Oracle Linux 8 : virt:ol (ELSA-2020-1358)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1358 advisory. - Resolves: bz1791565 CVE-2020-7039 virt:rhel/qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcpemu rhel-8.1.0.z - Resolves:...

Oracle Linux 8 : container-tools:ol8 (ELSA-2020-1379)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1379 advisory. - rebuild because of CVE-2019-9512 and CVE-2019-9514 - fixes CVE-2019-16884 - Fix CVE-2020-8608 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : nodejs:12 (ELSA-2020-1293)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1293 advisory. - Fix CVE-2020-10531 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 8 : nodejs:10 (ELSA-2020-2848)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2848 advisory. - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : virt:ol (ELSA-2020-2774)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2774 advisory. - Resolves: bz1816763 CVE-2019-20382 virt:rhel/qemu-kvm: QEMU: vnc: memory leakage upon disconnect rhel-8 Tenable has extracted the preceding descripti...

Oracle Linux 8 : nodejs:12 (ELSA-2020-2852)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2852 advisory. - Fix CVE-2020-10531 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : container-tools:ol8 (ELSA-2020-3053)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3053 advisory. - address CVE-2019-19921 by updating to rc10 - rebuild because of CVE-2019-9512 and CVE-2019-9514 - fixes CVE-2019-16884 - Resolves: CVE-2019-5736 Tenable has...

Oracle Linux 8 : container-tools:2.0 (ELSA-2020-1931)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1931 advisory. - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - fix 'CVE-2020-10696 buildah: crafted inpu...

Oracle Linux 8 : container-tools:1.0 (ELSA-2020-1926)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1926 advisory. - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - rebuild because of CVE-2019-9512 and...

Oracle Linux 8 : nodejs:10 (ELSA-2020-1317)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1317 advisory. - Rebase to 10.19.0 to fix CVE-2019-15604 to CVE-2019-15606 - Rebase to 10.16.3 to fix CVE-2019-9511 to CVE-2019-9518 Tenable has extracted the preceding...

Oracle Linux 8 : squid:4 (ELSA-2020-2041)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2041 advisory. - Resolves: 1828368 - CVE-2019-12519 squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow - Resolves: 18283...

Oracle Linux 8 : container-tools:ol8 (ELSA-2020-1932)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1932 advisory. - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - fix 'CVE-2020-10696 buildah: crafted inpu...

Oracle Linux 8 : libvncserver (ELSA-2020-3385)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3385 advisory. 0.9.11-15.1 - Fix NVR Related: 1852356 0.9.11-15 - Fix CVE-2017-18922 Resolves: 1852356 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : kernel (ELSA-2020-3218)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3218 advisory. - Reverse keys order for dual-signing Frantisek Hrbata 1837433 1837434 CVE-2020-10713 - kernel Move to dual-signing to split signing keys up better...

Oracle Linux 8 : firefox (ELSA-2020-3241)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3241 advisory. 68.11.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 68.11.0-1 - Update to 68.11...

Oracle Linux 8 : grub2 (ELSA-2020-5786)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5786 advisory. - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 Orabug: 31225072...

Oracle Linux 8 : python-pillow (ELSA-2020-3185)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3185 advisory. - Fix for CVE-2020-5313 Resolves: rhbz1789532 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : thunderbird (ELSA-2020-3038)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3038 advisory. 68.10.0-1.0.1.el82 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.10.0-1 - Update to 68.10.0 build1 Tenable...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-2972)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2972 advisory. 1:1.8.0.262.b10-0.1 - Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Fix...

Oracle Linux 8 : java-11-openjdk (ELSA-2020-2970)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2970 advisory. 1:11.0.8.10-0 - Update to shenandoah-jdk-11.0.8+10 GA - Switch to GA mode for final release. - Update release notes with last minute fix JDK-8248505. -...