Oracle Linux 8 : go-toolset:ol8 (ELSA-2023-3083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3083 advisory. delve 1.9.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.9.1-1 - Rebase to 1.9.1 - Related: rhbz2131026 golang 1.19.6-1 - Rebase...

Oracle Linux 8 : grub2 (ELSA-2022-9471)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9471 advisory. - Add CVE-2022-28736 to the list JIRA: OLDIS-16371 - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735...

libreswan security and bug fix update

4.9-2.0.1.2 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.9-2.2 - Update libreswan-4.9-2176248-authby-rsasig.patch 4.9-2.1 - Resolves: rhbz2187647 authby=rsasig fails in FIPS policy 4.9-2 - Fix CVE-2023-23009: remote DoS via crafted TS payload with an incorrect selector length...

Image Builder security, bug fix, and enhancement update

cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 45-1 - New upstream release 44-1 - New upstream release 43-1 - New upstream release 42-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release...

Oracle Linux 8 : libreswan (ELSA-2023-3095)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-3095 advisory. 4.9-2.0.1.2 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.9-2.2 - Update libreswan-4.9-2176248-authby-rsasig.patch 4.9-2.1 - Resolves: rhbz218764...

Oracle Linux 8 : libtiff (ELSA-2023-2883)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2883 advisory. 4.0.9-27 - Fix various CVEs - Resolves: CVE-2022-3627 CVE-2022-3970 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 8 : apr-util (ELSA-2023-3109)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3109 advisory. 1.6.1-6.1 - Resolves: 2196572 - CVE-2022-25147 apr-util: out-of-bounds writes in the aprbase64 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : unbound (ELSA-2023-2771)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2771 advisory. - Apply correctly previous change CVE-2022-3204 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 8 : dhcp (ELSA-2023-3000)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3000 advisory. - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : container-tools:ol8 (ELSA-2023-2758)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2758 advisory. - Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via...

Oracle Linux 8 : curl (ELSA-2023-3106)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3106 advisory. 7.61.1-30.el88.2 - sftp: do not specify OAPPEND when not in append mode 2187717 7.61.1-30.el88.1 - fix FTP too eager connection reuse CVE-2023-27535 Tenable has...

Oracle Linux 8 : gssntlmssp (ELSA-2023-3097)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-3097 advisory. - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings - Fix...

Oracle Linux 8 : libtar (ELSA-2023-2898)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2898 advisory. - fix use-after-free bugs introduced by incorrect memleak fixes CVE-2021-33640 - fix memory leaks through gnulongname,link CVE-2021-33645 CVE-2021-3364...

Oracle Linux 8 : thunderbird (ELSA-2023-3221)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-3221 advisory. 102.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.11.0-1 - Update to 102.11.0 build1 Tenable h...

Oracle Linux 8 : git-lfs (ELSA-2023-2866)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2866 advisory. 3.2.0-2 - Rebuild with Golang-1.19.4 - Resolves: 2163744 3.2.0-1 - Update to version 3.2.0 - Resolves: 2139382 2.13.3-2 - Define %gobuild macro with...

Oracle Linux 8 : tigervnc (ELSA-2023-2830)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2830 advisory. - Rebuild for xorg-x11-server CVE-2022-46340 follow up fix Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : samba (ELSA-2023-2987)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2987 advisory. - In Samba, GnuTLS gnutlsrnd can fail and give predictable random values. CVE-2022-1615 Note that Nessus has not tested for this issue but has instead relied on...

Oracle Linux 8 : sysstat (ELSA-2023-2800)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-2800 advisory. 11.7.3-9.0.1 - add mpstat -H option to also display physically hotplugged vCPUs Orabug: 34683071 11.7.3-9 - add -f flag to force fdatasync after sa file update...

Oracle Linux 8 : webkit2gtk3 (ELSA-2023-3108)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3108 advisory. - Add patch for CVE-2023-28205 Resolves: 2185741 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 8 : grafana (ELSA-2023-2784)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2784 advisory. - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in - resolve CVE-2022-27664 golang: net/http: handle...