can exploit this...

Fedora 29 : sudo (2019-72755db9c7)

Rebase to 1.8.28 - Fixed CVE-2019-14287 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Debian DLA-1978-1 : python-ecdsa security update

It was discovered that python-ecdsa, a cryptographic signature library for Python, did not correctly verify DER encoded signatures. Malformed signatures could lead to unexpected exceptions and in some cases did not raise any exception. For Debian 8 'Jessie', these problems have been fixed in...

MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Exploit

Exploit Title: MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Exploit Author: Jacob Baines Vendor Homepage: https://mikrotik.com/ Software Link: https://mikrotik.com/download Version: 6.45.6 Stable and below or 6.44.5 Long-term and below Tested on: Various x86 and MIPSBE RouterOS installs CVE :...

Fedora 31 : golang (2019-4593120208)

Security fix for CVE-2019-17596 Rebase to 1.13.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Ubuntu 16.04 LTS / 18.04 LTS : Apport vulnerabilities (USN-4171-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4171-1 advisory. Kevin Backhouse discovered Apport would read its user-controlled settings file as the root user. This could be used by a local attacker to...

Ubuntu 18.04 LTS : Libidn2 vulnerabilities (USN-4168-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4168-1 advisory. It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains. CVE-2019-12290 It was...

Fedora 29 : mod_auth_openidc (2019-23638d42f3)

Upgrade to latest upstream which fixes some CVEs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora 30 : 14:libpcap (2019-eaa681d33e)

Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format ...