Oracle Linux 9 : rsyslog (ELSA-2022-4795)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4795 advisory. 8.2102.0-101.1 - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz2081402 Tenable has extracted the preceding description block...

Oracle Linux 9 : java-1.8.0-openjdk (ELSA-2022-2137)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-2137 advisory. 1:1.8.0.332.b09-1 - Update to shenandoah-jdk8u332-b09 GA - Update release notes for 8u332-b09. - Resolves: rhbz2074649 Tenable has extracted the...

Oracle Linux 9 : thunderbird (ELSA-2022-4892)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4892 advisory. 91.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...

Oracle Linux 9 : firefox (ELSA-2022-4590)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4590 advisory. 91.9.0-1.0.1 - Replaced upstream package with oracle-indexhtml Orabug: 33802044 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : firefox (ELSA-2022-4765)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4765 advisory. 91.9.1-1.0.1 - Replaced upstream package with oracle-indexhtml Orabug: 33802044 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : libxml2 (ELSA-2022-5250)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5250 advisory. 2.9.13-1.1 - Fix CVE-2022-29824 2082299 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 9 : .NET / 6.0 (ELSA-2022-5050)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5050 advisory. 6.0.106-1.0.1 - Add missing Oracle RIDs - Build all packages on source-build even when in servicing 6.0.106-1 - Update to .NET SDK 6.0.106 and Runtime 6.0.6 -...

Oracle Linux 9 : kernel (ELSA-2022-5249)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5249 advisory. - lockdown: also lock down previous kgdb use Daniel Thompson Orabug: 34290418 CVE-2022-21499 - netfilter: nftables: disallow non-stateful expression in...

Oracle Linux 9 : zlib (ELSA-2022-4584)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4584 advisory. 1.2.11-31.1 - Fix CVE-2018-25032 Resolves: CVE-2018-25032 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : java-17-openjdk (ELSA-2022-1729)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1729 advisory. 1:17.0.3.0.7-1 - April 2022 security update to jdk 17.0.3+7 - Update to jdk-17.0.3.0+7 tarball - Update release notes to 17.0.3.0+7 - Add missing...

Oracle Linux 9 : grub2 (ELSA-2022-5099)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5099 advisory. - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733 - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695 Tenable has extracted the preceding descripti...

Oracle Linux 9 : thunderbird (ELSA-2022-5482)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-5482 advisory. 91.11.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...

Oracle Linux 9 : pcs (ELSA-2022-9513)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9513 advisory. 0.11.1-10.el90.1 - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz2081333 0.11.1-10 - Fixed snmp client - Fixed translating resource roles i...

Oracle Linux 9 : firefox (ELSA-2022-4873)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4873 advisory. 91.10.0-1.0.1 - Replaced upstream package with oracle-indexhtml Orabug: 33802044 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : xz (ELSA-2022-4940)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4940 advisory. 5.2.5-8 - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : cups (ELSA-2022-4990)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4990 advisory. 1:2.3.3op2-13.1 - CVE-2022-26691 cups: authorization bypass when using 'local' authorization Tenable has extracted the preceding description block directly from...

Oracle Linux 9 : compat-openssl11 (ELSA-2022-4899)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-4899 advisory. - Fixes CVE-2022-0778 openssl: Infinite loop in BNmodsqrt reachable when parsing certificates Resolves: rhbz2063147 Tenable has extracted the preceding...

Oracle Linux 9 : pcre2 (ELSA-2022-5251)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5251 advisory. 10.37-5 - Explicitly require uft subpackages in tools subpackage 10.37-4 - Resolves: CVE-2022-1586 CVE-2022-1587 Tenable has extracted the preceding...

Oracle Linux 9 : rsync (ELSA-2022-4592)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4592 advisory. 3.2.3-9.1 - Resolves: 2074784 - A flaw found in zlib v1.2.2.2 through zlib v1.2.11 when compressing certain inputs Tenable has extracted the preceding descripti...

Oracle Linux 9 : expat (ELSA-2022-5244)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5244 advisory. - Improve fix for CVE-2022-25313 - Related: CVE-2022-25313 - Resolves: CVE-2022-25314 Tenable has extracted the preceding description block directly fr...