Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9425)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9425 advisory. - iouring: always use original task when preparing req identity Jens Axboe Orabug: 34186552 CVE-2022-1786 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9426)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9426 advisory. - iouring: always use original task when preparing req identity Jens Axboe Orabug: 34186552 CVE-2022-1786 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9413)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9413 advisory. 5.4.17-2136.307.3.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34172709 CVE-2022-1729 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9409)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9409 advisory. 5.4.17-2136.307.3.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34172709 CVE-2022-1729 Tenable has extracted the preceding...

Oracle Linux 8 : pcs (ELSA-2022-9416)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9416 advisory. 0.10.12-6.0.1.el86.1 - Replace HAM-logo.png with a generic one 0.10.12-6.el86.1 - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz2081331...

Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2022-2202)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-2202 advisory. 3.1.419-1.0.1 - Add missing Oracle Linux Runtime IDs - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ2060566 3.1.419-1 - Update to .NET...

Oracle Linux 8 : container-tools:3.0 (ELSA-2022-2143)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-2143 advisory. podman 3.0.1-9 - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel https://github.com/containers/podman/commit/801b7e8 -...

Oracle Linux 8 : .NET / 5.0 (ELSA-2022-2200)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-2200 advisory. 5.0.214-1.0.1 - Support AArch64 on Oracle Linux Orabug: 32738620 - Include new Oracle Linux runtime IDs Add 1000-Add-missing-OL-RIDs.patch 5.0.214-1 -...

Oracle Linux 8 : subversion:1.10 (ELSA-2022-2234)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-2234 advisory. subversion 1.10.2-5 - add security fix for CVE-2022-24070 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : .NET / 6.0 (ELSA-2022-2199)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-2199 advisory. 6.0.105-1.0.1 - Add missing Oracle RIDs 6.0.105-1 - Update to .NET SDK 6.0.105 and Runtime 6.0.5 - Resolves: RHBZ2082267 6.0.104-2 - Update to .NET SDK...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2022-1819)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1819 advisory. delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.7-1 - Rebase...

Oracle Linux 8 : aspell (ELSA-2022-1808)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1808 advisory. 12:0.60.6.1-22 - resolves: 1988497 fix CVE-2019-25051 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 8 : container-tools:ol8 (ELSA-2022-1762)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1762 advisory. - switch to RHEL maintenance branch which fixes CVE-2022-27651 - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access - fix...

Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2022-1823)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1823 advisory. - Resolves: rhbz1987222 - CVE-2021-32792 XSS when using OIDCPreservePost On - Resolves: rhbz1987216 - CVE-2021-32791 hardcoded static IV and AAD with a...

Oracle Linux 8 : gfbgraph (ELSA-2022-1801)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-1801 advisory. 0.2.4-1 - Update to 0.2.4 Resolves: 1997941 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : webkit2gtk3 (ELSA-2022-1777)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1777 advisory. 2.34.6-1 - Update to 2.34.6 Related: 1985042 2.34.5-1 - Update to 2.34.5 - Related: 1985042 2.34.4-1 - Update to 2.34.4 - Resolves: 1985042 2.32.4-1 -...

Oracle Linux 8 : python27:2.7 (ELSA-2022-1821)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1821 advisory. - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs Resolves: rhbz2047376 - Security fix for...

Oracle Linux 8 : python3 (ELSA-2022-1986)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1986 advisory. - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response Resolves: rhbz2036020 Tenable has extracted the preceding...

Oracle Linux 8 : pki-core:10.6 (ELSA-2022-1851)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1851 advisory. - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM rhel-8 Tenable has extracted the preceding description block directl...

Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2022-1759)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1759 advisory. - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,...