Oracle Linux 7 : firefox (ELSA-2023-1333)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-1333 advisory. 102.9.0-3.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....

Oracle Linux 9 : nss (ELSA-2023-1368)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1368 advisory. 3.79.0-17 - fix consistency return errors. We shouldn't lock the FIPS token if the application asked for invalid DH parameters on on keygen. 3.79.0-16 - Add che...

Oracle Linux 9 : firefox (ELSA-2023-1337)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-1337 advisory. 102.9.0-3.0.1 - Updated homepages to use https Orabug: 34648274 102.9.0-3 - Update to 102.9.0 build2 102.9.0-2 - removed disable-openh264-download...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12206)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12206 advisory. - ipv6: raw: Deduct extension header length in rawv6pushpendingframes Herbert Xu Orabug: 35005829 CVE-2023-0394 - net: sched: disallow noqueue for...

Oracle Linux 8 : firefox (ELSA-2023-1336)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-1336 advisory. 102.9.0-3.0.1 - Updated homepages to use https Orabug: 34648274 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the...

Oracle Linux 7 : nss (ELSA-2023-1332)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1332 advisory. 3.79.0-5 - fix CVE-2023-0767 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : virt:kvm_utils2 (ELSA-2023-12195)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12195 advisory. - hw/pvrdma: Protect against buggy or malicious guest driver Yuval Shaia Orabug: 35064352 CVE-2022-1050 - hw/display/qxl: Avoid buffer overrun in...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12199)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12199 advisory. - ipv6: raw: Deduct extension header length in rawv6pushpendingframes Herbert Xu Orabug: 35005830 CVE-2023-0394 - net: sched: disallow noqueue for qdi...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2023-12196)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12196 advisory. - l2tp: Serialize access to skuserdata with skcallbacklock Jakub Sitnicki Orabug: 34951574 CVE-2022-4129 - wifi: rndiswlan: Prevent buffer overflo...

Oracle Linux 9 : gnutls (ELSA-2023-1141)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1141 advisory. 3.7.6-18 - Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version 2168610 3.7.6-17 - Fix timing side-channel in TLS RSA key exchange 2162600 3.7.6-16 -...

Oracle Linux 7 : kernel (ELSA-2023-1091)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-1091 advisory. - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 - Revert 'openvswitch: fix flow actions reallocation' Rado Vrbovsky 2141780 CVE-2022-2639 -...

Oracle Linux 8 : ol8addon (ELSA-2023-18908)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-18908 advisory. - Addresses CVE-2021-34558 - Include patch to fix CVE-2019-9741 - Fixes CVE-2019-6486 - Fixes CVE-2018-16873, CVE-2018-16874, CVE-2018-16875 - Fix...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12160)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12160 advisory. - net: sched: atm: dont intepret cls results when asked to drop Jamal Hadi Salim Orabug: 34983616 CVE-2023-23455 - Bluetooth: L2CAP: Fix u8 overfl...

Oracle Linux 7 : pesign (ELSA-2023-1093)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-1093 advisory. 0.109-11.0.1 - RPM macro fix Petr Benes - updates for Oracle Linux test certificate Alexey Petrenko - update Oracle Linux certificates Alexey Petrenko 0.109-11 ...

Oracle Linux 7 : samba (ELSA-2023-1090)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1090 advisory. - related: 2154364 - Add additional patches for CVE-2022-38023 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : libjpeg-turbo (ELSA-2023-1068)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1068 advisory. - Fix CVE-2021-46822 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 9 : pesign (ELSA-2023-1067)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-1067 advisory. - Resolves: CVE-2022-3560 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Oracle Linux 9 : pcs (ELSA-2023-12150)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12150 advisory. 0.11.3-4.el91.2 - Updated bundled rubygems: mustermann, rack, rackprotection, sinatra, tilt - Added license for rubygem ruby2keywords - Resolves: rhbz2159426...

Oracle Linux 9 : systemd (ELSA-2023-0954)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0954 advisory. 250-12.0.2.3 - Backport upstream pstore dmesg fix Orabug: 34868110 - Remove upstream references Orabug: 33995357 - Disable unprivileged BPF by default...

Oracle Linux 9 : openssl (ELSA-2023-12152)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12152 advisory. - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed...