Oracle Linux 9 : libvirt (ELSA-2023-6409)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6409 advisory. - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' CVE-2023-3750, rhbz2221851 Tenable has extracted the preceding description block...

Mageia: Security Advisory (MGASA-2023-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : c-ares (ELSA-2023-6635)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6635 advisory. - Resolves: rhbz2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARESRANDOMFILE during cross compilation rhel-9 - Resolves: rhbz2209556 -...

Oracle Linux 9 : gdb (ELSA-2023-6372)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6372 advisory. 10.2.11.0.1 - Merge Oracle patches for ol9 Reviewed-by: Jose E. Marchesi 10.2-11.el9 - Backport 'libiberty: prevent buffer overflow when decoding user input' Lu...

Oracle Linux 9 : yajl (ELSA-2023-6551)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6551 advisory. - fix CVE-2023-33460 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 9 : python-tornado (ELSA-2023-6523)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6523 advisory. 6.1.0-9 - Fix an open redirect in StaticFileHandler Resolves: CVE-2023-28370 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 9 : flatpak (ELSA-2023-6518)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6518 advisory. 1.12.8-1 - Update to 1.12.8 CVE-2023-28100, CVE-2023-28101 Resolves: 2180312, 2221792 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : tpm2-tss (ELSA-2023-6685)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6685 advisory. 3.2.2-2 - Remove misapplied license Resolves: rhbz2160307 3.2.2-1 - Rebase to 3.2.2 - Use systemd-sysusers to create user Resolves: CVE-2023-22745 Resolves:...

Oracle Linux 9 : dnsmasq (ELSA-2023-6524)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6524 advisory. 2.85-14 - Backport Coverity fix to hide detected issue 2156789 2.85-13 - Rebuild with modified gating settings 2.85-12 - Make create logfile writeable by root...

Oracle Linux 9 : samba (ELSA-2023-6744)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6744 advisory. - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files Tenab...

Oracle Linux 9 : kernel (ELSA-2023-6583)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6583 advisory. - A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the fi...

Oracle Linux 9 : haproxy (ELSA-2023-6496)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6496 advisory. 2.4.22-1 - Update to 2.4.22 2196530 2.4.17-7 - Fix uninitizalized resevered bytes CVE-2023-0836, 2180861 Tenable has extracted the preceding description block...

Oracle Linux 9 : glib2 (ELSA-2023-6631)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6631 advisory. - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180 - Resolve use after free introduced by fixes for...

Oracle Linux 9 : krb5 (ELSA-2023-6699)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6699 advisory. - Fix double-free in KDC TGS processing CVE-2023-39975 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : libfastjson (ELSA-2023-6431)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6431 advisory. 0.99.9-5 - Rebuild Resolves: rhbz2227786 0.99.9-4 - Address CVE-2020-12762 Resolves: rhbz2203172 Tenable has extracted the preceding description block directly...

AlmaLinux 9 : dotnet6.0 (ALSA-2023:7257)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:7257 advisory. - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability CVE-2023-36049 - ASP.NET Core - Security Feature Bypass Vulnerability...

Oracle Linux 9 : sysstat (ELSA-2023-6569)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6569 advisory. 12.5.4-7.0.1 - add mpstat -H option to also display physically hotplugged vCPUs Orabug: 34683087 12.5.4-7 - add description of UMASK to man/systat.in rhbz221680...

Oracle Linux 9 : java-21-openjdk (ELSA-2023-6738)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6738 advisory. 1:21.0.1.0.12-2.0.1 - Add Oracle vendor bug URL 1:21.0.1.0.12-2 - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable...

Oracle Linux 9 : cups (ELSA-2023-6596)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6596 advisory. - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient in...

Oracle Linux 9 : pcs / (LOW) (ELSA-2023-6316)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6316 advisory. 0.11.6-3 - Refreshing any page in pcs-web-ui no longer causes it to display a blank page - Resolves: rhbz2222788 0.11.6-2 - Added BuildRequires: debugedit - for...