Oracle Linux 9 : LibRaw (ELSA-2023-6343)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6343 advisory. 0.20.2-6 - Fix CVE-2021-32142 Resolves: 2172140 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 9 : python-tornado (ELSA-2023-6523)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6523 advisory. 6.1.0-9 - Fix an open redirect in StaticFileHandler Resolves: CVE-2023-28370 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 9 : librabbitmq (ELSA-2023-6482)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6482 advisory. 0.11.0-7 - add missing gating.yaml - fix rpminspect issue Related: 2215766 0.11.0-6 - Resolves: 2215766, insecure credentials submission Tenable has extracted t...

Oracle Linux 9 : pcs / (LOW) (ELSA-2023-6316)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6316 advisory. 0.11.6-3 - Refreshing any page in pcs-web-ui no longer causes it to display a blank page - Resolves: rhbz2222788 0.11.6-2 - Added BuildRequires: debugedit - for...

Oracle Linux 9 : libvirt (ELSA-2023-6409)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6409 advisory. - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' CVE-2023-3750, rhbz2221851 Tenable has extracted the preceding description block...

Oracle Linux 9 : samba (ELSA-2023-6667)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6667 advisory. - resolves: rhbz2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz2154373 - Fix CVE-2022-38023 - F...

Oracle Linux 9 : python-wheel (ELSA-2023-6712)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6712 advisory. - Security fix for CVE-2022-40898 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 9 : ghostscript (ELSA-2023-6544)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6544 advisory. - fix for CVE-2023-38559 - fix for CVE-2023-36664 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 9 : libqb (ELSA-2023-6578)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6578 advisory. 2.0.6-4 - bump rpm version for rhel-exception build Resolves: rhbz2230712 2.0.6-3 - blackbox: fix buffer overflow with long log lines Resolves: rhbz2236171...

Oracle Linux 9 : sysstat (ELSA-2023-6569)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6569 advisory. 12.5.4-7.0.1 - add mpstat -H option to also display physically hotplugged vCPUs Orabug: 34683087 12.5.4-7 - add description of UMASK to man/systat.in rhbz221680...

Oracle Linux 9 : cups (ELSA-2023-6596)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6596 advisory. - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient in...

Oracle Linux 9 : perl-CPAN (ELSA-2023-6539)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6539 advisory. 2.29-3 - Resolves: rhbz2218907 - Fix CVE-2023-31484 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : protobuf-c (ELSA-2023-6621)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6621 advisory. 1.3.3-13 - Applied patch for for CVE-2022-48468 2186677 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : mod_auth_openidc (ELSA-2023-6365)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-6365 advisory. - Resolves: rhbz2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied Tenable has...

Oracle Linux 9 : flatpak (ELSA-2023-6518)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6518 advisory. 1.12.8-1 - Update to 1.12.8 CVE-2023-28100, CVE-2023-28101 Resolves: 2180312, 2221792 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : perl-HTTP-Tiny (ELSA-2023-6542)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6542 advisory. - Changes the verifySSL default parameter from 0 to 1 - CVE-2023-31486 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : curl (ELSA-2023-6745)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6745 advisory. - fix cookie injection with none file CVE-2023-38546 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : ghostscript (ELSA-2023-6732)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6732 advisory. - fix for CVE-2023-43115 - fix for CVE-2023-38559 - fix for CVE-2023-36664 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : haproxy (ELSA-2023-6496)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6496 advisory. 2.4.22-1 - Update to 2.4.22 2196530 2.4.17-7 - Fix uninitizalized resevered bytes CVE-2023-0836, 2180861 Tenable has extracted the preceding description block...

Oracle Linux 9 : linux-firmware (ELSA-2023-6595)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6595 advisory. 20230516-999.27.git6c9e0ed5.el9 - Update firmware for qat4xxx devices Orabug: 35811008 Tenable has extracted the preceding description block directly...