Oracle Linux 6 : thunderbird (ELSA-2018-3403)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-3403 advisory. 60.2.1-5.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.2.1-5 - Fixing minor issues 60.2.1-3 - Revertin...

Oracle Linux 8 : sudo (ELSA-2020-1804)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1804 advisory. - CVE-2019-18634 Resolves: rhbz1798093 - CVE-2019-19232 Resolves: rhbz1786987 Resolves: rhbz1796518 - CVE-2019-14287 sudo Tenable has extracted the preceding...

Oracle Linux 8 : .NET / Core / on / Red / Hat / Enterprise / Linux / 8 (ELSA-2020-2471)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2471 advisory. 2.1.515-1 - Update to .NET Core SDK 2.1.515 and Runtime 2.1.19 - Resolves: RHBZ1843680 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : ipa (ELSA-2011-1533)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1533 advisory. - Updated patch for CVE-2011-3636 to include CR in the HTTP headers. xmlrpc-c in RHEL-6 doesn't suppose the dontadvertise option so that is not set any more...

Oracle Linux 5 : sssd (ELSA-2011-0975)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0975 advisory. 1.5.1-37 - Reverts: rhbz680443 - Dynamic DNS update fails if multiple servers are - given in ipaserver config option 1.5.1-36 - Resolves: rhbz709333 - sssd...

Oracle Linux 6 : glibc (ELSA-2011-1526)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1526 advisory. - Report write error in addmnt even for cached streams 688980, CVE-2011-1089 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : libvirt (ELSA-2019-4688)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4688 advisory. - logging: restrict sockets to mode 0600 Daniel P. Berrange Orabug: 29861433 CVE-2019-10132 - locking: restrict sockets to mode 0600 Daniel P. Berrange Orabug:...

Oracle Linux 7 : opensc (ELSA-2019-2154)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2154 advisory. 0.19.0-3 - Make OpenSC multilib also on s390 and ppc arches 0.19.0-2 - Make OpenSC multilib again by moving the conflicting files on ix86 arch 0.19.0-1...

Oracle Linux 8 : glib2 (ELSA-2019-3530)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3530 advisory. - Backport patch for CVE-2019-12450 Resolves: 1722101 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 7 : qemu (ELSA-2019-4585)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4585 advisory. - usb-mtp: use ONOFOLLOW and OCLOEXEC. Gerd Hoffmann Orabug: 29216656 CVE-2018-16872 - pvrdma: add uarread routine Prasad J Pandit Orabug: 29216658...

Oracle Linux 7 : libsndfile (ELSA-2020-1185)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1185 advisory. 1.0.25-11 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598577 Tenable has extracted the preceding description block...

Oracle Linux 7 : php55-php (ELSA-2015-1186)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1186 advisory. - core: fix multipart/form-data request can use excessive amount of CPU usage CVE-2015-4024 - fix various functions accept paths with NUL character...

Oracle Linux 8 : sqlite (ELSA-2020-0273)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0273 advisory. 3.26.0-4 - Fixed CVE-2019-13734 1786508 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 5 : gfs-kmod (ELSA-2010-0291)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0291 advisory. 0.1.34-12 - Fixes a problem where improper locking commands can crash the system. - Resolves: rhbz571298 0.1.34-11 - Fixes 'Resource tempory unavailable' for...

Oracle Linux 8 : libseccomp (ELSA-2019-3624)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3624 advisory. 2.4.1-1 - rebase to 2.4.1 2.3.3-4 - spec: make the check phase conditional Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : polkit (ELSA-2019-2046)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2046 advisory. - Mitigation of regression caused by fix of CVE-2018-19788 - Fix of CVE-2019-6133, PID reuse via slow fork - Fix of CVE-2018-19788, priv escalation with high UI...

Oracle Linux 7 : kubernetes-cni-plugins / kubernetes-cni / kubernetes / olcne (ELSA-2020-5727)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5727 advisory. - CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements - CVE-2020-8555: Half-Blind SSRF in...

Oracle Linux 7 : gvfs (ELSA-2019-2145)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2145 advisory. 1.36.2-3 - Force NT1 protocol version for workgroup support 1619719 1.36.2-2 - Prevent spawning new daemons if outgoing operation exists 1632960 - CVE-2019-3827...

Oracle Linux 8 : python27:2.7 (ELSA-2020-4654)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4654 advisory. - The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can...

Oracle Linux 7 : patch (ELSA-2019-2033)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2033 advisory. - Fixed CVE-2016-10713 - Out-of-bounds access in pchwriteline function - Fixed CVE-2018-6952 - Double free of memory Tenable has extracted the precedin...