Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12887)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12887 advisory. - mm: shmem: fix data-race in shmemgetattr Jeongjun Park Orabug: 37268580 CVE-2024-50228 - wifi: iwlwifi: mvm: fix 6 GHz scan construction Johanne...

Oracle Linux 8 : pcs (ELSA-2024-10987)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10987 advisory. 0.10.18-2.0.1.el810.3 - Replace HAM-logo.png with a generic one 0.10.18-2.el810.3 - Prevented any future HTTP header-based attacks on puma/sinatra by removing...

Oracle Linux 8 : php:7.4 (ELSA-2024-10952)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10952 advisory. - Fix cgi.forceredirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered...

Oracle Linux 8 : php:8.2 (ELSA-2024-10951)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10951 advisory. libzip php 8.2.25-1 - rebase to 8.2.25 RHEL-66166 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the precedin...

Oracle Linux 8 : kernel (ELSA-2024-10943)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10943 advisory. - irqchip/gic-v4: Correctly deal with setaffinity on lazily-mapped VPEs Charles Mirabile RHEL-66965 CVE-2024-50192 - irqchip/gic-v4: Don't allow a VMO...

Oracle Linux 8 : ruby:2.5 (ELSA-2024-10850)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10850 advisory. - Fix REXML ReDoS vulnerability CVE-2024-49761. rubygem-abrt Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : postgresql:15 (ELSA-2024-10830)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10830 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 15.10-1 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 Tenable has extracted...

Oracle Linux 8 : perl-App-cpanminus:1.7044 (ELSA-2024-10219)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10219 advisory. - Patch the code to use https instead of http CVE-2024-45321 perl-CPAN-DistnameInfo perl-CPAN-Meta-Check perl-File-pushd perl-Module-CPANfile perl-Parse-PMFile...

Oracle Linux 8 : ruby:3.1 (ELSA-2024-10834)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10834 advisory. ruby 3.1.5-144 - Fix REXML ReDoS vulnerability. CVE-2024-49761 Resolves: RHEL-68520 rubygem-abrt rubygem-mysql2 rubygem-pg Tenable has extracted the preceding...

Oracle Linux 8 : postgresql:13 (ELSA-2024-10832)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10832 advisory. pgaudit 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release for rebuild against libpq-12.1-3 1.4.0-3 - BuildRequires libpq-devel...

Oracle Linux 8 : python3:3.6.8 (ELSA-2024-10779)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10779 advisory. - Security fix for CVE-2024-11168 Resolves: RHEL-67252 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : firefox (ELSA-2024-10752)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10752 advisory. 128.5.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.5.1 - Add debranding patches Mustafa Gezen - Add OpenELA default...

Oracle Linux 8 : thunderbird (ELSA-2024-10591)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10591 advisory. 128.5.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.5.0 - Add OpenELA debranding 128.5.0-1 - Update to 128.5.0 build1...

Oracle Linux 8 : pam (ELSA-2024-10379)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10379 advisory. - pamaccess: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pamunix: always run the helper to obtain shadow passwor...

Oracle Linux 8 : kernel:4.18.0 (ELSA-2024-10281)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10281 advisory. - media: edia: dvbdev: fix a use-after-free Kate Hsuan RHEL-35763 CVE-2024-27043 - bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-10289)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10289 advisory. aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33...

container-tools:ol8 security update

aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/fe85f0d - Resolves: RHEL-61853 2:1.33.10-1 - update to the latest content of...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12830)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12830 advisory. - x86/fpu: Keep xfdstate in sync with MSRIA32XFD Adamos Ttofari Orabug: 37281022 CVE-2024-35801 - devlink: fix possible use-after-free and memory...

evolution bug fix update

An update is available for evolution. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Evolution is a GNOME application that provides integrated email, calendar,...

.NET 9.0 bug fix and enhancement update

An update is available for dotnet9.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfor...