Oracle Linux 9 : OpenIPMI (ELSA-2024-8037)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8037 advisory. - Update the patch for CVE-2024-42934 to add a missing upstream commit from 2.0.36: 663e3cd3 Tenable has extracted the preceding description block directly from...

Oracle Linux 9 : firefox (ELSA-2024-7958)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7958 advisory. 128.3.1-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file...

Oracle Linux 9 : golang (ELSA-2024-7550)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7550 advisory. - Fix CVE-2024-9355 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 9 : thunderbird (ELSA-2024-7552)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-7552 advisory. 128.3.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.3.0 - Add OpenELA debranding 128.3.0-1 - Update to 127.3.0 Tenable has...

Oracle Linux 9 : firefox (ELSA-2024-7505)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-7505 advisory. 128.3.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : cups-filters (ELSA-2024-7346)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-7346 advisory. - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: cfGetPrinterAttributes...

Oracle Linux 9 : net-snmp (ELSA-2024-7260)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-7260 advisory. 5.9.1-13.0.1 - fix error index value when snmpget is used a proxy pass Orabug: 35010262 1:5.9.1-13.3 - fix CVE-2022-24805, CVE-2022-24806,...

Oracle Linux 9 : kernel (ELSA-2024-6997)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6997 advisory. - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses CKI Backport Bot RHEL-42783 CVE-2024-26947 - tty: ngsm: fix possible...

Oracle Linux 9 : grafana-pcp (ELSA-2024-6946)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6946 advisory. 5.1.1-3 - Resolves RHEL-57930: CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : grafana (ELSA-2024-6947)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6947 advisory. 9.2.10-17 - Resolves RHEL-57925: CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 9 : golang (ELSA-2024-6913)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6913 advisory. - Rebase to Go1.21.13 to pick the fix for CVE-2024-24791 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : openssl (ELSA-2024-12683)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12683 advisory. 3.0.7-28.0.1 - Drop OpenELA branding, apply Oracle branding patches - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable...

Oracle Linux 9 : libreoffice (ELSA-2024-5583)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5583 advisory. 7.1.8.1-14.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Added the --with-hamcrest option to configure. 7.1.8.1 - Remove Red Hat branding - Change...

Oracle Linux 9 : libnbd (ELSA-2024-6757)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6757 advisory. 1.18.1-4.0.1 - Add new content to nbdconnecturi.pod 1.18.1-4 - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52730 Tenable has...

Oracle Linux 9 : openssl (ELSA-2024-12675)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12675 advisory. 3.0.7-28.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Add FIPS package change: add fips suffix to Release and set Epoch to 10...

Oracle Linux 9 : pcp (ELSA-2024-6848)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6848 advisory. 6.2.0-5.0.1 - Fixed libpcp derived metric issue for ol9 Orabug: 36538820 6.2.0-5 - Fix buffer sizing checks in pmstore PDU handling RHEL-57805 - Guard...

Oracle Linux 9 : firefox (ELSA-2024-6681)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6681 advisory. 128.2.0-1.0.2 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 128.2.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the...

Oracle Linux 9 : ruby:3.3 (ELSA-2024-6785)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6785 advisory. - Fix DoS vulnerability in rexml. CVE-2024-39908 CVE-2024-41946 CVE-2024-43398 Resolves: RHEL-57573 Resolves: RHEL-57570 Resolves: RHEL-57578 - Fix REX...

Oracle Linux 9 : expat (ELSA-2024-6754)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6754 advisory. - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability...

Oracle Linux 9 : libvirt (ELSA-2024-12673)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12673 advisory. - rpc: ensure temporary GSource is removed from client event loop Daniel P. Berrange Orabug: 36821472 CVE-2024-4418 Tenable has extracted the preceding...