Oracle Linux 8 : nghttp2 (ELSA-2019-2692)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2692 advisory. 1.33.0-1.el800.1 - backport security fixes from nghttp2-1.39.2 CVE-2019-9511 and CVE-2019-9513 Tenable has extracted the preceding description block...

Oracle Linux 8 : pango (ELSA-2019-2582)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2582 advisory. - Security fix for CVE-2019-1010238 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : redis:5 (ELSA-2019-2002)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2002 advisory. - fix Heap buffer overflow in HyperLogLog triggered by malicious client CVE-2019-10192 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : subversion:1.10 (ELSA-2019-2512)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2512 advisory. - Resolves: 1733442 - CVE-2019-0203 subversion:1.10/subversion: remote unauthenticated denial-of-service in subversion svnserve utf8proc Tenable has extracted t...

Oracle Linux 8 : ghostscript (ELSA-2019-2465)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2465 advisory. 9.25-2.2 - Resolves: 1737336 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 701394 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : kernel (ELSA-2019-1959)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1959 advisory. - net tcp: enforce tcpminsndmss in tcpmtuprobing Florian Westphal 1719922 1719923 CVE-2019-11479 - net tcp: add tcpminsndmss sysctl Florian Westphal...

Oracle Linux 8 : kernel (ELSA-2019-2411)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2411 advisory. - x86 x86/entry/64: Use JMP instead of JMPQ Josh Poimboeuf 1724500 1724501 CVE-2019-1125 - x86 x86/speculation: Enable Spectre v1 swapgs mitigations Jo...

Oracle Linux 8 : ghostscript (ELSA-2019-0971)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0971 advisory. - Resolves: 1692798 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 - Resolves: 1678170 - CVE-2019-3835 ghostscript:...

Oracle Linux 8 : mod_auth_mellon (ELSA-2019-0985)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-0985 advisory. 0.14.0-3.2 - Resolves: rhbz1696197 - CVE-2019-3878 modauthmellon: authentication bypass in ECP flow rhel-8.0.0.z Tenable has extracted the preceding description...

Oracle Linux 8 : virt:rhel (ELSA-2019-1268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1268 advisory. - admin: reject clients unless their UID matches the current UID CVE-2019-10132 - locking: restrict sockets to mode 0600 CVE-2019-10132 - logging: restrict...

Oracle Linux 8 : edk2 (ELSA-2019-0968)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0968 advisory. 20180508gitee3198e672e2-9.el80 - edk2-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch bz1690501 -...

Oracle Linux 8 : thunderbird (ELSA-2019-1799)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1799 advisory. 60.8.0-1.0.1 60.8.0-1 - Updated to 60.8.0 60.7.2-3 - Rebuild to fix rhbz1725919 - Thunderbird fails to authenticate with gmail with ssl/tls and OAuth2...

Oracle Linux 8 : icedtea-web (ELSA-2019-2004)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2004 advisory. - added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 Tenable...

Oracle Linux 8 : wget (ELSA-2019-0983)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-0983 advisory. 1.19.5-7.0.1.1 - SSLv3 support dropped from openssll, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-7.1 - Fix tests with on armhfp 1.19.5-7.1...

Oracle Linux 8 : nss / and / nspr (ELSA-2019-1951)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1951 advisory. nspr 4.21.0-2 - Rebuild 4.21.0-1 - Update to NSPR 4.21 nss 3.44.0-7 - Backport fixes from 3.44.1 3.44.0-6 - Add continuous RNG test required by FIPS -...

Oracle Linux 8 : thunderbird (ELSA-2019-1308)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1308 advisory. 60.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.7.0-1 - Update to 60.7.0 Tenable has extracted...

Oracle Linux 8 : python36:3.6 (ELSA-2019-0984)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0984 advisory. - Rebase to 1.3.2 to fix CVE-2019-7164 and CVE-2019-7548 Resolves: rhbz1693978 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : bind (ELSA-2019-1714)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1714 advisory. 32:9.11.4-17.P2.1 - Fix CVE-2019-6471 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : ruby:2.5 (ELSA-2019-1972)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1972 advisory. - Prohibit arbitrary code execution when installing a malicious gem. Resolves: CVE-2019-8324 rubygem-mongo Tenable has extracted the preceding description block...

Oracle Linux 8 : kernel (ELSA-2019-1479)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1479 advisory. - net tcp: enforce tcpminsndmss in tcpmtuprobing Florian Westphal 1719922 1719923 CVE-2019-11479 - net tcp: add tcpminsndmss sysctl Florian Westphal...