Oracle Linux 8 : python-jinja2 (ELSA-2019-1152)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1152 advisory. - Rebase to 2.10.1 security update to fix CVE-2019-10906 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : WALinuxAgent (ELSA-2019-1527)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1527 advisory. 2.2.32-1.0.1.el80.1 - Add oracle support to fix waagent.service build issue 2.2.32-1.el80.1 - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch...

Oracle Linux 8 : python3 (ELSA-2019-0997)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0997 advisory. 3.6.8-2.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-2 - Security fix for CVE-2019-9636 rhbz1693973 Tenable has extracted the...

Oracle Linux 8 : bind (ELSA-2019-1145)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1145 advisory. 32:9.11.4-17.P2 - Fix inefective limit of TCP clients CVE-2018-5743 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : thunderbird (ELSA-2019-1144)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1144 advisory. 60.6.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.6.1-1 - Update to 60.6.1 60.6.0-1 - Update to...

Oracle Linux 8 : container-tools:rhel8 (ELSA-2019-0975)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0975 advisory. container-selinux 2:2.94-1.git1e99f1d - Resolves: 1690286 - bump to v2.94 - Resolves: 1693806, 1689255 2:2.89-1.git2521d0d - bump to v2.89 runc...

Oracle Linux 8 : nss / and / nspr (ELSA-2019-1951)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1951 advisory. nspr 4.21.0-2 - Rebuild 4.21.0-1 - Update to NSPR 4.21 nss 3.44.0-7 - Backport fixes from 3.44.1 3.44.0-6 - Add continuous RNG test required by FIPS -...

Oracle Linux 8 : kernel (ELSA-2019-1479)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1479 advisory. - net tcp: enforce tcpminsndmss in tcpmtuprobing Florian Westphal 1719922 1719923 CVE-2019-11479 - net tcp: add tcpminsndmss sysctl Florian Westphal...

Oracle Linux 8 : thunderbird (ELSA-2019-1308)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1308 advisory. 60.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.7.0-1 - Update to 60.7.0 Tenable has extracted...

Oracle Linux 8 : thunderbird (ELSA-2019-1799)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1799 advisory. 60.8.0-1.0.1 60.8.0-1 - Updated to 60.8.0 60.7.2-3 - Rebuild to fix rhbz1725919 - Thunderbird fails to authenticate with gmail with ssl/tls and OAuth2...

Oracle Linux 8 : cyrus-imapd (ELSA-2019-1771)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1771 advisory. 3.0.7-15.1 - Resolves: 1718194 - don't overrun buffer when parsing strings with sscanf Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : kernel (ELSA-2019-1873)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1873 advisory. - net tcp: enforce tcpminsndmss in tcpmtuprobing Florian Westphal 1719914 1719915 CVE-2019-11479 - net tcp: add tcpminsndmss sysctl Florian Westphal...

Oracle Linux 8 : kernel (ELSA-2019-1167)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1167 advisory. - arm64 arm64/speculation: Support 'mitigations=' cmdline option Josh Poimboeuf 1698809 1698896 1699001 1690338 1690360 1690351 CVE-2018-12130...

Oracle Linux 7 : httpd (ELSA-2019-1898)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1898 advisory. 2.4.6-89.0.1 - replace index.html with Oracle's index page oracleindex.html 2.4.6-89.1 - Resolves: 1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce...

Oracle Linux 8 : flatpak (ELSA-2019-1143)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1143 advisory. 1.0.6-3 - Fix IOCSTI sandbox bypass 1700653 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : 389-ds-base (ELSA-2019-1896)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1896 advisory. - Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4741)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4741 advisory. kernel-uek 3.8.13-118.37.1 - Input: gtco - bounds check collection indent level Grant Hernandez Orabug: 30074414 CVE-2019-13631 Tenable has extracted the...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4742)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4742 advisory. - ACPI: sbshc: remove raw pointer from printk message Greg Kroah-Hartman Orabug: 27987133 CVE-2018-5750 - dm: fix race between dmgetfromkobject and...

Oracle Linux 8 : virt:rhel (ELSA-2019-1175)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1175 advisory. - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes CVE-2019-3863 - fix integer overflow in SSH packet processing...

Oracle Linux 7 : curl (ELSA-2019-1880)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1880 advisory. - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case insensitive password comparison...