Oracle Linux 8 : thunderbird (ELSA-2022-0535)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-0535 advisory. 91.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 91.6.0-1 - Update to 91.6.0 build1 Tenable has...

Wslu - A Collection Of Utilities For Windows 10 Linux Subsystems

This is a collection of utilities for Windows 10 Linux Subsystem, such as retrieving Windows 10 environment variables or creating your favorite Linux GUI application shortcuts on Windows 10 Desktop. Requires Windows 10 Creators Update; Some of the feature requires a higher version of Windows 10;...

.NET 5.0 security and bugfix update

5.0.211-1.0.1 - Support AArch64 on Oracle Linux Orabug: 32738620 - Include new Oracle Linux runtime IDs Add 1000-Add-missing-OL-RIDs.patch 5.0.211-1 - Update to .NET SDK 5.0.211 and Runtime 5.0.14 - Resolves: RHBZ2047767...

Oracle Linux 7 : qemu (ELSA-2022-9123)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9123 advisory. - Document CVE-2021-4158 and CVE-2021-3947 as fixed Mark Kanda Orabug: 33719302 Orabug: 33754145 CVE-2021-3947 CVE-2021-4158 - hw/block/fdc: Kludge...

Oracle Linux 8 : vim (ELSA-2022-0366)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0366 advisory. - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read - CVE-2021-4192 vim: vulnerable to Use After Free - 2028341 - CVE-2021-3984 vim: illegal memory...

Oracle Linux 8 : varnish:6 (ELSA-2022-0418)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0418 advisory. - Resolves: 2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request Smuggling Vulnerability varnish-modules Tenable has extracted the preceding...

Oracle Linux 6 : bind (ELSA-2022-9117)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9117 advisory. - Backport fix for CVE-2018-5741 Orabug: 33496185 - Backport possible assertion failure on DNAME processing CVE-2021-25215 - Backport the fix for buffer overflo...

Oracle Linux 8 : nodejs:14 (ELSA-2022-0350)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0350 advisory. nodejs 1:14.18.2-2 - Add missing fixes - Resolves: RHBZ2027642, RHBZ2027635 1:14.18.2-1 - Resolves: RHBZ2027609 - Resolves: RHBZ2027649, RHBZ2027646,...

Oracle Linux 8 : rpm (ELSA-2022-0368)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0368 advisory. 4.14.3-19.2 - Address covscan issues in binding sigs validation patch 2022537 4.14.3-19.1 - Validate and require subkey binding sigs on PGP pubkeys 2022537 -...

Oracle Linux 8 : cryptsetup (ELSA-2022-0370)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0370 advisory. - patch: fix CVE-2021-4122. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 7 : samba (ELSA-2022-0328)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0328 advisory. - resolves: 2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: 2036595 - Fix MIT realm regression caused by CVE-2020-25717 Tenable has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9088)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9088 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33699627 Orabug: 33762471 CVE-2021-4155 - fix...

Oracle Linux 8 : nginx:1.20 (ELSA-2022-0323)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0323 advisory. 1.20.1-1.0.1 - Remove Red Hat references Orabug: 29498217 1:1.20.1-1 - rebase to 1.20.1 addressing CVE-2021-23017 Tenable has extracted the preceding descriptio...

Oracle Linux 8 : samba (ELSA-2022-0332)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0332 advisory. - resolves: rhbz2046174 - Fix username map script regression of CVE-2020-25717 - resolves: rhbz2046152 - Fix CVE-2021-44142 Tenable has extracted the preceding...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2022-0306)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0306 advisory. 1:1.8.0.322.b06-1 - Update to aarch64-shenandoah-jdk8u322-b06 EA - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require...

Oracle Linux 6 : polkit (ELSA-2022-9073)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9073 advisory. 0.96-11.0.1.el610.1 - pkexec: local privilege escalation Orabug: 33789506CVE-2021-4034 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2022-0307)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0307 advisory. 1:1.8.0.322.b06-2 - Fix FIPS issues in native code and with initialisation of java.security.Security - Related: rhbz2039366 1:1.8.0.322.b06-1 - Update ...

Oracle Linux 8 : parfait:0.5 (ELSA-2022-0290)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0290 advisory. - Obsolete remove vulnerable versions of log4j12 NVR 1.2.17-23 when upgrading to parfait 0.5.4-4 CVE-2021-4104 Tenable has extracted the preceding...

Oracle Linux 6 : log4j (ELSA-2022-9056)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9056 advisory. 0:1.2.14-6.4.1 - Fix remote code execution vulnerability - Resolves: CVE-2021-4104 Orabug: 33689748 Tenable has extracted the preceding description block direct...

Oracle Linux 8 : httpd:2.4 (ELSA-2022-0258)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0258 advisory. - scoreboard: fix null pointer deference Orabug: 33690670CVE-2021-34798 - fix apescapequote logic Orabug: 33690686CVE-2021-39275 - Resolves: 2035062 -...