Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5542)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5542 advisory. - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30847137 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5540)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5540 advisory. - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30847136 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5541)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5541 advisory. - mwifiex: Fix heap overflow in mmwifiexprocesstdlsactionframe qize wang Orabug: 30819439 CVE-2019-14901 - media: b2c2-flexcop-usb: add sanity...

Oracle Linux 7 : firefox (ELSA-2020-0520)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0520 advisory. 68.5.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5535)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5535 advisory. - KVM: x86: fix out-of-bounds write in KVMGETEMULATEDCPUID CVE-2019-19332 Paolo Bonzini Orabug: 30658695 CVE-2019-19332 - rtlwifi: Fix potential...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2020-5532)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5532 advisory. 2.6.39-400.319.1 - net-sysfs: Fix mem leak in netdevregisterkobject YueHaibing Orabug: 30350265 CVE-2019-15916 Tenable has extracted the preceding descripti...

Oracle Linux 8 : kernel (ELSA-2020-0339)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0339 advisory. - x86 kvm: vmx: use MSRIA32TSXCTRL to hard-disable TSX on guest that lack it Paolo Bonzini 1781660 1779553 CVE-2019-19338 - x86 kvm: vmx: implement...

Oracle Linux 8 : grub2 (ELSA-2020-0335)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0335 advisory. 2.02-78.0.3.el81.1 - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS Orabug: 30643497 - set EFIDIR as redhat for additional grub2 tools Orabug: 298755...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5528)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5528 advisory. 4.14.35-1902.10.4.1.el7uek - IB/mlx4: Fix use after free in RDMA CM disconnect code path Manjunath Patil Orabug: 30815818 - IB/mlx4: Fix leak in...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5526)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5526 advisory. - x86/KVM: Clean up host's steal time structure Boris Ostrovsky Orabug: 30489861 CVE-2019-3016 CVE-2019-3016 - x86/KVM: Make sure KVMVCPUFLUSHTLB flag ...

Oracle Linux 8 : libarchive (ELSA-2020-0271)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0271 advisory. 3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 7 : python-reportlab (ELSA-2020-0195)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0195 advisory. 2.5-9.el77.1 - Do not eval strings passed to toColor - Resolves: 1788552 2.5-9 - Mass rebuild 2014-01-24 2.5-8 - Mass rebuild 2013-12-27 2.5-7 - Rebuilt for...

Oracle Linux 7 : apache-commons-beanutils (ELSA-2020-0194)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0194 advisory. - Fix CVE-2014-0114 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5511)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5511 advisory. kernel-uek 3.8.13-118.42.1 - scsi: libsas: delete sas port if expander discover failed Jason Yan Orabug: 30580688 CVE-2019-15807 Tenable has extracted the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5508)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5508 advisory. - scsi: libsas: delete sas port if expander discover failed Jason Yan Orabug: 30580687 CVE-2019-15807 - scsi: qla2xxx: fix a potential NULL pointer...

Oracle Linux 8 : container-tools:1.0 (ELSA-2019-4273)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4273 advisory. - rebuild because of CVE-2019-9512 and CVE-2019-9514 - rebuild because of CVE-2019-9512 and CVE-2019-9514 - rebuild because of CVE-2019-9512 and...

Oracle Linux 8 : grub2 (ELSA-2019-4869)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4869 advisory. 2.02-78.0.2 - grub-set-bootflag: fix grubenv update method, fix CVE-2019-14865 Orabug: 30607067 Tenable has extracted the preceding description block directly...

Oracle Linux 6 : kernel (ELSA-2019-4256)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4256 advisory. - virt KVM: coalescedmmio: add bounds checking Bandan Das 1746799 CVE-2019-14821 - virt KVM: MMIO: Lock coalesced device when checking for available entry Banda...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4878)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4878 advisory. - USB: sisusbvga: fix oops in error path of sisusbprobe Oliver Neukum Orabug: 30548564 CVE-2019-15219 - media: usb:zr364xx:Fix KASAN:null-ptr-deref Rea...

Oracle Linux 7 : thunderbird (ELSA-2019-4148)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4148 advisory. 68.3.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.3.0-1 - Update to 68.3.0 build2 68.2.0-2 - Adde...