Oracle Linux 8 : telnet (ELSA-2020-1318)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1318 advisory. 1:0.17-73.1 - Resolves: 1814473 - Arbitrary remote code execution in utility.c via short writes or urgent data Tenable has extracted the preceding description...

Oracle Linux 8 : firefox (ELSA-2020-1341)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1341 advisory. 68.6.1-1.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 8 : kernel (ELSA-2020-1372)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1372 advisory. - hid hiddev: do cleanup in failure of opening a device Benjamin Tissoires 1803458 1803460 CVE-2019-19527 - hid hiddev: avoid opening a disconnected...

Oracle Linux 8 : firefox (ELSA-2020-1406)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1406 advisory. - Added fix for mozbz1348168/CVE-2017-5428 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : haproxy (ELSA-2020-1288)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1288 advisory. - - Fix hapack zero byte input causing overwrite CVE-2020-11100, 1819518 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : thunderbird (ELSA-2020-0919)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0919 advisory. 68.6.0-1.0.1.el81 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.6.0-1 - Update to 68.6.0 build2 Tenable ha...

Oracle Linux 8 : http-parser (ELSA-2020-0708)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-0708 advisory. - Do not break ABI with CVE-2019-15605 fix Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : ppp (ELSA-2020-0633)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0633 advisory. 2.4.7-26 - Fixed buffer overflow in the eaprequest and eapresponse functions Resolves: CVE-2020-8597 Tenable has extracted the preceding description block...

Oracle Linux 8 : python-pillow (ELSA-2020-0580)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0580 advisory. - Fix for CVE-2020-5311 - out-of-bounds write in expandrow Resolves: rhbz1789535 Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : systemd (ELSA-2020-0575)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0575 advisory. - sd-bus: use 'queue' message references for managing r/w message queues in connection objects CVE-2020-1712 Tenable has extracted the preceding description blo...

Oracle Linux 8 : kernel (ELSA-2020-0339)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0339 advisory. - x86 kvm: vmx: use MSRIA32TSXCTRL to hard-disable TSX on guest that lack it Paolo Bonzini 1781660 1779553 CVE-2019-19338 - x86 kvm: vmx: implement...

Oracle Linux 8 : grub2 (ELSA-2020-0335)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0335 advisory. 2.02-78.0.3.el81.1 - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS Orabug: 30643497 - set EFIDIR as redhat for additional grub2 tools Orabug: 298755...

Oracle Linux 8 : libarchive (ELSA-2020-0271)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0271 advisory. 3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 8 : openjpeg2 (ELSA-2020-0274)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0274 advisory. 2.3.1-2 - Fix CVE-2020-6851 1790589 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-0202)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0202 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 8 : thunderbird (ELSA-2020-0127)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0127 advisory. 68.4.1-2.0.1.el81 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.4.1-2 - Update to 68.4.1 build1 Tenable ha...

Oracle Linux 8 : .NET / Core / on / Red / Hat / Enterprise / Linux (ELSA-2020-0130)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0130 advisory. 102-2.0.1.el81 - support OL release scheme 3.0.102-2 - Fix prebuilts leaking into the final build - Fix regressions in binary hardering - Resolves:...

Oracle Linux 8 : java-11-openjdk (ELSA-2020-0128)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0128 advisory. 1:11.0.6.10-1 - Update to shenandoah-jdk-11.0.6+10 GA - Switch to GA mode for final release. - Add JDK-8236039 backport to resolve OpenShift blocker -...

Oracle Linux 8 : firefox (ELSA-2020-0111)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0111 advisory. 68.4.1-1.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 8 : container-tools:1.0 (ELSA-2019-4273)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4273 advisory. - rebuild because of CVE-2019-9512 and CVE-2019-9514 - rebuild because of CVE-2019-9512 and CVE-2019-9514 - rebuild because of CVE-2019-9512 and...