Oracle Linux 7 : kernel (ELSA-2020-4276)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4276 advisory. - net bluetooth: l2cap: Fix calling skfilter on non-socket based channel Gopal Tiwari 1888253 CVE-2020-12351 Tenable has extracted the preceding...

Oracle Linux 7 : thunderbird (ELSA-2020-4163)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4163 advisory. 78.3.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.3.1-1 - Update to 78.3.1 build1 78.3.0-3 - Upda...

Oracle Linux 7 : firefox (ELSA-2020-4080)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4080 advisory. 78.3.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5884)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5884 advisory. - xfs: fix boundary test in xfsattrshortformverify Eric Sandeen Orabug: 31895365 CVE-2020-14385 - ext4: fix potential negative array index in dospl...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5879)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5879 advisory. - USB: serial: omninet: fix reference leaks at open Mark Nicholson Orabug: 30484762 CVE-2017-8925 - GFS2: don't set rgrp globject until it's insert...

Oracle Linux 7 : nss / and / nspr (ELSA-2020-4076)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4076 advisory. - include patches for CVE-2020-6829, CVE-2020-12400, and CVE-2020-12401 from upstream ECC constant time issues. - include patches for CVE-2020-12403 fr...

Oracle Linux 7 : libcroco (ELSA-2020-4072)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4072 advisory. 0.6.12-6 - Rebuild with 7.9-z target Related: 1835951 0.6.12-5 - Fix CVE-2020-12825 Resolves: 1835951 Tenable has extracted the preceding description block...

Oracle Linux 7 : qemu-kvm (ELSA-2020-4079)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4079 advisory. 1.5.3-175.el79.1 - Fixing release number for z-stream Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : squid (ELSA-2020-4082)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4082 advisory. - Resolves: 1872349 - CVE-2020-24606 squid: Improper Input Validation could result in a DoS - Resolves: 1872327 - CVE-2020-15810 squid: HTTP Request...

Oracle Linux 7 : spice / and / spice-gtk (ELSA-2020-4187)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4187 advisory. - Fix multiple buffer overflows in QUIC decoding code Resolves: CVE-2020-14355 spice-gtk Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : tigervnc (ELSA-2020-3875)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3875 advisory. 1.8.0-21 - Add upstream patch needed because of previous security fixes Resolves: bz1826822 1.8.0-20 - Fix stack buffer overflow in...

Oracle Linux 7 : curl (ELSA-2020-3916)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3916 advisory. - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug: 30568724 - CVE-2016-8615 cookie injection for...

Oracle Linux 7 : glib2 / and / ibus (ELSA-2020-3978)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3978 advisory. - Backport patch to limit access to files when copying CVE-2019-12450 Resolves: 1722099 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : webkitgtk4 (ELSA-2020-4035)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4035 advisory. 2.28.2-2 - Resolves: rhbz1817144 Rebuild to support ppc and s390 2.28.2-1 - Resolves: rhbz1817144 Rebase to 2.28.2 Tenable has extracted the preceding...

Oracle Linux 7 : libexif (ELSA-2020-4040)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4040 advisory. 0.6.22-1 - Upgrade to 0.6.22 - Resolves: 1841316 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : libvpx (ELSA-2020-3876)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3876 advisory. - Fix for CVE-2020-0034 - Fix for CVE-2019-9232 and CVE-2019-9433 - Fix for CVE-2017-0393 - apply patch from upstream git Change I6266aba7, should...

Oracle Linux 7 : cups (ELSA-2020-3864)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3864 advisory. - 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist rhel-7 - 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcupss...

Oracle Linux 7 : dnsmasq (ELSA-2020-3878)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3878 advisory. 2.76-16 - Fix strict-mode retries on REFUSED 1755610 2.76-15 - Forward non-recursive queries to upstream, but serve local names 1755610 2.76-14 - Stop treating...

Oracle Linux 7 : SDL (ELSA-2020-3868)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3868 advisory. - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574, CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578, CVE-2019-7635, CVE-2019-7636,...

Oracle Linux 7 : bluez (ELSA-2020-4001)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4001 advisory. 5.44-7 - fixing CVE-2020-0556 . Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...