Oracle Linux 7 : thunderbird (ELSA-2020-2050)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2050 advisory. 68.8.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.8.0-1 - Update to 68.8.0 build2 Tenable has...

libreswan security update

3.29-7.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 3.29-7 - Resolves: rhbz1814935 CVE-2020-1763 doS attack via malicious IKEv1 informational exchange message rhel-8.2.0.z...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5676)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5676 advisory. - KVM: x86: Protect ioapicreadindirect from Spectre-v1/L1TF attacks Marios Pomonis Orabug: 31191092 CVE-2013-1798 - HID: hiddev: do cleanup in failure ...

container-tools:ol8 security update

buildah 1.11.6-8.0.1 - Fixes troubles with oracle registry login Orabug: 29937283 1.11.6-8 - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: 1817742 1.11.6-7 - fix 'COPY command takes long time with buildah' - Resolves...

Oracle Linux 8 : gnutls (ELSA-2020-1998)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1998 advisory. 3.6.8-10 - Fix CVE-2020-11501 1826176 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : targetcli (ELSA-2020-1933)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1933 advisory. 2.1.51-4 - Increase the release version 2.1.51-3 - targetclid.sock allows unprivileged user to execute commands 2.1.51-2 - Create the target/pr directory when...

Oracle Linux 8 : git (ELSA-2020-1980)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1980 advisory. 2.18.4-2 - Update to release 2.18.4 - Resolves: CVE-2020-11008 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5671)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5671 advisory. - HID: hiddev: do cleanup in failure of opening a device Hillf Danton Orabug: 31206361 CVE-2019-19527 - HID: hiddev: avoid opening a disconnected...

Oracle Linux 7 : squid (ELSA-2020-2040)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2040 advisory. - Resolves: 1828359 - CVE-2020-11945 squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution -...

Oracle Linux 7 : firefox (ELSA-2020-2037)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2037 advisory. 68.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

firefox security update

68.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file Wed Apr 29 2020 Jan Horak - Update to 68.8.0 build1 68.7.0-3 - Added fix for rhbz1821418...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5670)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5670 advisory. - brcmfmac: add subtype check for event handling in data path John Donnelly Orabug: 30776354 CVE-2019-9503 - mwifiex: pcie: Fix memory leak in...

kernel security, bug fix, and enhancement update

4.18.0-193.el8.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-193.el8 - kvm KVM: PPC: Book3S HV: Use gfntopfnmemslot in HPT page fau...

python3 security and bug fix update

3.6.8-23.0.1.el8 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-23 - Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode - Use OpenSSLs DRBG and disable os.getrandom function in FIPS mode Resolves: rhbz1754028, rhbz1754027, rhbz1754026, rhbz177447...

Oracle Linux 6 : python-twisted-web (ELSA-2020-1962)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1962 advisory. - Fix CVE-2020-10108 HTTP request smuggling when presented with two Content-Length headers Resolves: rhbz1813439 Tenable has extracted the preceding description...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5663)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5663 advisory. - slcan: Don't transmit uninitialized stack data in padding Richard Palethorpe Orabug: 31136750 CVE-2020-11494 - blktrace: Protect q-blktrace with...

Oracle Linux 8 : java-11-openjdk (ELSA-2020-1514)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1514 advisory. 1:11.0.7.10-1 - Add JDK-8228407 backport to resolve crashes during verification. - Resolves: rhbz1810557 1:11.0.7.10-1 - Amend release notes, removing...

Oracle Linux 6 : kernel (ELSA-2020-1524)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1524 advisory. - wireless rtlwifi: Fix potential overflow on P2P code Jarod Wilson 1775226 CVE-2019-17666 Tenable has extracted the preceding description block direct...

Oracle Linux 7 : git (ELSA-2020-1511)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1511 advisory. 1.8.3.1-22 - Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-1515)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1515 advisory. 1:1.8.0.252.b09-2 - Add release notes. - Resolves: rhbz1810557 1:1.8.0.252.b09-1 - Make use of --with-extra-asflags introduced in jdk8u252-b01. -...