kernel security and bug fix update

4.18.0-147.5.11.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-147.5.11 - powerpc powerpc/shared: Use static key to detect shared...

Oracle Linux 7 : kernel (ELSA-2020-0374)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0374 advisory. - wireless mwifiex: Fix heap overflow in mmwifiexprocesstdlsactionframe Stanislaw Gruszka 1776156 1776157 CVE-2019-14901 Tenable has extracted the...

kernel security and bug fix update

3.10.0-1062.12.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1062.12.1 - powerpc powerpc/pseries: Remove confusing warning message Gusta...

Oracle Linux 6 : git (ELSA-2020-0316)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0316 advisory. 1.7.1-10 - fixes arbitrary code execution via .gitmodules Resolves: CVE-2018-17456 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5528)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5528 advisory. 4.14.35-1902.10.4.1.el7uek - IB/mlx4: Fix use after free in RDMA CM disconnect code path Manjunath Patil Orabug: 30815818 - IB/mlx4: Fix leak in...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5526)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5526 advisory. - x86/KVM: Clean up host's steal time structure Boris Ostrovsky Orabug: 30489861 CVE-2019-3016 CVE-2019-3016 - x86/KVM: Make sure KVMVCPUFLUSHTLB flag ...

Oracle Linux 7 : openjpeg2 (ELSA-2020-0262)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0262 advisory. 2.3.1-2 - Fix CVE-2020-6851 resolves: 1790586 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : libarchive (ELSA-2020-0271)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0271 advisory. 3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 8 : openjpeg2 (ELSA-2020-0274)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0274 advisory. 2.3.1-2 - Fix CVE-2020-6851 1790589 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 7 : sqlite (ELSA-2020-0227)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0227 advisory. 3.7.17-8.1 - Fixes for CVE-2019-13734 1786505 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 : openslp (ELSA-2020-0199)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0199 advisory. 2.0.0-4 - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: 1788447 Tenable has extracted the preceding...

Oracle Linux 7 : python-reportlab (ELSA-2020-0195)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0195 advisory. 2.5-9.el77.1 - Do not eval strings passed to toColor - Resolves: 1788552 2.5-9 - Mass rebuild 2014-01-24 2.5-8 - Mass rebuild 2013-12-27 2.5-7 - Rebuilt for...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-0202)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0202 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 7 : libarchive (ELSA-2020-0203)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0203 advisory. 3.1.2-14 - Fix patch application error 3.1.2-13 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2020-0196)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0196 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 7 : apache-commons-beanutils (ELSA-2020-0194)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0194 advisory. - Fix CVE-2014-0114 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 6 : python-reportlab (ELSA-2020-0197)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0197 advisory. 2.3-3.el610.1 - Do not eval strings passed to toColor - Resolves: 1788551 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : thunderbird (ELSA-2020-0127)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0127 advisory. 68.4.1-2.0.1.el81 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.4.1-2 - Update to 68.4.1 build1 Tenable ha...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2020-0157)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0157 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 8 : .NET / Core / on / Red / Hat / Enterprise / Linux (ELSA-2020-0130)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0130 advisory. 102-2.0.1.el81 - support OL release scheme 3.0.102-2 - Fix prebuilts leaking into the final build - Fix regressions in binary hardering - Resolves:...