Oracle Linux 8 : python-lxml (ELSA-2022-1932)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-1932 advisory. 4.2.3-4 - Security fix for CVE-2021-43818 Resolves: rhbz2032569 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : cpio (ELSA-2022-1991)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-1991 advisory. 2.12-11 - Fixed CVE-2021-38185 1992511 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 : container-tools:ol8 (ELSA-2022-1762)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1762 advisory. - switch to RHEL maintenance branch which fixes CVE-2022-27651 - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access - fix...

Oracle Linux 8 : libtiff (ELSA-2022-1810)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1810 advisory. 4.0.9-21 - Fix CVE-2020-19131 2006535 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : libsndfile (ELSA-2022-1968)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1968 advisory. 1.0.28-12 - fix heap buffer overflow in flac 2030507 1.0.28-11 - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code...

Oracle Linux 8 : fetchmail (ELSA-2022-1964)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-1964 advisory. 6.4.24-1 - Update to fetchmail-6.4.24 fixes CVE-2021-36386 and CVE-2021-39272 Resolves: 1999275, 2002698 Tenable has extracted the preceding descriptio...

Oracle Linux 8 : xorg-x11-server / and / xorg-x11-server-Xwayland (ELSA-2022-1917)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1917 advisory. - CVE fix for: CVE-2021-4008 2030162, CVE-2021-4009 2030172, CVE-2021-4010 2030175, CVE-2021-4011 2030181 - CVE fix for: CVE-2021-4008 2038066,...

Oracle Linux 8 : zsh (ELSA-2022-2120)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-2120 advisory. - do not perform PROMPTSUBST evaluation on file.file/%K arguments CVE-2021-45444 - improve printing of error messages introduced by the fix of CVE-2019-20044...

Oracle Linux 8 : postgresql:10 (ELSA-2022-1830)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1830 advisory. 10.19-2 - Add missing files into file section of server package postgresql-setup v8.6 newly provides postgresql-upgrade Tenable has extracted the preceding...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2022-1819)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1819 advisory. delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.7-1 - Rebase...

Oracle Linux 8 : php:7.4 (ELSA-2022-1935)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1935 advisory. - fix SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2022-1759)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1759 advisory. - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,...

Oracle Linux 8 : openssh (ELSA-2022-2013)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-2013 advisory. 8.0p1-13 - Upstream: ClientAliveCountMax=0 disable the connection killing behaviour 2015828 8.0p1-12 - Add support for 'Include' directive in sshdconfig file...

Oracle Linux 8 : exiv2 (ELSA-2022-1842)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1842 advisory. 0.27.5-2 - Remove RPATH Resolves: bz2018422 0.27.5-1 - Exiv2 0.27.5 Resolves: bz2018422 Fix stack exhaustion issue in the printIFDStructure function leading to...

Oracle Linux 8 : maven:3.6 (ELSA-2022-1860)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1860 advisory. - Resolves: CVE-2020-13956 maven Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 8 : maven:3.5 (ELSA-2022-1861)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1861 advisory. - Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as...

Oracle Linux 8 : dovecot (ELSA-2022-1950)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1950 advisory. 1:2.3.16-2 - do not disable xz/lzma for now despite being deprecated 1:2.3.16-1 - dovecot updated to 2.3.16, pigeonhole to 0.5.16 - fix CVE-2021-33515 plaintext...

Oracle Linux 8 : cairo / and / pixman (ELSA-2022-1961)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1961 advisory. - Fix CVE-2020-35492 1908113 pixman Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : cockpit (ELSA-2022-2008)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-2008 advisory. - Certificate login validation rhbz1992620, CVE-2021-3698 - Restrict frame embedding to same origin rhbz1984902, CVE-2021-3660 Tenable has extracted th...

Oracle Linux 8 : python27:2.7 (ELSA-2022-1821)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1821 advisory. - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs Resolves: rhbz2047376 - Security fix for...