Oracle Linux 9 : krb5 (ELSA-2022-8637)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8637 advisory. - Fix integer overflows in PAC parsing CVE-2022-42898 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : varnish (ELSA-2022-8643)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8643 advisory. 6.6.2-2.1 - Resolves: 2142095 - CVE-2022-45060 varnish: Request Forgery Vulnerability Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : dotnet7.0 (ELSA-2022-8434)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8434 advisory. 7.0.100-0.5.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.5.rc2 - Add lldb as a build...

varnish security update

An update is available for varnish. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Varnish Cache is a high-performance HTTP accelerator. It stores web pages in...

krb5 security update

An update is available for krb5. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kerberos is a network authentication system, which can improve the security of...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2022-10022)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10022 advisory. 5.15.0-4.70.5.2 - Revert 'sched: Remove the limitation of WFONCPU on wakelist if wakee cpu is idle' Samasth Norway Ananda Orabug: 34783367 5.15.0-4.70.5.1 ...

Oracle Linux 9 : device-mapper-multipath (ELSA-2022-8453)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8453 advisory. 0.8.7-12.1 - Add 0062-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz 2133998 Tenable has extracted the preceding description block...

Oracle Linux 9 : python3.9 (ELSA-2022-8493)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8493 advisory. 3.9.14-1.1 - Fix for CVE-2022-42919 Resolves: rhbz2138705 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : thunderbird (ELSA-2022-8561)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-8561 advisory. 102.5.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.5.0-2 - Update to 102.5.0 build2 102.5.0-1 -...

Oracle Linux 9 : podman (ELSA-2022-8431)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8431 advisory. 4.2.0-7.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:4.2.0-7 - update to the latest content of...

Oracle Linux 9 : keylime (ELSA-2022-8444)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8444 advisory. 6.5.1-1 - Update to 6.5.1 Resolves: CVE-2022-3500 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt4

1.17.2-alt4 built Nov. 24, 2022 Ivan A. Melnikov in task 310094 Nov. 16, 2022 Ivan A. Melnikov - Backports from 1.19.4: + fix integer overflows in PAC parsing Fixes: CVE-2022-42898; + fix some memory leaks...

Oracle Linux 9 : dhcp (ELSA-2022-8385)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8385 advisory. 12:4.4.2-17.b1 - omshell: add support for hmac-sha512 algorithm 2083553 12:4.4.2-16.b1 - Fix for CVE-2021-25220 Tenable has extracted the preceding description...

RHEL 9 : firefox (RHSA-2022:8580)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8580 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Oracle Linux 9 : 389-ds-base (ELSA-2022-8162)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8162 advisory. 2.1.3-4 - Bump version to 2.1.3-4 - Resolves: Bug 1872451 - Fix regression with dscreate template 2.1.3-3 - Bump version to 2.1.3-3 - Resolves: Bug...

Oracle Linux 9 : speex (ELSA-2022-7979)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7979 advisory. - CVE-2020-23903 speex: divide by zero in readsamples via crafted WAV file Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : qt5 (ELSA-2022-8022)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8022 advisory. 5.15.3-1 - 5.15.3 Resolves: bz2061352 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 9 : curl (ELSA-2022-8299)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8299 advisory. - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 - fix FTP-KRB bad message verification CVE-2022-32208 ...

Oracle Linux 9 : libtirpc (ELSA-2022-8400)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8400 advisory. 1.3.3 - Rebased to libtirpc-1.3.3 bz 2118157 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : xorg-x11-server (ELSA-2022-8221)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8221 advisory. 1.20.11-11 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2108157, rhbz2108162 Tenable has extracted the precedi...