openssl security update

An update is available for openssl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...

Oracle Linux 8 : firefox (ELSA-2021-0990)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0990 advisory. 78.9.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.9.0-1 - Update to 78.9.0...

Oracle Linux 8 : thunderbird (ELSA-2021-0993)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0993 advisory. 78.9.0-3.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.9.0-3 - Update to 78.9.0 build2, updated...

CVE-2021-3449

A flaw was found in openssl. A server crash and denial of service attack could occur if a client sends a TLSv1.2 renegotiation ClientHello and omits the signaturealgorithms extension but includes a signaturealgorithmscert extension. The highest threat from this vulnerability is to system...

RHEL 8 : firefox (RHSA-2021:0991)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0991 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Oracle Linux 8 : pki-core:10.6 (ELSA-2021-0966)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0966 advisory. pki-core 10.9.4-3.0.1 - Remove redhat reference. 10.9.4-3 - Bug 1933146 - PKI instance creation failed with new 389-ds-base build 10.9.4-2 - CVE-2021-20179: Fix...

pki-core:10.6 security update

An update is available for ldapjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Public Key Infrastructure PKI Core contains fundamental packages required...

Oracle Linux 8 : python38 (ELSA-2021-9130)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9130 advisory. python38 3.8.3-3.0.1 - Fix buffer overflow in PyCArgrepr Orabug: 32551171CVE-2021-3177 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : python2 (ELSA-2021-9128)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9128 advisory. python2 2.7.17-2.0.2 - Fix buffer overflow in PyCArgrepr Orabug: 32551171CVE-2021-3177 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : python36 (ELSA-2021-9129)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9129 advisory. python36 3.6.8-2.0.1 - Rebuild with python containing fix for Orabug: 32551171CVE-2021-3177 Tenable has extracted the preceding description block directly from...

CVE-2019-9517

A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server's...

Security fix for the ALT Linux 8 package postgresql11-1C version 11.10-alt0.M80P.2

11.10-alt0.M80P.2 built March 17, 2021 Alexei Takaseev in task 266728 Feb. 20, 2021 Alexei Takaseev - Fixes CVE-2021-3393 - Update 1C patch...

Security fix for the ALT Linux 8 package postgresql12 version 12.6-alt0.M80P.1

12.6-alt0.M80P.1 built March 17, 2021 Alexei Takaseev in task 266728 Feb. 20, 2021 Alexei Takaseev - 12.6 Fixes CVE-2021-3393...

Security fix for the ALT Linux 8 package postgresql11 version 11.11-alt0.M80P.1

11.11-alt0.M80P.1 built March 17, 2021 Alexei Takaseev in task 266728 Feb. 20, 2021 Alexei Takaseev - 11.11 Fixes CVE-2021-3393...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9114)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9114 advisory. - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32603379 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Ensure...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9115)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9115 advisory. - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32603379 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Ensure...

Oracle Linux 8 : .NET / Core / on / OL / 8 (ELSA-2021-0793)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0793 advisory. 5.0.104-1.0.1 - Add support for new Oracle release 5.0.104-1 - Update to .NET SDK 5.0.104 and Runtime 5.0.4 - Resolves: RHBZ1934247 Tenable has extracted the...

Oracle Linux 8 : wpa_supplicant (ELSA-2021-0809)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0809 advisory. 1:2.9-2.1 - P2P: Fix a corner case in peer addition based on PD Request CVE-2021-27803 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : dotnet (ELSA-2021-0788)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0788 advisory. 2.1.522-1 - Update to .NET Core SDK 2.1.522 and Runtime 2.1.26 - Resolves: RHBZ1933844 Tenable has extracted the preceding description block directly from the...

NewStart CGSL MAIN 6.02 : gnome-settings-daemon Vulnerability (NS-SA-2021-0076)

The remote NewStart CGSL host, running version MAIN 6.02, has gnome-settings-daemon packages installed that are affected by a vulnerability: - A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal...