Oracle Linux 7 : qemu-kvm (ELSA-2021-2322)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2322 advisory. 1.5.3-175.el79.4 - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch bz1917449 - Resolves: bz1917449 CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB...

Oracle Linux 7 : 389-ds-base (ELSA-2021-2323)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2323 advisory. 1.3.10.2-12 - Bump version to 1.3.10.2-12 1.3.10.2-11 - Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work...

Oracle Linux 7 : samba (ELSA-2021-2313)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2313 advisory. - resolves: 1949444 - Fix CVE-2021-20254 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 7 : qt5-qtimageformats (ELSA-2021-2328)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2328 advisory. 5.9.7-2 - libwebp security fixes: Resolves: bz1961742 Resolves: bz1961743 Resolves: bz1961744 Resolves: bz1961745 Tenable has extracted the preceding...

Oracle Linux 7 : libwebp (ELSA-2021-2260)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2260 advisory. 0.3.0-10 - Added fixes for rhbz1956829, rhbz1956843, rhbz1956919 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : thunderbird (ELSA-2021-2264)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2264 advisory. 78.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.11.0-1 - Update to 78.11.0 build1 Tenable has...

Oracle Linux 8 : nginx:1.18 (ELSA-2021-2259)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2259 advisory. 1.18.0-3.1.0.1 - Remove Red Hat references Orabug: 29498217 1:1.18.0-3.1 - Resolves: 1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in ngxresolvercopy wh...

Oracle Linux 7 : thunderbird (ELSA-2021-2263)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2263 advisory. 78.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.11.0-1 - Update to 78.11.0 build1 Tenable has...

Oracle Linux 8 : pki-core:10.6 (ELSA-2021-2235)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2235 advisory. pki-core 10.10.5-3.0.1 - Remove upstream reference. 10.10.5-3 - Bug 1960146 - CVE-2021-3551 Dogtag installer 'pkispawn' logs admin credentials into a...

Oracle Linux 8 : firefox (ELSA-2021-2233)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-2233 advisory. 78.11.0-3.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.11.0-3 - Update to 78.11.0 build2...

Oracle Linux 8 : polkit (ELSA-2021-2238)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2238 advisory. 0.115-11.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-11.1 - early disconnection from D-Bus results in privilege esc. - Resolves:...

Oracle Linux 7 : firefox (ELSA-2021-2206)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-2206 advisory. 78.11.0-3.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and...

Oracle Linux 8 : kernel (ELSA-2021-2168)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2168 advisory. 4.18.0-305.3.14.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was...

Oracle Linux 7 : glib2 (ELSA-2021-2147)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2147 advisory. 2.56.1-9 - Fix CVE-2021-27219 Resolves: 1960596 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 8 : dotnet3.1 (ELSA-2021-2037)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2037 advisory. 3.1.115-1.0.1 - Update patch to support 8.3 [email protected] - support OL release scheme [email protected] 3.1.115-1 - Update to .NET...

Oracle Linux 7 : olcne (ELSA-2021-9268)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9268 advisory. - Fix for CVE-2021-27918 - Address CVE-2021-27918 etcd - Address CVE-2021-27918 flannel - Address CVE-2021-27918 yq - Address CVE-2021-27918 conmon - Address...

Oracle Linux 8 : olcne (ELSA-2021-9267)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9267 advisory. - Address CVE-2021-27918 coredns - Fix for CVE-2021-27918 - Address CVE-2021-27918 etcd - Address CVE-2021-27918 flannel - Address CVE-2021-27918 - Address...

Oracle Linux 8 : dotnet5.0 (ELSA-2021-2036)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2036 advisory. 5.0.203-1.0.1 - Add support for new Oracle release 5.0.203-1 - Update to .NET SDK 5.0.203 and Runtime 5.0.6 - Resolves: RHBZ1954328 5.0.202-1 - Update to .NET S...

Oracle Linux 8 : redis:6 (ELSA-2021-2034)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2034 advisory. 6.0.9-3 - fix integer overflow via STRALGO LCS command CVE-2021-29477 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : squid:4 (ELSA-2021-1979)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1979 advisory. squid 7:4.11-4.2 - Resolves: 1944260 - CVE-2020-25097 squid:4/squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling...