This update of `expat` fixes the following security issue :

  - **CVE-2019-15903** -- Fix heap overflow triggered by     `XML_GetCurrentLineNumber` (or     `XML_GetCurrentColumnNumber`), and deny internal     entities closing the doctype

The following bug fixes are also included :

  - Fix cases where `XML_StopParser` did not have any effect     when called from inside of an end element handler

  - xmlwf: Fix exit code for operation without '`-d     DIRECTORY`' previously, only '`-d DIRECTORY`' would give     you a proper exit code

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has expat packages installed that are affected by multiple vulnerabilities:

  - In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons     could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be     usable for denial-of-service attacks). (CVE-2018-20843)

  - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to     document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber)     then resulted in a heap-based buffer over-read. (CVE-2019-15903)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for python3 to version 3.6.10 fixes the following issues :

CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).

CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).

CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python3 to version 3.6.10 fixes the following issues :

  - CVE-2017-18207: Fixed a denial of service in     Wave_read._read_fmt_chunk() (bsc#1083507).

  - CVE-2019-16056: Fixed an issue where email parsing could     fail for multiple @ (bsc#1149955).

  - CVE-2019-15903: Fixed a heap-based buffer over-read in     libexpat (bsc#1149429).

This update was imported from the SUSE:SLE-15:Update update project.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 68.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-33 advisory.

  - Mozilla developers and community members Bob Clary, Jason Kratzer, Aaron Klotz, Iain Ireland, Tyson Smith,     Christian Holler, Steve Fink, Honza Bambas, Byron Campen, and Cristian Brindusan reported memory safety     bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these could be exploited to run arbitrary code.
    (CVE-2019-11764)

  - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to     document parsing too early. A subsequent call to <code>XMLGetCurrentLineNumber</code> or     <code>XMLGetCurrentColumnNumber</code> then resulted in a heap-based buffer over-read. (CVE-2019-15903)

  - When following the value's prototype chain, it was possible to retain a reference to a locale, delete it,     and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash.
    (CVE-2019-11757)

  - Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total     Security was installed. This bug showed evidence of memory corruption in the accessibility engine and we     presume that with enough effort that it could be exploited to run arbitrary code. (CVE-2019-11758)

  - An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the     stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash.
    (CVE-2019-11759)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3193 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 68.2.0 ESR.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764)

    * Mozilla: Use-after-free when creating index updates in IndexedDB (CVE-2019-11757)

    * Mozilla: Potentially exploitable crash due to 360 Total Security (CVE-2019-11758)

    * Mozilla: Stack buffer overflow in HKDF output (CVE-2019-11759)

    * Mozilla: Stack buffer overflow in WebRTC networking (CVE-2019-11760)

    * Mozilla: Unintended access to a privileged JSONView object (CVE-2019-11761)

    * Mozilla: document.domain-based origin isolation has same-origin-property violation (CVE-2019-11762)

    * Mozilla: Incorrect HTML parsing results in XSS bypass technique (CVE-2019-11763)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, cross-site scripting or denial of service.

Debian follows the extended support releases (ESR) of Firefox. Support for the 60.x series has ended, so starting with this update we're now following the 68.x releases.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3237 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 68.2.0.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764)

    * Mozilla: Use-after-free when creating index updates in IndexedDB (CVE-2019-11757)

    * Mozilla: Potentially exploitable crash due to 360 Total Security (CVE-2019-11758)

    * Mozilla: Stack buffer overflow in HKDF output (CVE-2019-11759)

    * Mozilla: Stack buffer overflow in WebRTC networking (CVE-2019-11760)

    * Mozilla: Unintended access to a privileged JSONView object (CVE-2019-11761)

    * Mozilla: document.domain-based origin isolation has same-origin-property violation (CVE-2019-11762)

    * Mozilla: Incorrect HTML parsing results in XSS bypass technique (CVE-2019-11763)

    * expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues :

Changes in MozillaFirefox :

Security issues fixed :

CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).

CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).

CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).

CVE-2019-11759: Fixed a stack-based buffer overflow in HKDF output (bsc#1154738).

CVE-2019-11760: Fixed a stack-based buffer overflow in WebRTC networking (bsc#1154738).

CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).

CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).

CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).

CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Non-security issues fixed: Added Provides-line for translations-common (bsc#1153423) .

Moved some settings from branding-package here (bsc#1153869).

Disabled DoH by default.

Changes in MozillaFirefox-branding-SLE: Moved extensions preferences to core package (bsc#1153869).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update upgrades Thunderbird to version 68.2.0.

Security Fix(es) :

  - Mozilla: Memory safety bugs fixed in Firefox 70 and     Firefox ESR 68.2 (CVE-2019-11764)

  - Mozilla: Use-after-free when creating index updates in     IndexedDB (CVE-2019-11757)

  - Mozilla: Potentially exploitable crash due to 360 Total     Security (CVE-2019-11758)

  - Mozilla: Stack buffer overflow in HKDF output     (CVE-2019-11759)

  - Mozilla: Stack buffer overflow in WebRTC networking     (CVE-2019-11760)

  - Mozilla: Unintended access to a privileged JSONView     object (CVE-2019-11761)

  - Mozilla: document.domain-based origin isolation has     same-origin-property violation (CVE-2019-11762)

  - Mozilla: Incorrect HTML parsing results in XSS bypass     technique (CVE-2019-11763)

  - expat: heap-based buffer over-read via crafted XML input     (CVE-2019-15903)

This update for MozillaThunderbird to version 68.2.1 provides the following fixes :

  - Security issues fixed (bsc#1154738) :

  - CVE-2019-15903: Fixed a heap overflow in the expat     library (bsc#1149429).

