Oracle Linux 9 : kernel (ELSA-2024-5928)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5928 advisory. - bnxtre: avoid shift undefined behavior in bnxtqpliballocinithwq Kamal Heib RHEL-44287 CVE-2024-38540 - netfilter: flowtable: validate pppoe header...

kernel security update

5.14.0-427.33.14.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : nodejs:20 (ELSA-2024-5815)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5815 advisory. nodejs 1:20.16.0-1 - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 nodejs-nodemon nodejs-packaging Tenable has extracted the...

Oracle Linux 8 : nodejs:20 (ELSA-2024-5814)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5814 advisory. nodejs 1:20.16.0-1 - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 nodejs-nodemon nodejs-packaging Tenable has extracted the...

Oracle Linux 8 : python3.12-setuptools (ELSA-2024-5531)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5531 advisory. 68.2.2-4 - Security fix for CVE-2024-6345 Resolves: RHEL-50475 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : tomcat (ELSA-2024-5694)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5694 advisory. 1:9.0.87-1.el810.2 - Resolves: RHEL-46167 tomcat: Improper Handling of Exceptional Conditions CVE-2024-34750 Tenable has extracted the preceding description blo...

Oracle Linux 8 : curl (ELSA-2024-5654)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5654 advisory. - provide common cleanup method for push headers CVE-2024-2398 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : tomcat (ELSA-2024-5693)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5693 advisory. 1:9.0.87-1.el94.2 - Resolves: RHEL-46162 tomcat: Improper Handling of Exceptional Conditions CVE-2024-34750 Tenable has extracted the preceding description bloc...

Oracle Linux 8 : python-setuptools (ELSA-2024-5530)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5530 advisory. 39.2.0-8 - Security fix for CVE-2024-6345 Resolves: RHEL-50470 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : python3.12-setuptools (ELSA-2024-5533)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5533 advisory. 68.2.2-3.1 - Security fix for CVE-2024-6345 Resolves: RHEL-50481 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : python-setuptools (ELSA-2024-5534)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5534 advisory. 53.0.0-12.1 - Security fix for CVE-2024-6345 Resolves: RHEL-50466 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : curl (ELSA-2024-5529)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5529 advisory. 7.76.1-29.el94.1 - provide common cleanup method for push headers CVE-2024-2398 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : python3.11-setuptools (ELSA-2024-5532)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5532 advisory. 65.5.1-3 - Security fix for CVE-2024-6345 Resolves: RHEL-50484 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : bind (ELSA-2024-5524)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5524 advisory. - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : pcs (ELSA-2024-5338)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5338 advisory. 0.10.18-2.0.1 - Replace HAM-logo.png with a generic one 0.10.18-2 - Updated rubygem rexml Resolves: RHEL-37883 Tenable has extracted the preceding description...

Oracle Linux 8 : thunderbird (ELSA-2024-5402)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-5402 advisory. 115.14.0-1.0.1 - Add Oracle prefs file 115.14.0 - Add OpenELA debranding 115.14.0-1 - Update to 115.14.0 build1 Tenable has extracted the preceding...

Oracle Linux 9 : kernel (ELSA-2024-5363)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5363 advisory. - net: fix dstnegativeadvice race CKI Backport Bot RHEL-46798 CVE-2024-36971 - net: annotate data-races around sk-skdstpendingconfirm CKI Backport Bot...

Oracle Linux 9 : thunderbird (ELSA-2024-5392)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-5392 advisory. 115.14.0-1.0.1 - Add Oracle prefs 115.14.0 - Add OpenELA debranding 115.14.0-1 - Update to 115.14.0 build1 Tenable has extracted the preceding...

Oracle Linux 8 : firefox (ELSA-2024-5391)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-5391 advisory. 115.14.0-2.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file 115.14.0 - Add debranding patches Mustafa Gezen - Add...

Oracle Linux 9 : python3.11-setuptools (ELSA-2024-5279)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5279 advisory. 65.5.1-2.1 - Security fix for CVE-2024-6345 Resolves: RHEL-50490 Tenable has extracted the preceding description block directly from the Oracle Linux security...