Oracle Linux 7 : nettle (ELSA-2021-1145)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1145 advisory. 2.7.1-9 - Port fixes for potential miscalculation in ecdsaverify 1943156 Tenable has extracted the preceding description block directly from the Oracle Linux...

RHEL 7 : nettle (RHSA-2021:1145)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1145 advisory. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++...

Oracle Linux 7 : libldb (ELSA-2021-1072)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1072 advisory. 1.5.4-2 - resolves: 1941511 - Fix CVE-2021-20277 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

kernel security and bug fix update

3.10.0-1160.24.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

Oracle Linux 7 : kernel (ELSA-2021-1071)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1071 advisory. - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech 1930826 CVE-2021-27365 - scsi: iscsi: Ensure sysfs attributes are limited to PAGESIZE Chr...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9164)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9164 advisory. - audit: fix error handling in auditdatatoentry Paul Moore Orabug: 32608451 CVE-2020-0444 - scsi: iscsi: Ensure sysfs attributes are limited to...

RHEL 7 : kpatch-patch (RHSA-2021:1069)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1069 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Oracle Linux 7 : flatpak (ELSA-2021-1002)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1002 advisory. 1.0.9-11 - Fix CVE-2021-21381 1938059 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 7 : thunderbird (ELSA-2021-0996)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0996 advisory. 78.9.0-3.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.9.0-3 - Update to 78.9.0 build2, updated...

Oracle Linux 7 : firefox (ELSA-2021-0992)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0992 advisory. 78.9.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9135)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9135 advisory. 4.14.35-2047.500.9.3.el7uek - net/rds: Reject error code change Ka-Cheong Poon Orabug: 32577425 - PCI: hotplug: Add module parameter to allow user...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9136)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9136 advisory. - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492110 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulich...

Oracle Linux 7 : ipa (ELSA-2021-0860)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0860 advisory. - Resolves: 1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing elements to manipulation methods could result in untrusted code execution - WebUI: Fix...

Oracle Linux 7 : kernel (ELSA-2021-0856)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0856 advisory. - pinctrl devicetree: Avoid taking direct reference to device name string Aristeu Rozanski 1922902 CVE-2020-0427 - pinctrl Delete an error message...

RHEL 7 : kpatch-patch (RHSA-2021:0862)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0862 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Oracle Linux 7 : pki-core (ELSA-2021-0851)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0851 advisory. - Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token parameters in TPS resulting in stored XSS certificatesystem9-default edewata, asche...

RHEL 7 : python (RHSA-2021:0881)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0881 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9112)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9112 advisory. - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32634994 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Ensure sysfs...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9115)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9115 advisory. - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32603379 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Ensure...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9116)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9116 advisory. - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32634994 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Ensure sysfs...