  - CVE-2019-11757: Fixed a use-after-free when creating     index updates in IndexedDB (bsc#1154738).

  - CVE-2019-11758: Fixed a potentially exploitable crash     due to 360 Total Security (bsc#1154738).

  - CVE-2019-11759: Fixed a stack-based buffer overflow in     HKDF output (bsc#1154738).

  - CVE-2019-11760: Fixed a stack-based buffer overflow in     WebRTC networking (bsc#1154738).

  - CVE-2019-11761: Fixed an unintended access to a     privileged JSONView object (bsc#1154738).

  - CVE-2019-11762: Fixed a same-origin-property violation     (bsc#1154738).

  - CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).

  - CVE-2019-11764: Fixed several memory safety bugs     (bsc#1154738).

Other fixes (bsc#1153879) :

  - Some attachments couldn't be opened in messages     originating from MS Outlook 2016.

  - Address book import from CSV.

  - Performance problem in message body search.

  - Ctrl+Enter to send a message would open an attachment if     the attachment pane had focus.

  - Calendar: Issues with 'Today Pane' start-up.

  - Calendar: Glitches with custom repeat and reminder     number input.

  - Calendar: Problems with WCAP provider.

  - A language for the user interface can now be chosen in     the advanced settings 

  - Fixed an issue with Google authentication (OAuth2)

  - Fixed an issue where selected or unread messages were     not shown in the correct color in the thread pane under     some circumstances

  - Fixed an issue where when using a language pack, names     of standard folders were not localized (bsc#1149126)

  - Fixed an issue where the address book default startup     directory in preferences panel not persisted

  - Fixed various visual glitches

  - Fixed issues with the chat

  - Fixed building with rust >= 1.38.

  - Fixrd LTO build without PGO.

  - Removed kde.js since disabling instantApply breaks     extensions and is now obsolete with the move to HTML     views for preferences. (bsc#1151186)

  - Updated create-tar.sh. (bsc#1152778)

  - Deactivated the crashreporter for the last remaining     arch.

This update was imported from the SUSE:SLE-15:Update update project.

Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code or denial of service.

Debian follows the Thunderbird upstream releases. Support for the 60.x series has ended, so starting with this update we're now following the 68.x releases.

For Debian 8 'Jessie', these problems have been fixed in version 1:68.2.2-1~deb8u1.

We recommend that you upgrade your thunderbird packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - In libexpat before 2.2.8, crafted XML input could fool     the parser into changing from DTD parsing to document     parsing too early; a consecutive call to     XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber)     then resulted in a heap-based buffer over-read.
    (CVE-2019-15903)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0039 advisory.

    This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.6. It addresses 25 CVEs:
    CVE-2022-22826, CVE-2024-8176, CVE-2022-25313, CVE-2022-25236, CVE-2009-3560, and 20 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to     document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber)     then resulted in a heap-based buffer over-read. (CVE-2019-15903)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
129620	Fedora 31 : expat (2019-613edfe68b)	Nessus	Fedora Local Security Checks	2019/10/7	2024/4/19	high
154497	NewStart CGSL CORE 5.05 / MAIN 5.05 : expat Multiple Vulnerabilities (NS-SA-2021-0175)	Nessus	NewStart CGSL Local Security Checks	2021/10/27	2023/11/27	high
133036	SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0114-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/17	2024/3/29	critical
133172	openSUSE Security Update : python3 (openSUSE-2020-86) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/22	2024/3/29	critical
130171	Mozilla Firefox ESR < 68.2	Nessus	MacOS X Local Security Checks	2019/10/24	2025/11/18	high
130190	RHEL 7 : firefox (RHSA-2019:3193)	Nessus	Red Hat Local Security Checks	2019/10/24	2024/11/7	high
130288	Debian DSA-4549-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2019/10/28	2024/4/16	high
130382	RHEL 8 : thunderbird (RHSA-2019:3237)	Nessus	Red Hat Local Security Checks	2019/10/30	2024/11/6	high
130449	SUSE SLED15 / SLES15 Security Update : MozillaFirefox, MozillaFirefox-branding-SLE (SUSE-SU-2019:2871-1)	Nessus	SuSE Local Security Checks	2019/11/1	2024/4/16	high
130750	Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20191106)	Nessus	Scientific Linux Local Security Checks	2019/11/8	2024/4/12	high
130937	openSUSE Security Update : MozillaThunderbird (openSUSE-2019-2464)	Nessus	SuSE Local Security Checks	2019/11/13	2024/4/11	high
131136	Debian DLA-1997-1 : thunderbird security update	Nessus	Debian Local Security Checks	2019/11/20	2024/4/11	high
131405	NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0215)	Nessus	NewStart CGSL Local Security Checks	2019/12/2	2024/4/9	high
358871	Rocky Linux 8.6 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc Multiple Vulnerabilities (ciqsa-2026_0039)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
222406	Linux Distros Unpatched Vulnerability : CVE-2019-15903	Nessus	Misc.	2025/3/4	2026/11/6	high
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	2022/9/1	2025/7/22	critical

检测

插件搜索

high

high

critical

critical

high

high

high

high

high

high

high

high

high

critical

high

critical