Oracle Linux 8 : go-toolset:rhel8 (ELSA-2019-1519)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1519 advisory. - Include patch to fix CVE-2019-9741 - Include patch to fix CVE-2019-9741 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : python (ELSA-2019-2030)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2030 advisory. - Security fix for CVE-2019-10160 Resolves: rhbz1718388 - Security fix for CVE-2019-9948 Resolves: rhbz1704174 - Fixes CVE-2019-9740 and CVE-2019-9947...

Oracle Linux 8 : kernel (ELSA-2020-3010)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3010 advisory. - vfio vfio/pci: Fix SR-IOV VF handling with MMIO blocking Alex Williamson 1837309 1837310 CVE-2020-12888 - x86 kvm: Clean up host's steal time structu...

Oracle Linux 8 : sqlite (ELSA-2020-0273)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0273 advisory. 3.26.0-4 - Fixed CVE-2019-13734 1786508 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 7 : python (ELSA-2020-1131)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1131 advisory. - Security fix for CVE-2019-16056 Resolves: rhbz1750773 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : fuse (ELSA-2020-5773)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5773 advisory. - Security Update based on ELSA-2018-3324 fuse: bypass of the 'userallowother' restriction when SELinux is active. OraBugzilla: 43547CVE-2018-10906 Lans Hung...

Oracle Linux 7 : python (ELSA-2019-4876)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4876 advisory. 2.7.5-86.0.3 - Prefix dot in domain for proper subdomain validation CVE-2018-20852Orabug: 30114725 Tenable has extracted the preceding description block directl...

Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes kubernetes istio olcne (ELSA-2020-5765)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5765 advisory. - x86/speculation: Add SRBDS vulnerability and mitigation documentation Mark Gross Orabug: 31446720 CVE-2020-0543 - x86/speculation: Add Special Regist...

Oracle Linux 7 : advancecomp (ELSA-2019-2332)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2332 advisory. - Resolves: 1711051, CVE-2019-8383 denial of service Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : firefox (ELSA-2020-2031)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2031 advisory. 68.8.0-1.0.1.el82 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 7 : ntp (ELSA-2019-2077)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2077 advisory. - fix CVE-2016-7429 patch to restore default ttl configuration 1550637 - fix buffer overflow in parsing of address in ntpq and ntpdc CVE-2018-12327 Tenable has...

Oracle Linux 8 : openwsman (ELSA-2019-0972)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0972 advisory. - Fix CVE-2019-3816 Resolves: 1693972 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 7 : advancecomp (ELSA-2020-1037)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1037 advisory. - Resolves: 1711051, CVE-2019-8383 denial of service - Resolves: 1710910, CVE-2019-8379 null pointer dereference Tenable has extracted the preceding description...

Oracle Linux 6 : ruby193-ruby (ELSA-2014-1913)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1913 advisory. - Fix off-by-one stack-based buffer overflow in the encodes function CVE-2014-4975. Related: rhbz1164004 - Fix REXML billion laughs attack via paramete...

Oracle Linux 5 : kernel (ELSA-2018-0292)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0292 advisory. - Backport CVEs to RHCK/OL5 orabug 27547712 CVE-2017-5753 CVE-2017-5754 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 : dnsmasq (ELSA-2017-2840)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2017-2840 advisory. 2.45-1.1.0.1.el5 - Back port fix for CVE-2017-14491 from OL 6 errata ELSA-2017-2838 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 9 : samba (ELSA-2023-2519)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2519 advisory. - resolves: rhbz2154373 - Fix CVE-2022-38023 - Fix CVE-2022-1615 GnuTLS gnutlsrnd can fail and give predictable random values - resolves: rhbz2108332 - Fix...

Oracle Linux 8 : 389-ds:1.4 (ELSA-2019-3401)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3401 advisory. - In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout'...

Oracle Linux 8 : dnsmasq (ELSA-2021-4153)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4153 advisory. - Properly randomize outgoing ports also with bound interface CVE-2021-3448 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : qemu-kvm (ELSA-2011-1531)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1531 advisory. - kvm-CVE-2011-2527-os-posix-set-groups-properly-for-runas.patch bz722583 - CVE: CVE-2011-2527 - Resolves: bz713593 CVE-2011-2212 virtqueue: too-large indirect...