Fedora 30 : glpi (2019-e50f92e4c1)

high Nessus Plugin ID 124550

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

**Version 9.4.1.1**

Non exhaustive list of changes :

- [security] Bad chevrons rendering on dropdowns (#5468)

- [security] Iframe and forms are rendered in rich text contents (#5519)

- [security] Type juggling authentication bypass (#5520)

- [security] Malicious images upload (#5580)

- [security] Password token date was not reset (#5577)

- [security] Prevent timed attack and enforce cookie security (#5562)

- Search on dropdowns now displays fuzzy matches (#5149)

- All components were deleted when permanently deleting a computer (#5459)

- Unable to display network ports (#5460, #5461)

- Preferences not applied (#5372)

- Unable to use “forgotten password” feature (#5386)

- And many more!

See [changelog](https://github.com/glpi-project/glpi/milestone/30?closed=1 ) and [minor changelog](https://github.com/glpi-project/glpi/milestone/33?closed=1) for details.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected glpi package.

Plugin Details

Severity: High

ID: 124550

File Name: fedora_2019-e50f92e4c1.nasl

Version: 1.2

Type: local

Agent: unix

Family: Fedora Local Security Checks

Published: 5/2/2019

Updated: 9/23/2019

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Vulnerability Information

CPE: cpe:/o:fedoraproject:fedora:30, p-cpe:/a:fedoraproject:fedora:glpi

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 3/29/2019

Vulnerability Publication Date: 3/29/2019

Reference Information

FEDORA: 2019-e50f92e4c1

Detections

Analytics