Oracle Linux 7 : file (ELSA-2020-1022)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1022 advisory. 5.11-36 - fix out-of-bounds read via a crafted ELF file CVE-2018-10360 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : cups (ELSA-2020-1765)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1765 advisory. - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler - 1774463 - CVE-2019-8696 Tenable has extracted the...

Oracle Linux 6 : thunderbird (ELSA-2019-4205)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4205 advisory. 68.3.0-3.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.3.0-3 - Update to 68.3.0 build2 Tenable has...

Oracle Linux 8 : firefox (ELSA-2023-4952)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-4952 advisory. 102.15.0-1.0.1 - Update to 102.15.0 build2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 : vsftpd (ELSA-2008-0295)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0295 advisory. - fix CVE-2007-5962: vsftpd memory leak when denyfile option is set Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : gdb (ELSA-2019-3352)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3352 advisory. 8.2-6.el8 - Fix yum vs dnf messaging for RHEL8 RH BZ 1666249: Add gdb-rhbz1666249-suggest-yum-instead-of-dnf.pattch Do not define DNFDEBUGINFOINSTALL for RHEL. ...

Oracle Linux 8 : php:7.2 (ELSA-2020-1624)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1624 advisory. - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpcdecode can allow a hostile XMLRPC...

Oracle Linux 8 : thunderbird (ELSA-2020-0577)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0577 advisory. 68.5.0-1.0.1.el81 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.5.0-1 - Update to 68.5.0 build1 Tenable ha...

Oracle Linux 7 : libsrtp (ELSA-2020-3873)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3873 advisory. 1.4.4-11.20101004cvs - Fix global buffer overflow Resolves: bz1301202 - Fix improper handling of CSRC count and extension header length in RTP header...

Oracle Linux 7 : X.org / X11 (ELSA-2018-3059)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3059 advisory. freeglut 3.0.0-8 - HTTPS URLs - Pin soname to libglut.so.3 in the %files glob 3.0.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 3.0.0-6 -...

Oracle Linux 7 : samba (ELSA-2019-2099)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2099 advisory. - resolves: 1696524 - Fix CVE-2019-3880 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 : libcap (ELSA-2011-1694)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1694 advisory. 2.16-5.5 - remove some obsolete parameters from capsh manpage 2.16-5.4 - add capsh manpage 730957 2.16-5.3 - make sure to chdir '/' after calling chroot...

Oracle Linux 8 : liblouis (ELSA-2020-1708)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1708 advisory. - Apply patch for CVE-2018-12085 1589942 - Fix CVE-2018-11577 1585906 - Fix CVE-2018-11684 1588632 - Fix CVE-2018-11685 1588637 Tenable has extracted t...

Oracle Linux 7 : avahi (ELSA-2020-1176)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1176 advisory. 0.6.31-20 - multicast DNS no longer responds to unicast queries outside of local network 1663410 Tenable has extracted the preceding description block directly...

Oracle Linux 5 : brltty (ELSA-2010-0181)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0181 advisory. - remove bogus rpath from libbrlttybba.so CVE-2008-3279, 457942 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : libosinfo (ELSA-2020-1051)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1051 advisory. 1.1.0-5 - Resolves: rhbz1740212 - New defect found in libosinfo-1.1.0-4.el7 1.1.0-4 - Resolves: rhbz1727842 - CVE-2019-13313 libosinfo: osinfo-install-script...

Oracle Linux 8 : idm:DL1 / and / idm:client (ELSA-2020-4670)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4670 advisory. bind-dyndb-ldap 11.3-1 - New upstream release - Resolves: rhbz1845211 ipa 4.8.7-12.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 295166...

Oracle Linux 8 : python27:2.7 (ELSA-2020-1605)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1605 advisory. - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect...

Oracle Linux 8 : squid:4 (ELSA-2019-3476)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3476 advisory. - The cachemgr.cgi web module of Squid through 4.7 has XSS via the username or auth parameter. CVE-2019-13345 Note that Nessus has not tested for this issue but...

Oracle Linux 7 : uriparser (ELSA-2019-2280)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2280 advisory. 0.7.5-10 - Fix CVE-2018-19198, CVE-2018-19199 Fix unescaped % in a comment Resolves: 1652002, 1652001 Tenable has extracted the preceding description...