Oracle Linux 8 : cups (ELSA-2020-4469)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4469 advisory. - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcupss ppdFindOption in ppd-mark.c Tenable has extracted the preceding description block directl...

Oracle Linux 8 : evolution (ELSA-2020-4649)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4649 advisory. - Resolves: 1859141 CVE-2020-14928: Response Injection via STARTTLS in SMTP and POP3 evolution-mapi Tenable has extracted the preceding description block direct...

Oracle Linux 8 : gd (ELSA-2020-4659)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4659 advisory. - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone Resolves: RHBZ1811788 - Fixed heap based buffer overflow in...

Oracle Linux 8 : libxslt (ELSA-2020-4464)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4464 advisory. - Fix CVE-2019-18197 1775517 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : edk2 (ELSA-2020-4805)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4805 advisory. 20200602gitca407c7246bf-3.el8 - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch bz1861718 - Resolves: bz1861718 Very slow boot when overcommitti...

Oracle Linux 8 : sqlite (ELSA-2020-4442)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4442 advisory. - Fixed bug in CVE-2019-20218 1791592 - Fixed CVE-2020-13632 1845572 - Fixed CVE-2020-13631 1845474 - Fixed CVE-2020-13630 1845153 - Fixed CVE-2019-501...

Oracle Linux 8 : libldb (ELSA-2020-4568)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4568 advisory. - Resolves: rhbz1849615 - Fix CVE-2020-10730 use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : libpcap (ELSA-2020-4547)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4547 advisory. 14:1.9.1-4 - Related: 1806422 - Building libpcap to side-tag for tcpdump 14:1.9.1-3 - Related: 1743650 - reverting rdma changes due to unresolved dependency loo...

Oracle Linux 8 : qt5-qtbase / and / qt5-qtwebsockets (ELSA-2020-4690)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4690 advisory. qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the worki...

Oracle Linux 8 : bind (ELSA-2020-4500)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4500 advisory. - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet CVE-2020-8623 - Correct update-policy type subdomain to match...

Oracle Linux 8 : prometheus-jmx-exporter (ELSA-2020-4807)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4807 advisory. 0.12.0-6 - Fix CVE-2017-18640 by using updated snakeyaml. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : libarchive (ELSA-2020-4443)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4443 advisory. 3.3.2-9 - Fix out-of-bounds read CVE-2019-19221 1803967 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : spamassassin (ELSA-2020-4625)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4625 advisory. - Fixed CVE-2018-11805 - Fixed CVE-2020-1930 - Fixed CVE-2020-1931 - Fix CVE-2019-12420 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : grafana (ELSA-2020-4682)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4682 advisory. - apply patch for CVE-2020-13430 also to sources, not only to compiled webpack - security fix for CVE-2020-13430 - security fix for CVE-2020-13379 -...

Oracle Linux 8 : python3 (ELSA-2020-4433)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4433 advisory. - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481 - Resolve hash collisions for Pv4Interface and...

Oracle Linux 8 : GNOME (ELSA-2020-4451)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4451 advisory. - Backport fix for CVE-2020-15503 from Fedora Resolves: 1853529 libsoup Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : glibc (ELSA-2020-4444)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4444 advisory. - CVE-2020-1751: Fix an array overflow in backtrace on PowerPC. 1813399 - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,...

Oracle Linux 8 : binutils (ELSA-2020-4465)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4465 advisory. 2.30-79.0.1 - Forward-port Oracle patches from 2.30-75.0.1 - Reviewed-by: Jose E. Marchesi 2.30-79 - Fix x86 assemblers handling of non-8-bit displacements...

Oracle Linux 8 : tcpdump (ELSA-2020-4760)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4760 advisory. 14:4.9.3-1 - Resolves: 1804063 - Rebase tcpdump to 4.9.3 to fix multiple CVEs Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : python-pip (ELSA-2020-4432)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4432 advisory. 9.0.3-18 - Patch for pip install allow directory traversal, leading to arbitrary file write Resolves: rhbz1868016 9.0.3-17 - Remove unused CA bundle from the...