Oracle Linux 8 : xz (ELSA-2022-4991)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4991 advisory. 5.2.4-4 - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : subversion:1.14 (ELSA-2022-4941)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4941 advisory. subversion 1.14.1-2 - add fix for CVE-2022-24070 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 8 : shim (ELSA-2022-9465)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9465 advisory. 15.6-1.0.3 - Update shimx64.efi and shimia32.efi signed by Microsoft JIRA: OLDIS-16370 15.6-1.0.2 - Update to shim-unsigned v15.6.rc2 JIRA: OLDIS-16370 15.6-1.0...

Oracle Linux 8 : go-toolset:ol8addon (ELSA-2022-14857)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-14857 advisory. go-toolset 1.16.15-1 - Rebase to Go 1.16.15 golang 1.16.15-1.0.1 - Add patches from 1.16.12 to 1.16.15 - Add Sources for 3 binary files that changed...

Oracle Linux 8 : go-toolset:ol8addon (ELSA-2022-14844)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-14844 advisory. go-toolset 1.17.10-1 - Set version to correspond to the matching build golang version - delve can be now added to aarch64 as well, remove ifarch. gola...

Oracle Linux 8 : kvm_utils (ELSA-2022-9460)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9460 advisory. - A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct...

Oracle Linux 8 : thunderbird (ELSA-2022-4887)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4887 advisory. 91.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 91.10.0-1 - Update to 91.10.0 build1 Tenable has...

Oracle Linux 8 : firefox (ELSA-2022-4872)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4872 advisory. 91.10.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.10.0-1 - Update to 91.10...

Oracle Linux 8 : postgresql:13 (ELSA-2022-4855)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4855 advisory. - Resolves: CVE-2022-1552 - Resolves: CVE-2022-1552 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : maven:3.6 (ELSA-2022-4797)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4797 advisory. maven-shared-utils 3.2.1-0.4 - Build with OpenJDK 8 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : postgresql:12 (ELSA-2022-4807)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4807 advisory. - Resolves: CVE-2022-1552 - Resolves: CVE-2022-1552 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : firefox (ELSA-2022-4776)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4776 advisory. 91.9.1-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.9.1-1 - Update to 91.9.1...

Oracle Linux 8 : nodejs:16 (ELSA-2022-4796)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4796 advisory. - Resolves CVE-2021-43616 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Oracle Linux 8 : rsyslog (ELSA-2022-4799)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4799 advisory. 8.2102.0-7.1 - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz2081400 Tenable has extracted the preceding description block...

Oracle Linux 8 : thunderbird (ELSA-2022-4769)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4769 advisory. 91.9.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 91.9.1-1 - Update to 91.9.1 build1 Tenable has...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9442)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9442 advisory. 5.4.17-2136.307.3.5 - KVM: x86: avoid calling x86 emulator without a decoded instruction Sean Christopherson Orabug: 34211496 CVE-2022-1852 CVE-2022-1852...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9443)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9443 advisory. 5.4.17-2136.307.3.5 - KVM: x86: avoid calling x86 emulator without a decoded instruction Sean Christopherson Orabug: 34211496 CVE-2022-1852 Tenable has...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9425)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9425 advisory. - iouring: always use original task when preparing req identity Jens Axboe Orabug: 34186552 CVE-2022-1786 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9426)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9426 advisory. - iouring: always use original task when preparing req identity Jens Axboe Orabug: 34186552 CVE-2022-1786 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9409)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9409 advisory. 5.4.17-2136.307.3.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34172709 CVE-2022-1729 Tenable has extracted the preceding...