RHEL 7 : qemu-kvm (RHSA-2020:0366)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0366 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide th...

RHEL 7 : kernel-rt (RHSA-2020:0375)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0375 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5526)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5526 advisory. - x86/KVM: Clean up host's steal time structure Boris Ostrovsky Orabug: 30489861 CVE-2019-3016 CVE-2019-3016 - x86/KVM: Make sure KVMVCPUFLUSHTLB flag ...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5528)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5528 advisory. 4.14.35-1902.10.4.1.el7uek - IB/mlx4: Fix use after free in RDMA CM disconnect code path Manjunath Patil Orabug: 30815818 - IB/mlx4: Fix leak in...

CentOS 7 : openjpeg2 (RHSA-2020:0262)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0262 advisory. - OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

CentOS 7 : apache-commons-beanutils (RHSA-2020:0194)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0194 advisory. - In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader v...

Oracle Linux 7 : openjpeg2 (ELSA-2020-0262)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0262 advisory. 2.3.1-2 - Fix CVE-2020-6851 resolves: 1790586 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : sqlite (ELSA-2020-0227)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0227 advisory. 3.7.17-8.1 - Fixes for CVE-2019-13734 1786505 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RHEL 7 / 8 : Ansible security update (2.9.4) (Moderate) (RHSA-2020:0218)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0218 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

Oracle Linux 7 : apache-commons-beanutils (ELSA-2020-0194)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0194 advisory. - Fix CVE-2014-0114 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 7 : libarchive (ELSA-2020-0203)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0203 advisory. 3.1.2-14 - Fix patch application error 3.1.2-13 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2020-0196)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0196 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 7 : python-reportlab (ELSA-2020-0195)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0195 advisory. 2.5-9.el77.1 - Do not eval strings passed to toColor - Resolves: 1788552 2.5-9 - Mass rebuild 2014-01-24 2.5-8 - Mass rebuild 2013-12-27 2.5-7 - Rebuilt for...

RHEL 7 : openvswitch (RHSA-2020:0165)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0165 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

Oracle Linux 7 : java-11-openjdk (ELSA-2020-0122)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0122 advisory. 1:11.0.6.10-1.0.1 - link atomic for ix86 build 1:11.0.6.10-1 - Add JDK-8236039 backport to resolve OpenShift blocker - Resolves: rhbz1785753...

RHEL 7 : git (RHSA-2020:0124)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0124 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...

Oracle Linux 7 : thunderbird (ELSA-2020-0120)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0120 advisory. 68.4.1-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.4.1-2 - Update to 68.4.1 build1 Tenable has...

CentOS 7 : firefox (RHSA-2020:0085)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0085 advisory. - When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injecti...

Oracle Linux 7 : firefox (ELSA-2020-0085)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0085 advisory. 68.4.1-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

CVE-2018-5407

A microprocessor side-channel vulnerability was found on SMT e.g, Hyper-Threading architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information. Mitigation At this time Red Hat Engineering is working on patche...