Oracle Linux 8 : cross-gcc (ELSA-2023-28766)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-28766 advisory. - CVE-2023-4039 mitigation. Orabug 35752004. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 / 9 : gcc (ELSA-2023-12788)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12788 advisory. - CVE-2023-4039 GCC mitigation. Orabug 35751743. Includes removal of aarch64-preserve-args.patch. - CVE-2022-40982 'Intel Downfall' mitigation...

Oracle Linux 8 : httpd:2.4 (ELSA-2023-5050)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5050 advisory. - Resolves: 2176723 - CVE-2023-27522 httpd:2.4/httpd: modproxyuwsgi HTTP response splitting - Resolves: 2190133 - modrewrite regression with CVE-2023-25690 -...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12782)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12782 advisory. - x86/pkeys: Revert a5eff7259790 'x86/pkeys: Add PKRU value to initfpstate' Thomas Gleixner Orabug: 35714800 CVE-2022-40982 - Documentation/x86: Fix...

Oracle Linux 8 : olcne (ELSA-2023-12772)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12772 advisory. - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 -...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12786)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12786 advisory. - x86/pkeys: Revert a5eff7259790 'x86/pkeys: Add PKRU value to initfpstate' Thomas Gleixner Orabug: 35714800 CVE-2022-40982 - Documentation/x86: Fix backwards...

Oracle Linux 8 : istio (ELSA-2023-12780)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12780 advisory. - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 Tenable has...

Oracle Linux 8 : openjpeg2 (ELSA-2020-0570)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0570 advisory. 2.3.1-3 - Fix CVE-2020-8112 1801033 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : firefox (ELSA-2020-2031)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2031 advisory. 68.8.0-1.0.1.el82 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 8 : icu (ELSA-2020-0902)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0902 advisory. 60.3-2 - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGVMAPERR-in-append.patch - Resolves: rhbz1808238 Tenable h...

Oracle Linux 8 : freeradius:3.0 (ELSA-2020-1672)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1672 advisory. - In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the...

Oracle Linux 8 : 389-ds:1.4 (ELSA-2019-3401)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3401 advisory. - In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout'...

Oracle Linux 8 : php:7.2 (ELSA-2020-1624)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1624 advisory. - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpcdecode can allow a hostile XMLRPC...

Oracle Linux 8 : firefox (ELSA-2023-4952)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-4952 advisory. 102.15.0-1.0.1 - Update to 102.15.0 build2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : thunderbird (ELSA-2020-0577)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0577 advisory. 68.5.0-1.0.1.el81 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.5.0-1 - Update to 68.5.0 build1 Tenable ha...

Oracle Linux 8 : gdb (ELSA-2019-3352)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3352 advisory. 8.2-6.el8 - Fix yum vs dnf messaging for RHEL8 RH BZ 1666249: Add gdb-rhbz1666249-suggest-yum-instead-of-dnf.pattch Do not define DNFDEBUGINFOINSTALL for RHEL. ...

Oracle Linux 8 : exiv2 (ELSA-2020-1577)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1577 advisory. exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available...

Oracle Linux 8 : libseccomp (ELSA-2019-3624)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3624 advisory. 2.4.1-1 - rebase to 2.4.1 2.3.3-4 - spec: make the check phase conditional Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : .NET / Core / on / Red / Hat / Enterprise / Linux / 8 (ELSA-2020-2471)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2471 advisory. 2.1.515-1 - Update to .NET Core SDK 2.1.515 and Runtime 2.1.19 - Resolves: RHBZ1843680 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : libarchive (ELSA-2019-3698)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3698 advisory. - fix out-of-bounds read within lhareaddatanone CVE-2017-14503 - fix crash on crafted 7zip archives CVE-2019-1000019 Tenable has extracted the precedin...