Oracle Linux 7 : openssl (ELSA-2022-9224)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9224 advisory. 1.0.2k-24.0.3 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 / 8 : cri-o (ELSA-2022-9228)

The remote Oracle Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9228 advisory. 1.20.7-1 - Added Oracle Specifile Files for cri-o Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 7 / 8 : cri-o (ELSA-2022-9229)

The remote Oracle Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9229 advisory. 1.21.6-1 - Added Oracle Specifile Files for cri-o Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 7 : expat (ELSA-2022-9227)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9227 advisory. - lib: Prevent integer overflow on groupSize CVE-2021-46143Orabug: 33910302 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : thunderbird (ELSA-2022-0850)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-0850 advisory. 91.7.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 91.7.0-2 - Update to 91.7....

Oracle Linux 7 : firefox (ELSA-2022-0824)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-0824 advisory. - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-9210)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9210 advisory. 4.14.35-2047.511.5.6 - lib/ioviter: initialize 'flags' in new pipebuffer Max Kellermann Orabug: 33942242 CVE-2022-0847 Tenable has extracted the preceding...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9213)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9213 advisory. 4.14.35-2047.511.5.6.el7 - lib/ioviter: initialize 'flags' in new pipebuffer Max Kellermann Orabug: 33942242 CVE-2022-0847 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9211)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9211 advisory. - lib/ioviter: initialize 'flags' in new pipebuffer Max Kellermann Orabug: 33942329 CVE-2022-0847 Tenable has extracted the preceding description block...

Oracle Linux 7 : python-pip (ELSA-2022-9204)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9204 advisory. 9.0.3-8.0.1 - CVE-2019-20916 Orabug: 33861505 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9212)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9212 advisory. - lib/ioviter: initialize 'flags' in new pipebuffer Max Kellermann Orabug: 33942329 CVE-2022-0847 Tenable has extracted the preceding description block...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9201)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9201 advisory. - x86/speculation: Add knob for eibrsretpolineenabled Patrick Colp Orabug: 33922122 CVE-2021-26341 - x86/speculation: Extend our code to properly support...

Oracle Linux 7 : jquery-ui (ELSA-2022-9177)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9177 advisory. - Backport jQuery CVE-2020-11022 and CVE-2020-11023 fixes to bundled jQuery v1.10.2 Orabug: 33869588 Tenable has extracted the preceding description...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9181)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9181 advisory. 5.4.17-2136.304.4.2 - netfilter: nftablesoffload: incorrect flow offload action array size Pablo Neira Ayuso Orabug: 33899500 CVE-2022-25636 Tenable has...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-9179)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9179 advisory. - cgroup-v1: Require capabilities to set releaseagent Eric W. Biederman Orabug: 33876756 CVE-2022-0492 - tee: handle lookup of shm with reference count 0 Jens...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9180)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9180 advisory. - cgroup-v1: Require capabilities to set releaseagent Eric W. Biederman Orabug: 33876756 CVE-2022-0492 - tee: handle lookup of shm with reference count 0 Jens...

Oracle Linux 7 : 389-ds-base (ELSA-2022-0628)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0628 advisory. 1.3.10.2-15 - Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091...

Oracle Linux 7 : openldap (ELSA-2022-0621)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0621 advisory. - Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation 2040539 Tenable has extracted the preceding description block...

Oracle Linux 7 : kernel (ELSA-2022-0620)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0620 advisory. - drm/vmwgfx: Fix stale file descriptors on failed usercopy Dave Airlie 2047597 CVE-2022-22942 - fix regression in 'epoll: Keep a reference on files...

Oracle Linux 7 : python-pillow (ELSA-2022-0609)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0609 advisory. - Fixup for CVE-2022-22817 - Security fixes for CVE-2022-22815, CVE-2022-22816 Resolves: rhbz2042522 Tenable has extracted the preceding description...