Oracle Linux 8 : ELSA-2020-5562-1: / firefox (ELSA-2020-55621)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-55621 advisory. 78.6.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.6.0-1 - Update to 78.6.0...

Oracle Linux 8 : ELSA-2020-5503-1: / mariadb-connector-c (ELSA-2020-55031)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-55031 advisory. 3.1.11-2 - Require specific minimal version of the 'mariadb' package, if it is installed 3.1.11-1 - Rebase to 3.1.11 3.1.9-1 - Rebase to 3.1.9 -...

firefox security update

78.6.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.6.0-1 - Update to 78.6.0 build1...

Oracle Linux 8 : kernel (ELSA-2020-5473)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5473 advisory. - netdrv geneve: add transport ports in route lookup for geneve Mark Gray 1891818 1884481 CVE-2020-25645 - char random32: update the net random state on interru...

Oracle Linux 7 : kernel (ELSA-2020-5437)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5437 advisory. - netdrv hdlcppp: add range checks in pppcpparsecr Guillaume Nault 1882078 CVE-2020-25643 - fs ext4: fix potential negative array index in dosplit Pave...

Oracle Linux 8 : openssl (ELSA-2020-5476)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5476 advisory. - Fix CVE-2020-1971 ediparty null pointer dereference Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 7 : python-rtslib (ELSA-2020-5435)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5435 advisory. 2.1.74-1.0.1 - Add patch 0005-allow-mixed-case-in-oracle-iqns to fix Orabug: 27613482 - Add patch 0004-allow-underscore-in-oracle-iqns to fix Orabug: 27582660 -...

Oracle Linux 7 : targetcli (ELSA-2020-5434)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-5434 advisory. 2.1.53-1.0.1 - added Requires: python-gobject-base Orabug: 30252308 2.1.53-1 - Rebase the targetcli package to fix some security issues Tenable has extracted th...

Oracle Linux 7 : gd (ELSA-2020-5443)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5443 advisory. - Fix CVE-2016-5766 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

kernel security and bug fix update

3.10.0-1160.11.1.OL7 - Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 slotsret under spinlockirq protection Rafael...

Oracle Linux 7 : samba (ELSA-2020-5439)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5439 advisory. - resolves: 1892632 - Fix CVE-2020-14318 - resolves: 1891687 - Fix CVE-2020-14323 - resolves: 1879834 - Fix CVE-2020-1472 Tenable has extracted the...

Oracle Linux 8 : net-snmp (ELSA-2020-5480)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5480 advisory. - fix CVE-2020-15862 1886100 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : libpq (ELSA-2020-5401)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5401 advisory. 12.5-1 - Rebase to upstream release 12.5 Resolves: rhbz1898228 Resolves: rhbz1901558 Tenable has extracted the preceding description block directly fro...

Oracle Linux 8 : libexif (ELSA-2020-5393)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5393 advisory. - Fix CVE-2020-0452 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Vulnerabilities fixed in X11 server

Vulnerabilities have been fixed in X11 server. The vulnerabilities potentially allow a malicious party to access system data and to gain elevated privileges gain. -= Oracle =- Oracle has made updates available for Oracle Linux 7. You can install these updates using the command 'yum'. More...

Oracle Linux 8 : thunderbird (ELSA-2020-5398)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-5398 advisory. 78.5.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.5.1-1 - Update to 78.5.1 build1 Tenable has extracted th...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5995)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5995 advisory. - vt: Disable KDFONTOPCOPY Daniel Vetter Orabug: 32187748 CVE-2020-28974 - xen/events: block rogue events for some time Juergen Gross Orabug: 32177538...

Oracle Linux 7 : libexif (ELSA-2020-5402)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5402 advisory. - Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 7 : thunderbird (ELSA-2020-5400)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-5400 advisory. 78.5.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.5.1-1 - Update to 78.5.1 build1 Tenable has extracted th...

Oracle Linux 7 : xorg-x11-server (ELSA-2020-5408)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5408 advisory. - CVE fix for: CVE-2020-25712 1904937, CVE-2020-14360 1904934 Tenable has extracted the preceding description block directly from the Oracle Linux...