Oracle Linux 8 : glibc (ELSA-2021-4358)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4358 advisory. - CVE-2021-33574: Deep copy pthread attribute in mqnotify 1966472 - CVE-2021-35942: wordexp: handle overflow in positional parameter number 1979127 -...

Oracle Linux 8 : libgcrypt (ELSA-2021-4409)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4409 advisory. - Fix for CVE-2021-33560 1971421 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 8 : rust-toolset:ol8 (ELSA-2021-4270)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4270 advisory. rust-toolset 1.54.0-1 - Update to Rust and Cargo 1.54.0. 1.53.0-1 - Update to Rust and Cargo 1.53.0. rust 1.54.0-2 - Make std-static-wasm arch-specific to avoid...

Oracle Linux 8 : cups (ELSA-2021-4393)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4393 advisory. - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c rhel-8 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : openssl (ELSA-2021-4424)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4424 advisory. 1:1.1.1k-4 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in...

Oracle Linux 8 : jasper (ELSA-2021-4235)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4235 advisory. - Fix CVE-2021-26927 1933860 - Fix CVE-2021-26926 1922316 - Fix CVE-2021-3272 1922283 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : pcre (ELSA-2021-4373)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4373 advisory. - Fix CVE-2019-20838 a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier bug 1852252 Tenable has...

Oracle Linux 8 : spamassassin (ELSA-2021-4315)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4315 advisory. 3.4.4-4.el4 - Fix header parsing Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 8 : python3 (ELSA-2021-4399)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4399 advisory. - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs Resolves: rhbz1995234 Tenable has extracted the preceding description...

Oracle Linux 8 : bind (ELSA-2021-4384)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4384 advisory. 32:9.11.26-6 - Use random entropy to generate unique TKEY identifiers 1980916 32:9.11.26-5 - Fix possible assertion failure iscrefcountcurrent == 0 in freerbtdb...

Oracle Linux 8 : vim (ELSA-2021-4517)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4517 advisory. - 2004974 - CVE-2021-3796 vim: use-after-free in nvreplace in normal.c rhel-8.5.0 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : tpm2-tools (ELSA-2021-4413)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4413 advisory. - Fix CVE-2021-3565 resolves: rhbz1965981 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 8 : httpd:2.4 (ELSA-2021-4257)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4257 advisory. - Add checks on the configured UDS path Orabug: 33412270CVE-2021-40438 - Resolves: 1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression -...

Oracle Linux 8 : openjpeg2 (ELSA-2021-4251)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4251 advisory. - Fix CVE-2021-3575 1969279 - Fix CVE-2021-29338 1951332 - Resolves: CVE-2018-5727 1538467 - Resolves: CVE-2018-5785 1538556 - Resolves: CVE-2018-20845...

Oracle Linux 8 : squid:4 (ELSA-2021-4292)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4292 advisory. libecap squid 7:4.15-1 - new version 4.15 - Resolves: 1964384 - squid:4 rebase to 4.15 7:4.11-5 - Resolves: 1944261 - CVE-2020-25097 squid:4/squid:...

Oracle Linux 8 : lasso (ELSA-2021-4325)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4325 advisory. - Resolves: rhbz1951653 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses rhel-8 - Resolves: rhbz1951653 - CVE-2021-28091...

Oracle Linux 8 : dnf (ELSA-2021-4464)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4464 advisory. dnf 4.7.0-4.0.1 -Fixed python stack trace with updateinfo list cves command Orabug: 32749660 - Replaced upstream bugzilla reporting reference. Orabug: 32829849...

Oracle Linux 8 : graphviz (ELSA-2021-4256)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4256 advisory. - Fixed races during pdf documentation build which should build docs correctly Related: CVE-2020-18032 - Rebuilt, because pdf documentation were built incorrect...

Oracle Linux 8 : gnutls / and / nettle (ELSA-2021-4451)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4451 advisory. - Backport CVE-2021-3580 from upstream 3.7.3 release 1967990 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : NetworkManager (ELSA-2021-4361)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4361 advisory. - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 rh 1961251, CVE-2020-13529 Tenable has extracted the preceding description block directly from the Oracle...