RHEL 7 : OpenShift Container Platform 4.5.6 (RHSA-2020:3453)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3453 advisory. The Matrix Project is a module which handles creating Jenkins multi-configuration projects matrix projects. Matrix Authorization allows...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5802)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5802 advisory. - crypto: user - fix memory leak in cryptoreport Navid Emamdoost Orabug: 31351641 CVE-2019-19062 Tenable has extracted the preceding description...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5804)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5804 advisory. - fs/binfmtelf.c: allocate initialized memory in fillthreadcoreinfo Alexander Potapenko Orabug: 31350638 CVE-2020-10732 - net-sysfs: call devhold if...

Oracle Linux 7 : thunderbird (ELSA-2020-3344)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3344 advisory. 68.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.11.0-1 - Update to 68.11.0 build1 Tenable has...

RHEL 7 : java-11-openjdk (RHSA-2020:2969)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2969 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

CentOS 7 : java-11-openjdk (RHSA-2020:2969)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2969 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u25...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5801)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5801 advisory. - media: rc: prevent memory leak in cx23888irprobe Navid Emamdoost Orabug: 31351672 CVE-2019-19054 - vfio/pci: Fix SR-IOV VF handling with MMIO...

RHEL 7 : kernel (RHSA-2020:3232)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3232 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in...

RHEL 7 : grub2 (RHSA-2020:3275)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3275 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

RHEL 7 : postgresql-jdbc (RHSA-2020:3285)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3285 advisory. PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs ...

RHEL 7 : grub2 (RHSA-2020:3273)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3273 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

Oracle Linux 7 : firefox (ELSA-2020-3253)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3253 advisory. 68.11.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....

Oracle Linux 7 : kernel (ELSA-2020-3220) (deprecated)

From Red Hat Security Advisory 2020:3220 : The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3220 advisory. - kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driv...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5791)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5791 advisory. - efi: Restrict efivarssdtload when the kernel is locked down Matthew Garrett Orabug: 31662729 CVE-2019-20908 Tenable has extracted the preceding description...

CVE-2020-14308

A flaw was found in current grub2 versions as shipped with Red Hat Enterprise Linux 7 and 8, where the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This issue leads the function to return invalid memory allocations, causing heap-based...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2020-2968)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2968 advisory. 1:1.8.0.262.b10-0 - Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Fix...

Oracle Linux 7 : thunderbird (ELSA-2020-2906)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2906 advisory. 68.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.10.0-1 - Update to 68.10.0 build1 Tenable has...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5756)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5756 advisory. - mm: Fix mremap not considering huge pmd devmap Fan Yang Orabug: 31452396 CVE-2020-10757 CVE-2020-10757 Tenable has extracted the preceding...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5755)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5755 advisory. - p54usb: Fix race between disconnect and firmware loading Alan Stern Orabug: 31351863 CVE-2019-15220 - media: rc: prevent memory leak in cx23888irprob...

Code injection

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...