Oracle Linux 8 : bluez (ELSA-2021-1598)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1598 advisory. 5.52-4 + bluez-5.52-4 - Fixing 1885378 5.52-3 + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. 5.52-2 + bluez-5.52-2 - Fixing...

Oracle Linux 8 : NetworkManager / and / libnma (ELSA-2021-1574)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1574 advisory. libnma 1.8.30-2 - Rebuild with new gtk-doc to fix multilib issues rh 1853152 NetworkManager 1.30.0-7.0.1 - add connectivity check via Oracle servers Orabug:...

Oracle Linux 8 : curl (ELSA-2021-1610)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1610 advisory. - curl: Inferior OCSP verification CVE-2020-8286 - libcurl: FTP wildcard stack overflow CVE-2020-8285 - curl: trusting FTP PASV responses CVE-2020-8284...

Oracle Linux 8 : trousers (ELSA-2021-1627)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1627 advisory. 0.3.15-1 - Rebase to 0.3.15 - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 resolves: rhbz1725782 rhbz1877517 rhbz1882402 rhbz1882414 Tenable has...

Oracle Linux 8 : httpd:2.4 (ELSA-2021-1809)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1809 advisory. - Resolves: 1677590 - CVE-2018-17199 httpd:2.4/httpd: modsessioncookie does not respect expiry time - Resolves: 1869075 - CVE-2020-11984 httpd:2.4/http...

Oracle Linux 8 : unbound (ELSA-2021-1853)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1853 advisory. 1.7.3-15 - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key - Resolves: rhbz1714175 - Use system-wide crypto policy setting...

Oracle Linux 8 : glibc (ELSA-2021-1585)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1585 advisory. - CVE-2019-9169: Fix buffer overread in regexec.c 1685400. - CVE-2021-3326: iconv assertion failure in ISO-2022-JP-3 decoding 1924919 -...

Oracle Linux 8 : python3 (ELSA-2021-1633)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1633 advisory. - Fix for CVE-2021-23336 Resolves: rhbz1928904 - Fix for CVE-2021-3177 Resolves: rhbz1918168 - Security fix for CVE-2020-27619: eval call on content...

Oracle Linux 8 : cpio (ELSA-2021-1582)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-1582 advisory. 2.12-10 - Fixed improper input validation when writing tar header fields 1766223 2.12-9 - Extract: retain times for symlinks 1487673 Tenable has extracted the...

Oracle Linux 8 : python-cryptography (ELSA-2021-1608)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1608 advisory. - CVE-2020-36242: Fixed a bug where certain sequences of update calls when symmetrically encrypting very large payloads 2GB could result in an integer...

Oracle Linux 8 : systemd (ELSA-2021-1611)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1611 advisory. 239-45.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable...

Oracle Linux 8 : bash (ELSA-2021-1679)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1679 advisory. 4.4.19-14 - Fix hang when limit for nproc is very high Resolves: 1890888 4.4.19-13 - Correctly drop saved UID when effective UID is not equal to its real UID...

Oracle Linux 8 : kernel (ELSA-2021-1578)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1578 advisory. - drm/i915/guc: Update to use firmware v49.0.1 Dave Airlie 1935281 CVE-2020-12362 - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech 1930833...

Oracle Linux 8 : krb5 (ELSA-2021-1593)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1593 advisory. - Add recursion limit for ASN.1 indefinite lengths CVE-2020-28196 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : perl (ELSA-2021-1678)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1678 advisory. - Fix CVE-2020-10543 bug 1839273 - Fix CVE-2020-10878 bug 1839276 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : sane-backends (ELSA-2021-1744)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1744 advisory. 1.0.27-22 - related 1852663 - needed to rebuild due infrastructure error 1.0.27-21 - 1852663, 1848097 - NULL pointer dereference in saneiepsonnetread function...

Oracle Linux 8 : libxml2 (ELSA-2021-1597)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1597 advisory. 2.9.7-9.0.1 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.9.7-9 - Fix CVE-2020-24977 1878252 Tenable ha...

Oracle Linux 8 : samba (ELSA-2021-1647)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1647 advisory. - resolves: 1891688 - Fix CVE-2020-14323 - resolves: 1892633 - Fix CVE-2020-14318 - resolves: 1892639 - Fix CVE-2020-14383 - resolves: 1879835 - Fix...

Oracle Linux 8 : python-lxml (ELSA-2021-1898)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-1898 advisory. 4.2.3-2 - Security fix for CVE-2020-27783: mXSS due to the use of improper parser Resolves: rhbz1901633 Tenable has extracted the preceding description block...

Oracle Linux 8 : sqlite (ELSA-2021-1581)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1581 advisory. - Fixed CVE-2020-13434 1845843 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...