Oracle Linux 8 : python3.11-urllib3 (ELSA-2024-8843)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8843 advisory. 1.26.12-4 - Fix testssltransport for changes in ssl.SSLSocket in Python 3.11.3 Related: RHEL-59995 1.26.12-3 - Security fix for CVE-2024-37891 Resolves:...

Oracle Linux 9 : libtiff (ELSA-2024-8914)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8914 advisory. 4.4.0-12.1 - fix CVE-2024-7006 a null pointer dereference in tifdirinfo RHEL-52931 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 8 : haproxy (ELSA-2024-8849)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8849 advisory. 1.8.27-5.1 - Reject '' as part of URI path component CVE-2023-45539, RHEL-18168 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : edk2 (ELSA-2024-8935)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8935 advisory. 20231122-6.0.1.el94.4 - Replace upstream references Orabug:36569119 20231122-6.el94.4 - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch RHEL-55337 -...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-8846)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8846 advisory. aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common 1-82.0.1 - Updated removed references Orabug: 33473101 Alex...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2024-8876)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8876 advisory. - Rebase to Go1.22.5 to fix CVE-2024-24791 - Addresses CVEs-2024-24789 and CVE-2024-24790 - Rebase to Go1.22.5 to fix CVE-2024-24791 - Addresses CVEs-2024-24789...

Oracle Linux 8 : bzip2 (ELSA-2024-8922)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8922 advisory. - CVE-2019-12900: Accept as many selectors as the file format allows Orabug: 37266061 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : krb5 (ELSA-2024-8860)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8860 advisory. - libkrad: implement support for Message-Authenticator CVE-2024-3596 Resolves: RHEL-50253 Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : xmlrpc-c (ELSA-2024-8859)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8859 advisory. 1.51.0-10 - Prevent integer overflow or wraparound, CVE-2024-4549 RHEL-57519 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 8 : python3.11 (ELSA-2024-8838)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8838 advisory. 3.11.10-1.0.1 - Update rpm-macros description Orabug: 36024572 3.11.10-1 - Update to 3.11.10 Resolves: RHEL-57400 Tenable has extracted the preceding descriptio...

Oracle Linux 8 : kernel (ELSA-2024-8856)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8856 advisory. - lib/generic-radix-tree.c: Fix rare race in genradixptralloc Waiman Long RHEL-62139 CVE-2024-47668 - bonding: fix xfrm realdev null pointer dereferenc...

Oracle Linux 8 : bpftrace (ELSA-2024-8830)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8830 advisory. - Fix security hole checking unpacked kernel headers CVE-2024-2313 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : grafana-pcp (ELSA-2024-8847)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8847 advisory. 5.1.1-9 - Resolves RHEL-61780: CVE-2024-9355 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

kernel security update

4.18.0-553.27.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 8 : bcc (ELSA-2024-8831)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8831 advisory. - Really prevent the loading of compromised headers RHEL-28768, CVE-2024-2314 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12806)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12806 advisory. - vtioctl: fix arrayindexnospec in vtsetactivate Jakob Koschel Orabug: 37101899 CVE-2022-48804 - tty: vtioctl: fix potential Spectre v1 Gustavo A...

Oracle Linux 8 : python-gevent (ELSA-2024-8834)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8834 advisory. 1.2.2-5 - Avoid printing TypeError traceback - gevent.pywsgi: Much improved handling of chunk trailers Backport fix for CVE-2023-41419 Resolves: RHEL-17078...

Oracle Linux 8 : Oracle / Linux / Automation / Manager / 2.2 / (MODERATE) (ELSA-2024-12803)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12803 advisory. Oracle Linux Automation Manager 2.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : xorg-x11-server / and / xorg-x11-server-Xwayland (ELSA-2024-8798)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8798 advisory. - CVE fix for CVE-2024-9632 xorg-x11-server-Xwayland Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 9 : openexr (ELSA-2024-8800)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8800 advisory. 3.1.1-2.1 - fix CVE-2023-5481 RHEL-64162 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...