Scientific Linux Security Update : pki-core on SL7.x x86_64 (2022:8799)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:8799-1 advisory. - pki-core: access to external entities when parsing XML can lead to XXE CVE-2022-2414 Note that Nessus has not tested for this issue but has instead reli...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-10065)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-10065 advisory. - btrfs: Don't submit any btree write bio if the fs has errors Qu Wenruo Orabug: 31265340 CVE-2019-19377 - scsi: stex: Properly zero out the...

Oracle Linux 7 : pki-core (ELSA-2022-8799)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8799 advisory. - Bugzilla Bug 2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE rhel-7.9.z ckelley, mharmsen Tenable has extracted...

Oracle Linux 7 : libvirt (ELSA-2022-10062)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10062 advisory. - security: fix SELinux label generation logic Daniel P. Berrange Orabug: 34773029 CVE-2021-3631 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : spacewalk-backend / spacewalk-java (ELSA-2022-10024)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10024 advisory. - Fix CVE-2022-43753 Orabug: 34814068 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

CentOS 7 : firefox (RHSA-2022:8552)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8552 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined...

Oracle Linux 7 : kubernetes (ELSA-2022-10035)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-10035 advisory. - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.24 - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.23 - Resolve...

Oracle Linux 7 : krb5 (ELSA-2022-8640)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8640 advisory. - Fix integer overflows in PAC parsing CVE-2022-42898 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 7 : kubernetes (ELSA-2022-10033)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-10033 advisory. - Addresses CVE-2022-3294 & CVE-2022-3162 - Addresses CVE-2022-3172 olcne - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.21 - Resolv...

RHEL 7 : krb5 (RHSA-2022:8640)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8640 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...

Oracle Linux 7 : thunderbird (ELSA-2022-8555)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-8555 advisory. 102.5.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.5.0-2 - Update to...

Oracle Linux 7 : hsqldb (ELSA-2022-8560)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8560 advisory. 1:1.8.1.3-15 - Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853 Tenable has extracted the preceding description block directly from t...

RHEL 7 : firefox (RHSA-2022:8552)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8552 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Oracle Linux 7 : xorg-x11-server (ELSA-2022-8491)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8491 advisory. 1.20.4-19 - CVE fix for: CVE-2022-3550, CVE-2022-3551 Resolves: rhbz2140765, rhbz2140770 Tenable has extracted the preceding description block directly...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9999)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9999 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34610032 CVE-2022-3028 Tenable has extracted the preceding description block directly from...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-9996)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9996 advisory. - media: em28xx: initialize refcount before krefget Dongliang Mu Orabug: 34619521 CVE-2022-3239 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9997)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9997 advisory. - media: em28xx: initialize refcount before krefget Dongliang Mu Orabug: 34619521 CVE-2022-3239 Tenable has extracted the preceding description block directly...

Scientific Linux Security Update : php-pear on SL7.x (noarch) (2022:7340)

The remote Scientific Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the SLSA-2022:7340-1 advisory. - ArchiveTar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked CVE-2020-28948 - ArchiveTar: improper filename...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:7337)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7337-1 advisory. - a use-after-free in clsroute filter implementation may lead to privilege escalation CVE-2022-2588 - RetBleed Arbitrary Speculative Code Executi...

Oracle Linux 7 : zlib (ELSA-2022-9987)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9987 advisory. 1.2.7-20.0.1 - Resolves: CVE-2022-37434 Orabug: 34752508 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...