Oracle Linux 8 : cloud-init (ELSA-2020-4650)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4650 advisory. - Resolves: bz1812171 CVE-2020-8632 cloud-init: Too short random password length in ccsetpassword in config/ccsetpasswords.py rhel-8 - Resolves:...

Oracle Linux 8 : gnome-software / and / fwupd (ELSA-2020-4436)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4436 advisory. - Add signing with redhatsecureboot503 cert Related: CVE-2020-10713 - Security fix for CVE-2020-10759 Tenable has extracted the preceding description block...

Oracle Linux 8 : bind (ELSA-2020-4500)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4500 advisory. - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet CVE-2020-8623 - Correct update-policy type subdomain to match...

Oracle Linux 8 : cyrus-imapd (ELSA-2020-4655)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4655 advisory. - Add fix for CVE-2019-19783 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : freeradius:3.0 (ELSA-2020-4799)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4799 advisory. 3.0.20-3 - Require make for proper bootstrap execution, removes post script Resolves: bz1672285 3.0.20-2 - Fix breakage caused by OpenSSL FIPS regression Relate...

Oracle Linux 8 : evolution (ELSA-2020-4649)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4649 advisory. - Resolves: 1859141 CVE-2020-14928: Response Injection via STARTTLS in SMTP and POP3 evolution-mapi Tenable has extracted the preceding description block direct...

Oracle Linux 8 : file-roller (ELSA-2020-4820)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4820 advisory. - Fix CVE-2020-11736 1827395 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : libldb (ELSA-2020-4568)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4568 advisory. - Resolves: rhbz1849615 - Fix CVE-2020-10730 use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : vim (ELSA-2020-4453)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4453 advisory. - 1842755 - CVE-2019-20807 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not test...

Oracle Linux 8 : libarchive (ELSA-2020-4443)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4443 advisory. 3.3.2-9 - Fix out-of-bounds read CVE-2019-19221 1803967 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : libreoffice (ELSA-2020-4628)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4628 advisory. libcmis 0.5.2-1 - Related: rhbz1796893 update to 0.5.2 liborcus 0.14.1-1 - Related: rhbz1796893 update to 0.14.1 libreoffice 6.3.6.2-3.0.1 - Replace...

Oracle Linux 8 : qt5-qtbase / and / qt5-qtwebsockets (ELSA-2020-4690)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4690 advisory. qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the worki...

Oracle Linux 8 : openwsman (ELSA-2020-4689)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4689 advisory. - Fix CVE-2019-3833 Resolves: 1687865 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : opensc (ELSA-2020-4483)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4483 advisory. 0.20.0-2 - Unbreak different CardOS 5 configurations supporting raw RSA 1830856 0.20.0-1 - Rebase to current upstream release 1810660 Tenable has...

Oracle Linux 8 : libvpx (ELSA-2020-4629)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4629 advisory. - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : glibc (ELSA-2020-4444)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4444 advisory. - CVE-2020-1751: Fix an array overflow in backtrace on PowerPC. 1813399 - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,...

Oracle Linux 8 : libexif (ELSA-2020-4766)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4766 advisory. - Add patch for CVE-2020-0181/CVE-2020-0198 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 8 : cyrus-sasl (ELSA-2020-4497)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4497 advisory. - Backport fix for CVE-2019-19906 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 8 : frr (ELSA-2020-4619)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4619 advisory. 7.0-10 - Resolves: 1867793 - FRR does not conform to the source port range specified in RFC5881 7.0-9 - Resolves: 1852476 - default permission issue eases...

Oracle Linux 8 : librabbitmq (ELSA-2020-4445)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4445 advisory. 0.9.0-2 - Resolves: 1809992, CVE-2019-18609 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...