Oracle Linux 9 : postgresql:16 (ELSA-2024-10788)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10788 advisory. - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fixes: CVE-2023-2454 CVE-2023-2455 Tenable has extracted the preceding description block...

Oracle Linux 8 : python3:3.6.8 (ELSA-2024-10779)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10779 advisory. - Security fix for CVE-2024-11168 Resolves: RHEL-67252 Tenable has extracted the preceding description block directly from the Oracle Linux security...

python3:3.6.8 security update

3.6.8-69.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-69 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 3.6.8-68 - Security fix for CVE-2024-9287 Resolves: RHEL-64878...

Oracle Linux 7 : tigervnc (ELSA-2024-9901)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9901 advisory. 1.8.0-33.0.3 - xorg-x11-server: xkb: Fix buffer overflow in XkbSetCompatMap CVE-2024-9632Orabug: 37295822 Tenable has extracted the preceding description block...

Oracle Linux 8 : thunderbird (ELSA-2024-10591)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10591 advisory. 128.5.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.5.0 - Add OpenELA debranding 128.5.0-1 - Update to 128.5.0 build1...

Oracle Linux 8 : firefox (ELSA-2024-10752)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10752 advisory. 128.5.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.5.1 - Add debranding patches Mustafa Gezen - Add OpenELA default...

Oracle Linux 9 : thunderbird (ELSA-2024-10592)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10592 advisory. 128.5.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.5.0 - Add OpenELA debranding 128.5.0-1 - Update to 128.5.0 build1 Tenabl...

Oracle Linux 9 : firefox (ELSA-2024-10702)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10702 advisory. 128.5.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

Oracle Linux 9 : tuned (ELSA-2024-10384)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10384 advisory. - Fixed privileged execution of arbitrary scripts by active local user, CVE-2024-52336 Resolves: RHEL-66639 Tenable has extracted the preceding...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12851)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12851 advisory. - memcgwriteeventcontrol: fix a user-triggerable oops Al Viro Orabug: 37070674 CVE-2024-45021 - ocfs2: fix races between hole punching and AIO+DIO...

Oracle Linux 9 : python-tornado (ELSA-2024-10590)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-10590 advisory. 6.4.2-1 - Update to 6.4.2 Resolves: RHEL-68663 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 8 : kernel:4.18.0 (ELSA-2024-10281)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10281 advisory. - media: edia: dvbdev: fix a use-after-free Kate Hsuan RHEL-35763 CVE-2024-27043 - bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in...

Oracle Linux 7 : krb5 (ELSA-2024-8788)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8788 advisory. 1.15.1-55.0.7 - libkrad: implement support for Message-Authenticator CVE-2024-3596 Orabug: 37241077 Tenable has extracted the preceding description block direct...

Oracle Linux 8 : pam (ELSA-2024-10379)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10379 advisory. - pamaccess: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pamunix: always run the helper to obtain shadow passwor...

Oracle Linux 7 : java-11-openjdk (ELSA-2024-8120)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8120 advisory. - Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235 - 1001-orabug36904359-CVE-2024-21138-fix.patch -...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-10289)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10289 advisory. aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33...

Oracle Linux 9 : webkit2gtk3 (ELSA-2024-10472)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10472 advisory. 2.46.3-2 - Add patch for CVE-2024-44309 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2024-8116)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8116 advisory. - Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235 - 1001-orabug36904359-CVE-2024-21131-fix.patch -...

Oracle Linux 8 : webkit2gtk3 (ELSA-2024-10481)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10481 advisory. 2.46.3-2 - Add patch for CVE-2024-44309 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

container-tools:ol8 security update

aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/fe85f0d - Resolves: RHEL-61853 2:1.33.10-1 - update to the latest content of...