Oracle Linux 9 : post (ELSA-2024-9243)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9243 advisory. 2:3.5.25-1 - New version Resolves: RHEL-20023 - Dropped upstreamed patches Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : openexr (ELSA-2024-9548)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9548 advisory. 3.1.1-2.1 - fix CVE-2023-5481 RHEL-64162 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 9 : expat (ELSA-2024-9541)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9541 advisory. - Fix CVE-2024-50602 - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : tpm2-tools (ELSA-2024-9424)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-9424 advisory. - tpm2checkquote: Fix check of magic number. CVE-2024-29038 - tpm2checkquote: Add comparison of pcr selection. CVE-2024-29039 Tenable has extracted the...

Oracle Linux 9 : oci-seccomp-bpf-hook (ELSA-2024-9277)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9277 advisory. 1.2.10-2 - rebuild - Resolves: RHEL-35939 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 9 : python-dns (ELSA-2024-9423)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9423 advisory. 2.6.1-3 - Ensure dns.rdtypes subpackages are available Related: RHEL-32663 2.6.1-2 - Add missing files due to build change from hatchling to setuptools Related:...

Oracle Linux 9 : bpftrace (ELSA-2024-9188)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9188 advisory. - Fix CVE allowing unprivileged users loading of compromised linux headers RHEL-28765, CVE-2024-2313 - Fix CVE allowing unprivileged users loading of compromise...

Oracle Linux 9 : python3.12 (ELSA-2024-9451)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9451 advisory. 3.12.5-2.1 - Security fix for CVE-2024-6232 Resolves: RHEL-57415 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : httpd (ELSA-2024-9306)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9306 advisory. - Resolves: RHEL-52724 - Regression introduced by CVE-2024-38474 fix - Resolves: RHEL-31856 - httpd: HTTP response splitting CVE-2023-38709 - Resolves:...

Oracle Linux 9 : libsoup (ELSA-2024-9559)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9559 advisory. - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Backport upstream patch for CVE-2024-52530 - HTTP request...

Oracle Linux 9 : python3.12 (ELSA-2024-9190)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9190 advisory. - Security fix for CVE-2024-8088 Resolves: RHEL-55963 - Security fix for CVE-2024-6923 Resolves: RHEL-53041 Tenable has extracted the preceding...

Oracle Linux 9 : lldpd (ELSA-2024-9158)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9158 advisory. 1.0.18-3 - Add lldpd-devel package RHEL-22127 1.0.18-2 - Remove networkd gating test RHEL-25990 Tenable has extracted the preceding description block...

Oracle Linux 9 : emacs (ELSA-2024-9302)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9302 advisory. - org-file-contents: Consider all remote files unsafe CVE-2024-30205 - Make Gnus treats inline MIME contents as untrusted CVE-2024-30203 - Add protecti...

Oracle Linux 9 : qemu-kvm (ELSA-2024-9136)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9136 advisory. - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch RHEL-52617 - Resolves: RHEL-52617 CVE-2024-7409 qemu-kvm: Denial of Service via Improp...

Oracle Linux 9 : libvpx (ELSA-2024-9827)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9827 advisory. 1.9.0-8 - Add patch to fix integer overflows. - Disable LTO to fix build - Resolves: RHEL-58144 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : jose (ELSA-2024-9181)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9181 advisory. 14-1 - Rebase jose-14 upstream version Resolves: RHEL-38079 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 9 : NetworkManager (ELSA-2024-9317)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9317 advisory. 1.48.10-2.0.1 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 1:1.48.10-2 - cloud-setup: Allow...

Oracle Linux 9 : kernel (ELSA-2024-9605)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9605 advisory. - mptcp: pm: Fix uaf in timerdeletesync CKI Backport Bot RHEL-64678 RHEL-60737 CVE-2024-46858 - net: nexthop: Initialize all fields in dumped nexthops...

Oracle Linux 9 : libgcrypt (ELSA-2024-9404)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9404 advisory. 1.10.0-11 - Fix CVE-2024-2236 RHEL-34579 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

kernel security update

5.14.0-503.14.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...