Oracle Linux 9 : qemu-kvm (ELSA-2024-12674)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12674 advisory. - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs Philippe Mathieu-Daude Orabug: 36869694 CVE-2024-3446 - hw/char/virtio-serial-bus: Protec...

Oracle Linux 9 : thunderbird (ELSA-2024-6683)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-6683 advisory. 128.2.0-1.0.2 - Fix prefs for new nss Orabug: 37079813 128.2.0-1.0.1 - Add Oracle prefs 128.2.0 - Add OpenELA debranding 128.2.0-1 - Update to 128.2.0...

Oracle Linux 9 : openssl (ELSA-2024-6783)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6783 advisory. 3.0.7-28.0.1 - Drop OpenELA branding, apply Oracle branding patches - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable...

Oracle Linux 9 : kernel (ELSA-2024-6567)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6567 advisory. - usb-storage: alauda: Check whether the media is initialized CKI Backport Bot RHEL-43716 CVE-2024-38619 - mm: avoid overflows in dirty throttling logi...

Oracle Linux 9 : dovecot (ELSA-2024-6529)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6529 advisory. - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service RHEL-55211 Tenable has extracted the preceding descriptio...

Oracle Linux 9 : glib2 (ELSA-2024-6464)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6464 advisory. - Fix CVE-2024-34397, signal subscription vulnerabilities Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : emacs (ELSA-2024-6510)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6510 advisory. - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code CVE-2024-39331 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : bubblewrap / and / flatpak (ELSA-2024-6356)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6356 advisory. - Add support for --bind-fd and --ro-bind-fd CVE-2024-42472 flatpak - Backport upstream patches for CVE-2024-42472 Tenable has extracted the preceding descripti...

Oracle Linux 9 : nodejs:18 (ELSA-2024-6147)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6147 advisory. nodejs 1:18.20.4-1 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging Tenable has extracted the preceding...

Oracle Linux 9 : postgresql (ELSA-2024-5999)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5999 advisory. - Fix CVE-2024-0985 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417 Tenable has extracted the preceding description block directly from...

Oracle Linux 9 : ghostscript (ELSA-2024-6197)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6197 advisory. - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-338...

Oracle Linux 9 : python-urllib3 (ELSA-2024-6162)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6162 advisory. - Security fix for CVE-2024-37891 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 9 : python3.9 (ELSA-2024-6163)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6163 advisory. - Security fix for CVE-2024-8088 Resolves: RHEL-55968 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : krb5 (ELSA-2024-6166)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6166 advisory. 1.21.1-2.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.1-2 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message tok...

Oracle Linux 9 : orc (ELSA-2024-6184)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6184 advisory. - Add patch for CVE-2024-40897 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : python3.11 (ELSA-2024-6179)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6179 advisory. - Security fix for CVE-2024-8088 Resolves: RHEL-55960 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : gvisor-tap-vsock (ELSA-2024-6187)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6187 advisory. - rebuild for CVE-2024-24783 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : wget (ELSA-2024-6192)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6192 advisory. 1.21.1-8 - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior Tenable has extracted the preceding description block directly from t...

Oracle Linux 9 : runc (ELSA-2024-6188)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6188 advisory. - rebuild for CVE-2024-24783 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : buildah (ELSA-2024-6189)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6189 advisory. - rebuild for CVE-2024-24783 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...