Oracle Linux 6 : firefox (ELSA-2020-5104)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-5104 advisory. 78.4.1-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one Tue Nov 10 2020 [email protected] - 78.4.1-1 -...

Oracle Linux 7 : python (ELSA-2020-5009)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5009 advisory. 2.7.5-90.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-90 - Avoid infinite loop when reading specially crafted TAR files CVE-2019-209...

Oracle Linux 8 : kernel (ELSA-2020-4685)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4685 advisory. - net Bluetooth: fix kernel oops in storependingadvreport Gopal Tiwari 1888454 1888455 CVE-2020-24490 - net Bluetooth: L2CAP: Fix calling skfilter on...

Oracle Linux 6 : firefox (ELSA-2020-3835)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3835 advisory. 78.3.0-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 78.3.0 - Update to 78.3.0 build1 78.2.0...

Oracle Linux 6 : thunderbird (ELSA-2020-4947)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4947 advisory. 78.4.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.4.0-1 - Update to 78.4.0 build1 - Disabled...

firefox security update

78.4.1-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file Tue Nov 10 2020 [email protected] - 78.4.1-1 - Update to 78.4.1 - Filtering nss/nspr libs 78.4.0-3 -...

python security update

2.7.5-90.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-90 - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481...

python3 security update

3.6.8-18.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-18 - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481 - Resolve hash collisions for Pv4Interface and IPv6Interface CVE-2020-14422 Resolves: rhbz1854926...

Oracle Linux 7 : firefox (ELSA-2020-5099)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-5099 advisory. 78.4.1-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and...

kernel security update

4.18.0-240.1.13.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64...

Oracle Linux 8 : gnupg2 (ELSA-2020-4490)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4490 advisory. 2.2.20-2 - fixes for issues found in Coverity scan 2.2.20-1 - upgrade to 2.2.20 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : fence-agents (ELSA-2020-5003)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5003 advisory. - Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz1850114 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : libvpx (ELSA-2020-4629)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4629 advisory. - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : oniguruma (ELSA-2020-4827)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4827 advisory. 6.8.2-2 - Fix CVE-2019-13225 Resolves: 1771052 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : varnish:6 (ELSA-2020-4756)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4756 advisory. - Resolves: 1790907 - CVE-2019-20637 varnish: not clearing pointer between two client requests leads to information disclosure - Resolves: 1763958 -...

Oracle Linux 8 : GNOME (ELSA-2020-4451)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4451 advisory. - Backport fix for CVE-2020-15503 from Fedora Resolves: 1853529 libsoup Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : python3 (ELSA-2020-4433)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4433 advisory. - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481 - Resolve hash collisions for Pv4Interface and...

Oracle Linux 8 : SDL (ELSA-2020-4627)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4627 advisory. 1.2.15-38 - fix CVEs - Resolves: rhbz1716209, rhbz1716210, rhbz1716211, rhbz1716212, rhbz1716213, rhbz1716214, rhbz1716215, rhbz1716216, rhbz1716217,...

Oracle Linux 8 : libxml2 (ELSA-2020-4479)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4479 advisory. - Fix CVE-2019-19956 1793001 - Fix CVE-2020-7595 1799786 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : cups (ELSA-2020-4469)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4469 advisory. - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcupss ppdFindOption in ppd-mark.c Tenable has extracted the preceding description block directl...