Oracle Linux 8 : xorg-x11-server / and / xorg-x11-server-Xwayland (ELSA-2022-7583)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7583 advisory. - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2108156, rhbz2108161 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062,...

Oracle Linux 8 : libtiff (ELSA-2022-7585)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7585 advisory. 4.0.9-23 - Fix various CVEs - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-090...

Oracle Linux 8 : fribidi (ELSA-2022-7514)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7514 advisory. - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310. Resolves: rhbz2050085, rhbz2050068, rhbz2050062 Tenable has extracted the precedi...

Oracle Linux 8 : e2fsprogs (ELSA-2022-7720)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7720 advisory. 1.45.6-5 - Update e2fsprogs with upstream fixes and improvements 2083621 - Fix out-of-bounds read/write via crafter filesystem 2073548 Tenable has extracted the...

Oracle Linux 8 : redis:6 (ELSA-2022-7541)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7541 advisory. 6.2.7-1 - rebase to 6.2.7 1999873 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : yajl (ELSA-2022-7524)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7524 advisory. - fix CVE-2022-24795 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 8 : python39:3.9 / and / python39-devel:3.9 (ELSA-2022-7592)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7592 advisory. Cython 0.29.21-5 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 0.29.21-4 - Drop build dependency on coverage 0.29.21-3 - Rebuilt...

Oracle Linux 8 : unbound (ELSA-2022-7622)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7622 advisory. 1.16.2-2 - Require openssl tool for unbound-keygen 2018806 1.16.2-1 - Update to 1.16.2 2027735 1.16.0-2 - Restart keygen service before every unbound...

Oracle Linux 8 : pki-core:10.6 / and / pki-deps:10.6 (ELSA-2022-7470)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7470 advisory. - Bug 2107334 - CVE-2022-2414 access to external entities when parsing XML can lead to XXE - CVE-2020-1695: Improper validation of response header in...

Oracle Linux 8 : dovecot (ELSA-2022-7623)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7623 advisory. 1:2.3.16-3 - fix possible privilege escalation when similar master and non-master passdbs are used 2106231 Tenable has extracted the preceding description block...

Oracle Linux 8 : grafana-pcp (ELSA-2022-7648)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7648 advisory. - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil:...

Oracle Linux 8 : python38:3.8 / and / python38-devel:3.8 (ELSA-2022-7581)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7581 advisory. Cython 0.29.14-4 - Exclude unsupported i686 arch 0.29.14-3 - Unversioned binaries renamed 0.29.14-2 - Adjusted for Python 3.8 module in RHEL 8 - without emacs...

Oracle Linux 8 : libldb (ELSA-2022-7730)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7730 advisory. - resolves: rhbz2109016 - Fix CVE-2022-32746 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2022-7618)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7618 advisory. - Add patches for matroskademux. CVE-2021-3497 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

kernel security, bug fix, and enhancement update

4.18.0-425.3.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 8 : mutt (ELSA-2022-7640)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-7640 advisory. 5:2.0.7-2 - Fix CVE-2022-1328 2109247 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : bind9.16 (ELSA-2022-7643)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7643 advisory. - Fix possible serve-stale related crash CVE-2022-3080 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify...

Oracle Linux 8 : rsync (ELSA-2022-7793)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7793 advisory. 3.1.3-19 - Resolves: 2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field 3.1.3-18 -...

Oracle Linux 8 : flatpak-builder (ELSA-2022-7458)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-7458 advisory. - Fix CVE-2022-21682 2042007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : openblas (ELSA-2022-7639)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7639 advisory. 0.3.15-4 - Fix out-of-bounds read in larrv - Resolves: CVE-2021-4048 Tenable has extracted the preceding description block directly from the Oracle Linux securi...