Oracle Linux 9 : libtpms (ELSA-2023-2453)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2453 advisory. 0.9.1-3.20211126git1ff6fe1f43 - Backport 'tpm2: Check size of buffer before accessing it' CVE-2023-1017 & CVE-2023-1018 Resolves: rhbz2173960 Resolves:...

Oracle Linux 9 : conmon (ELSA-2023-2222)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-2222 advisory. 2:2.1.7-1 - update to https://github.com/containers/conmon/releases/tag/v2.1.7 - Resolves: 2173697 2:2.1.6-1 - update to...

Oracle Linux 9 : skopeo (ELSA-2023-2283)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2283 advisory. 2:1.11.2-0.1 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 https://github.com/containers/skopeo/commit/3f987...

Oracle Linux 9 : git-lfs (ELSA-2023-2357)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2357 advisory. 3.2.0-1 - Update to 3.2.0 - Resolves: 2139383 2.13.3-4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 2.13.3-3 - Rebuilt for RH...

Oracle Linux 9 : 8.1 (ELSA-2023-2417)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2417 advisory. php-pecl-apcu 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040 php-pecl-xdebug3 3.1.4-1 - update to 3.1...

Oracle Linux 9 : fence-agents (ELSA-2023-2161)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2161 advisory. 4.10.0-43 - fencevmwaresoap: set logintimeout lower than default pcmkmonitortimeout 20s to remove tmp dirs Resolves: rhbz2122944 4.10.0-42 - fencing/fencewti: a...

Oracle Linux 9 : unbound (ELSA-2023-2370)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2370 advisory. 1.16.2-3 - Fix NRDelegation attack leading to uncontrolled resource consumption CVE-2022-3204 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : dhcp (ELSA-2023-2502)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2502 advisory. - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : tigervnc (ELSA-2023-2257)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2257 advisory. - Rebuild for xorg-x11-server CVE-2022-46340 follow up fix - Rebuild for xorg-x11-server CVEs Resolves: CVE-2022-4283 bz2154234 Resolves: CVE-2022-4634...

Oracle Linux 9 : sysstat (ELSA-2023-2234)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-2234 advisory. 12.5.4-5.0.1 - add mpstat -H option to also display physically hotplugged vCPUs Orabug: 34683087 12.5.4-5 - Fix --dec argument validation rhbz2080650 12.5.4-4 -...

Oracle Linux 9 : python-mako (ELSA-2023-2258)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-2258 advisory. 1.1.4-6 - Fix CVE-2022-40023 2133606 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 9 : edk2 (ELSA-2023-2165)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2165 advisory. - Resolves: bz2164534 CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName rhel-9 - Resolves: bz2164550 CVE-2022-4304 edk2:...

Oracle Linux 9 : grafana (ELSA-2023-2167)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2167 advisory. - resolve CVE-2022-39229 grafana: Using email as a username can prevent other users from signing in - resolve CVE-2022-2880 CVE-2022-41715 grafana:...

Oracle Linux 9 : webkit2gtk3 (ELSA-2023-2256)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2256 advisory. 2.38.5-1 - Update to 2.38.5 Related: 2127467 2.38.4-1 - Update to 2.38.4 Related: 2127467 2.38.3-1 - Update to 2.38.3 Related: 2127467 2.38.2-1 - Updat...

Oracle Linux 9 : webkit2gtk3 (ELSA-2023-2653)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2653 advisory. - Add patch for CVE-2023-28205 Resolves: 2185745 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 9 : qemu-kvm (ELSA-2023-2162)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2162 advisory. - Resolves: bz2149108 CVE-2022-4172 qemu-kvm: QEMU: ACPI ERST: memory corruption issues in readerstrecord and writeerstrecord rhel-9 - Resolves:...

Oracle Linux 9 : wireshark (ELSA-2023-2373)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2373 advisory. - Resolves: 2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector Tenable has extracted the preceding description block direct...

Oracle Linux 9 : openssl (ELSA-2023-2523)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2523 advisory. - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free...

Oracle Linux 9 : device-mapper-multipath (ELSA-2023-2459)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2459 advisory. 0.8.7-20 - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch - Change ho...

Oracle Linux 9 : krb5 (ELSA-2023-2570)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2570 advisory. - Add support for MS-PAC extended KDC signature CVE-2022-37967 - Fix integer overflows in PAC parsing CVE-2022-42898 - Fix KDC null deref on TGS inner body null...