Oracle Linux 8 : ncurses (ELSA-2021-4426)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4426 advisory. - fix buffer overflow in terminfo entry hashtable CVE-2019-17594 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : gnutls / and / nettle (ELSA-2021-4451)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4451 advisory. - Backport CVE-2021-3580 from upstream 3.7.3 release 1967990 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : kernel (ELSA-2021-4356)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4356 advisory. - ovl: prevent private clone if bind mount is not allowed Miklos Szeredi 1993131 CVE-2021-3732 - KVM: nSVM: avoid picking up unsupported bits from L2 i...

Oracle Linux 8 : dnf (ELSA-2021-4464)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4464 advisory. dnf 4.7.0-4.0.1 -Fixed python stack trace with updateinfo list cves command Orabug: 32749660 - Replaced upstream bugzilla reporting reference. Orabug: 32829849...

Oracle Linux 8 : lasso (ELSA-2021-4325)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4325 advisory. - Resolves: rhbz1951653 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses rhel-8 - Resolves: rhbz1951653 - CVE-2021-28091...

Oracle Linux 8 : libX11 (ELSA-2021-4326)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4326 advisory. 1.6.8-5 - Fix CVE-2021-31535 1962439 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 8 : NetworkManager (ELSA-2021-4361)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4361 advisory. - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 rh 1961251, CVE-2020-13529 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : httpd:2.4 (ELSA-2021-4257)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4257 advisory. - Add checks on the configured UDS path Orabug: 33412270CVE-2021-40438 - Resolves: 1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression -...

Oracle Linux 8 : python-pip (ELSA-2021-4455)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4455 advisory. 9.0.3-20 - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references Resolves: rhbz1962856 Tenable has extracted the preceding...

Oracle Linux 8 : openssl (ELSA-2021-4424)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4424 advisory. 1:1.1.1k-4 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in...

Oracle Linux 8 : libgcrypt (ELSA-2021-4409)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4409 advisory. - Fix for CVE-2021-33560 1971421 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 8 : GNOME (ELSA-2021-4381)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4381 advisory. - CVE-2020-36241, CVE-2021-28650: Do not allow symlink in parents rhbz1928701 gnome-calculator - Backport fix for CVE-2020-24870 from upstream Resolves...

Oracle Linux 8 : sqlite (ELSA-2021-4396)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4396 advisory. - Removing fix for CVE-2019-19645 unaffected - Removing fix for CVE-2019-19880 unaffected - Fixed CVE-2019-5827 1710184 - Fixed CVE-2019-13750 1786510 ...

Oracle Linux 8 : linuxptp (ELSA-2021-4321)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4321 advisory. - update to 3.1.1 1895005 CVE-2021-3571 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 : tcpdump (ELSA-2021-4236)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4236 advisory. 14:4.9.3-2 - Resolves: 1860216 - tcpdump can not parse mptcp options - Resolves: 1901635 - ppp decapsulator can be convinced to allocate a large amount of memor...

Oracle Linux 8 : rust-toolset:ol8 (ELSA-2021-4270)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4270 advisory. rust-toolset 1.54.0-1 - Update to Rust and Cargo 1.54.0. 1.53.0-1 - Update to Rust and Cargo 1.53.0. rust 1.54.0-2 - Make std-static-wasm arch-specific to avoid...

Oracle Linux 8 : glib2 (ELSA-2021-4385)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4385 advisory. - Refresh CVE-2021-27219 patcheset, using better-targeted fixes Resolves: 1939108 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : jasper (ELSA-2021-4235)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4235 advisory. - Fix CVE-2021-26927 1933860 - Fix CVE-2021-26926 1922316 - Fix CVE-2021-3272 1922283 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : compat-exiv2-026 (ELSA-2021-4319)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4319 advisory. 0.26-6 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz1993283 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header...

Oracle Linux 8 : binutils (ELSA-2021-4364)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4364 advisory. 2.30-108.0.2 - Forward-port the following update: 2.30-93.0.4 - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps - Backport test...