Fedora 28 : osbs-client (2019-2fff3c6889)

Fixes for https://bugzilla.redhat.com/showbug.cgi?id=1697217 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Ubuntu 18.04 LTS : OpenJDK 11 vulnerability (USN-3949-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3949-1 advisory. It was discovered that a memory disclosure issue existed in the OpenJDK Library subsystem. An attacker could use this to expose sensitive information and possibly...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Libxslt vulnerability (USN-3947-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3947-1 advisory. It was discovered that Libxslt incorrectly handled certain documents. An attacker could possibly use this issue to access sensitive...

Debian DLA-1756-1 : libxslt security update

It was discovered that there was a authentication bypass vulnerability in libxslt, a widely-used library for transforming files from XML to other arbitrary format. The xsltCheckRead and xsltCheckWrite routines permitted access upon receiving an-1 error code and as xsltCheckRead returned -1 for a...

Fedora 28 : nodejs-simple-markdown (2019-8e7c71f45b)

Update to latest upstream release, fix CVE-2019-9844 rhbz1695304, Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 29 : kernel / kernel-headers / kernel-tools (2019-94dc902948)

The 5.0.7 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 29 : python-notebook (2019-9e67979b2a)

Security fix for CVE-2019-10255, CVE-2019-9644. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-3944-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3944-1 advisory. It was discovered that wpasupplicant and hostapd were vulnerable to a side channel attack against EAP- pwd. A remote attacker cou...

RHEL 7 : katello-installer-base (RHSA-2019:0735)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0735 advisory. The qpid-dispatch-router package provides remote host management functionality and is configured through the katello-installer-base package. Addition...

Fedora 29 : golang (2019-d05bc7e3df)

Rebase to go1.11.6 - Security fix for CVE-2019-9741 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

SUSE SLES15 Security Update : xmltooling (SUSE-SU-2019:0929-1)

This update for xmltooling fixes the following issues : Security issue fixed : CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling bsc1129537. Note that Tenable Network Security has extracted...

Debian DLA-1754-1 : samba security update

Various vulnerabilities were discovered in Samba, SMB/CIFS file, print, and login server/client for Unix CVE-2017-9461 smbd in Samba had a denial of service vulnerability fdopenatomic infinite loop with high CPU usage and memory consumption due to wrongly handling dangling symlinks. CVE-2018-1050...

EulerOS Virtualization 2.5.3 : libjpeg-turbo (EulerOS-SA-2019-1159)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF.i1/4^CVE-2018-11813i1/4%0 Note that Tenable Network...

EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1217)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd...

Ubuntu 16.04 LTS / 18.04 LTS : Lua vulnerability (USN-3941-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3941-1 advisory. Fady Othman discovered that Lua incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. Tenable h...

Fedora 29 : kernel / kernel-headers / kernel-tools (2019-be9add5b77)

The 5.0.6 update contains a number of importnat fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

EulerOS Virtualization 2.5.3 : openssl (EulerOS-SA-2019-1164)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result ...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerability (USN-3942-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3942-1 advisory. It was discovered that a memory disclosure issue existed in the OpenJDK Library subsystem. An attacker could use this to expose sensitive information and possibly...

EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1180)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0901-1)

The SUSE Linux Enterprise 12 SP3 Azure kernel was updated to 4.4.176 to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc1129179. CVE-2019-9213: expanddownwards in...