Oracle Linux 7 : openjpeg2 (ELSA-2020-0262)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0262 advisory. 2.3.1-2 - Fix CVE-2020-6851 resolves: 1790586 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : libarchive (ELSA-2020-0271)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0271 advisory. 3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 8 : openjpeg2 (ELSA-2020-0274)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0274 advisory. 2.3.1-2 - Fix CVE-2020-6851 1790589 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 7 : sqlite (ELSA-2020-0227)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0227 advisory. 3.7.17-8.1 - Fixes for CVE-2019-13734 1786505 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 : openslp (ELSA-2020-0199)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0199 advisory. 2.0.0-4 - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: 1788447 Tenable has extracted the preceding...

Oracle Linux 7 : python-reportlab (ELSA-2020-0195)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0195 advisory. 2.5-9.el77.1 - Do not eval strings passed to toColor - Resolves: 1788552 2.5-9 - Mass rebuild 2014-01-24 2.5-8 - Mass rebuild 2013-12-27 2.5-7 - Rebuilt for...

Oracle Linux 7 : libarchive (ELSA-2020-0203)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0203 advisory. 3.1.2-14 - Fix patch application error 3.1.2-13 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2020-0196)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0196 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-0202)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0202 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 7 : apache-commons-beanutils (ELSA-2020-0194)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0194 advisory. - Fix CVE-2014-0114 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 6 : python-reportlab (ELSA-2020-0197)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0197 advisory. 2.3-3.el610.1 - Do not eval strings passed to toColor - Resolves: 1788551 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2020-0157)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0157 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 8 : thunderbird (ELSA-2020-0127)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0127 advisory. 68.4.1-2.0.1.el81 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.4.1-2 - Update to 68.4.1 build1 Tenable ha...

Oracle Linux 8 : java-11-openjdk (ELSA-2020-0128)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0128 advisory. 1:11.0.6.10-1 - Update to shenandoah-jdk-11.0.6+10 GA - Switch to GA mode for final release. - Add JDK-8236039 backport to resolve OpenShift blocker -...

Oracle Linux 8 : .NET / Core / on / Red / Hat / Enterprise / Linux (ELSA-2020-0130)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0130 advisory. 102-2.0.1.el81 - support OL release scheme 3.0.102-2 - Fix prebuilts leaking into the final build - Fix regressions in binary hardering - Resolves:...

Oracle Linux 7 : java-11-openjdk (ELSA-2020-0122)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0122 advisory. 1:11.0.6.10-1.0.1 - link atomic for ix86 build 1:11.0.6.10-1 - Add JDK-8236039 backport to resolve OpenShift blocker - Resolves: rhbz1785753...

Oracle Linux 7 : thunderbird (ELSA-2020-0120)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0120 advisory. 68.4.1-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.4.1-2 - Update to 68.4.1 build1 Tenable has...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2020-5512)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5512 advisory. 2.6.39-400.318.1 - x86/speculation: Determine swapgs before alternative instructions are set Patrick Colp Orabug: 30379640 - scsi: libsas: delete sas port i...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5511)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5511 advisory. kernel-uek 3.8.13-118.42.1 - scsi: libsas: delete sas port if expander discover failed Jason Yan Orabug: 30580688 CVE-2019-15807 Tenable has extracted the...

Oracle Linux 8 : firefox (ELSA-2020-0111)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0111 advisory. 68.4.1-1.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...