Oracle Linux 8 : bind (ELSA-2024-5524)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5524 advisory. - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : pcs (ELSA-2024-5338)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5338 advisory. 0.10.18-2.0.1 - Replace HAM-logo.png with a generic one 0.10.18-2 - Updated rubygem rexml Resolves: RHEL-37883 Tenable has extracted the preceding description...

RHEL 8 : thunderbird (RHSA-2024:5402)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:5402 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Thunderbird: 115.14/128.1 mozilla: Fullscreen notification...

Oracle Linux 8 : thunderbird (ELSA-2024-5402)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-5402 advisory. 115.14.0-1.0.1 - Add Oracle prefs file 115.14.0 - Add OpenELA debranding 115.14.0-1 - Update to 115.14.0 build1 Tenable has extracted the preceding...

RHEL 8 : firefox (RHSA-2024:5391)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:5391 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: Firefox:...

Oracle Linux 8 : poppler (ELSA-2024-5305)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5305 advisory. 20.11.0-12 - Fix crash in broken documents when using -dests - Fix versions in changelog - Resolves: RHEL-44330 Tenable has extracted the preceding description...

Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2024-5289)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5289 advisory. cjose modauthopenidc 2.4.9.4-6 - Resolves: RHEL-36492 Race condition in modauthopenidc filecache - Resolves: RHEL-25421 modauthopenidc: DoS when using...

Oracle Linux 8 : grafana (ELSA-2024-5291)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5291 advisory. 9.2.10-17 - Allow for mssql datasource in selinux policy - Resolves RHEL-43435 Tenable has extracted the preceding description block directly from the...

RHEL 8 : Red Hat Product OCP Tools 4.13 OpenShift Jenkins (RHSA-2024:5406)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5406 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Securi...

RHEL 8 : firefox (RHSA-2024:5325)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:5325 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: Firefox:...

RHEL 8 : firefox (RHSA-2024:5323)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:5323 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: Firefox:...

Oracle Linux 8 : krb5 (ELSA-2024-5312)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5312 advisory. 1.18.2-29.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.18.2-29 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message...

Oracle Linux 8 : bind9.16 (ELSA-2024-5390)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5390 advisory. - Minor fix of reclimit test backport CVE-2024-1737 - Backport addition of max-records-per-type and max-records-per-type options CVE-2024-1737 - Resolv...

RHEL 8 : .NET 8.0 (RHSA-2024:5337)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5337 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

Oracle Linux 8 : jose (ELSA-2024-5294)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5294 advisory. - Backport fix for CVE-2024-28176 Resolves: RHEL-28719 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : firefox (ELSA-2024-5391)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-5391 advisory. 115.14.0-2.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file 115.14.0 - Add debranding patches Mustafa Gezen - Add...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-5258)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5258 advisory. aardvark-dns buildah 2:1.33.8-4 - rebuild for golang fixes - Related: RHEL-28452 cockpit-podman 84.1-1 - update to...

Oracle Linux 8 : httpd:2.4 (ELSA-2024-5193)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5193 advisory. - Resolves: RHEL-46040 - httpd:2.4/httpd: Security issues via backend applications whose response headers are malicious or exploitable CVE-2024-38476 - Resolves...

Oracle Linux 8 : wget (ELSA-2024-5299)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5299 advisory. 1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretati...

Oracle Linux 8 : orc (ELSA-2024-5306)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5306 advisory. - Add patch for CVE-2024-40897 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...