Oracle Linux 8 : curl (ELSA-2020-4599)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4599 advisory. - avoid overwriting a local file with -J CVE-2020-8177 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : libssh (ELSA-2020-4545)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4545 advisory. - Add a test for CVE-2019-14889 - Fixed CVE-2019-14889 1781782 - Fixed CVE-2020-1730 1802422 Tenable has extracted the preceding description block...

Oracle Linux 8 : mailman:2.1 (ELSA-2020-4667)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4667 advisory. - Fix for CVE-2020-12137 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 8 : libldb (ELSA-2020-4568)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4568 advisory. - Resolves: rhbz1849615 - Fix CVE-2020-10730 use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : libvpx (ELSA-2020-4629)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4629 advisory. - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : libxml2 (ELSA-2020-4479)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4479 advisory. - Fix CVE-2019-19956 1793001 - Fix CVE-2020-7595 1799786 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : libreoffice (ELSA-2020-4628)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4628 advisory. libcmis 0.5.2-1 - Related: rhbz1796893 update to 0.5.2 liborcus 0.14.1-1 - Related: rhbz1796893 update to 0.14.1 libreoffice 6.3.6.2-3.0.1 - Replace...

Oracle Linux 8 : glibc (ELSA-2020-4444)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4444 advisory. - CVE-2020-1751: Fix an array overflow in backtrace on PowerPC. 1813399 - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,...

Oracle Linux 8 : targetcli (ELSA-2020-4697)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4697 advisory. 2.1.53-1 - Update to new upstream version 2.1.52-1 - Update to new upstream version Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 8 : libpcap (ELSA-2020-4547)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4547 advisory. 14:1.9.1-4 - Related: 1806422 - Building libpcap to side-tag for tcpdump 14:1.9.1-3 - Related: 1743650 - reverting rdma changes due to unresolved dependency loo...

Oracle Linux 8 : cyrus-sasl (ELSA-2020-4497)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4497 advisory. - Backport fix for CVE-2019-19906 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 8 : freerdp / and / vinagre (ELSA-2020-4647)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4647 advisory. freerdp 2:2.1.1-1 - Update to 2.1.1 rhbz1834287. 2:2.0.0-47.rc4 - Fix SCARDINSUFFICIENTBUFFER error rhbz1803054 - Do not advertise /usb in help output...

Oracle Linux 8 : openssl (ELSA-2020-4514)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4514 advisory. 1.1.1g-11 - Further changes for SP 800-56A rev3 requirements 1.1.1g-9 - Rewire FIPSdrbg API to use the RANDDRBG - Use the well known DH groups in TLS even for...

Oracle Linux 8 : python-pip (ELSA-2020-4432)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4432 advisory. 9.0.3-18 - Patch for pip install allow directory traversal, leading to arbitrary file write Resolves: rhbz1868016 9.0.3-17 - Remove unused CA bundle from the...

Oracle Linux 8 : cryptsetup (ELSA-2020-4542)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4542 advisory. 2.3.3-2 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: 1872294 2.3.3-1 - Update to cryptsetup 2.3.3 - Resolves:...

Oracle Linux 8 : prometheus-jmx-exporter (ELSA-2020-4807)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4807 advisory. 0.12.0-6 - Fix CVE-2017-18640 by using updated snakeyaml. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : edk2 (ELSA-2020-4805)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4805 advisory. 20200602gitca407c7246bf-3.el8 - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch bz1861718 - Resolves: bz1861718 Very slow boot when overcommitti...

Oracle Linux 8 : gd (ELSA-2020-4659)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4659 advisory. - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone Resolves: RHBZ1811788 - Fixed heap based buffer overflow in...

Oracle Linux 8 : dovecot (ELSA-2020-4763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4763 advisory. - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866756 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation...

Oracle Linux 8 : qt5-qtbase / and / qt5-qtwebsockets (ELSA-2020-4690)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4690 advisory. qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the worki...