Oracle Linux 8 : python-jinja2 (ELSA-2019-1152)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1152 advisory. - Rebase to 2.10.1 security update to fix CVE-2019-10906 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : WALinuxAgent (ELSA-2019-1527)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1527 advisory. 2.2.32-1.0.1.el80.1 - Add oracle support to fix waagent.service build issue 2.2.32-1.el80.1 - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch...

Oracle Linux 8 : ruby:2.5 (ELSA-2019-1972)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1972 advisory. - Prohibit arbitrary code execution when installing a malicious gem. Resolves: CVE-2019-8324 rubygem-mongo Tenable has extracted the preceding description block...

Oracle Linux 8 : container-tools:rhel8 (ELSA-2019-0975)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0975 advisory. container-selinux 2:2.94-1.git1e99f1d - Resolves: 1690286 - bump to v2.94 - Resolves: 1693806, 1689255 2:2.89-1.git2521d0d - bump to v2.89 runc...

Oracle Linux 8 : bind (ELSA-2019-1145)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1145 advisory. 32:9.11.4-17.P2 - Fix inefective limit of TCP clients CVE-2018-5743 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : python3 (ELSA-2019-0997)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0997 advisory. 3.6.8-2.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-2 - Security fix for CVE-2019-9636 rhbz1693973 Tenable has extracted the...

Oracle Linux 8 : mod_auth_mellon (ELSA-2019-0985)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-0985 advisory. 0.14.0-3.2 - Resolves: rhbz1696197 - CVE-2019-3878 modauthmellon: authentication bypass in ECP flow rhel-8.0.0.z Tenable has extracted the preceding description...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2019-1146)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1146 advisory. 1:1.8.0.212.b04-1 - Remove additions to EXTRACFLAGS and EXTRACPPFLAGS which are now made by upstream. - Resolves: rhbz1693468 1:1.8.0.212.b04-1 - Add...

Oracle Linux 8 : flatpak (ELSA-2019-1143)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1143 advisory. 1.0.6-3 - Fix IOCSTI sandbox bypass 1700653 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : virt:rhel (ELSA-2019-1175)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1175 advisory. - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes CVE-2019-3863 - fix integer overflow in SSH packet processing...

Oracle Linux 8 : thunderbird (ELSA-2019-1623)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1623 advisory. 60.7.2-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.7.2-2 - Update to 60.7.2 build2 60.7.2-1 - Upda...

Oracle Linux 8 : edk2 (ELSA-2019-0968)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0968 advisory. 20180508gitee3198e672e2-9.el80 - edk2-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch bz1690501 -...

Oracle Linux 8 : bind (ELSA-2019-1714)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1714 advisory. 32:9.11.4-17.P2.1 - Fix CVE-2019-6471 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : python36:3.6 (ELSA-2019-0984)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0984 advisory. - Rebase to 1.3.2 to fix CVE-2019-7164 and CVE-2019-7548 Resolves: rhbz1693978 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : icedtea-web (ELSA-2019-2004)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2004 advisory. - added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 Tenable...

Oracle Linux 8 : systemd (ELSA-2019-0990)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0990 advisory. 239-13.0.1.3 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug: 25897792 - set RemoveIPC=no in logind.conf as default for OL7.2...

Oracle Linux 8 : dotnet (ELSA-2019-1259)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1259 advisory. 2.1.507-2 - Link against strerrorr correctly - Resolves: RHBZ1712471 2.1.507-1 - Update to .NET Core Runtime 2.1.11 and SDK 2.1.507 - Resolves:...

Oracle Linux 8 : ghostscript (ELSA-2019-0971)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0971 advisory. - Resolves: 1692798 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 - Resolves: 1678170 - CVE-2019-3835 ghostscript:...

Oracle Linux 8 : virt:rhel (ELSA-2019-1268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1268 advisory. - admin: reject clients unless their UID matches the current UID CVE-2019-10132 - locking: restrict sockets to mode 0600 CVE-2019-10132 - logging: restrict...

Oracle Linux 8 : java-11-openjdk (ELSA-2019-1817)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1817 advisory. 1:11.0.4.11-0 - Update to shenandoah-jdk-11.0.4+11 GA - Switch to GA mode for final release. - Resolves: rhbz1724452 1:11.0.4.10-0.0.ea - Update to...