Oracle Linux 8 : wget (ELSA-2024-5299)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5299 advisory. 1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretati...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2024-12585)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12585 advisory. - net/mlx5e: drop shorter ethernet frames Manjunath Patil Orabug: 36879157 CVE-2024-41090 CVE-2024-41091 Tenable has extracted the preceding descripti...

Oracle Linux 8 : gnome-shell (ELSA-2024-5298)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5298 advisory. 3.32.2-56 - Only open portal login in response to user action Resolves: RHEL-39097 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12583)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12583 advisory. - net/mlx5e: drop shorter ethernet frames Manjunath Patil Orabug: 36879158 CVE-2024-41090 CVE-2024-41091 Tenable has extracted the preceding descripti...

Oracle Linux 8 : python-urllib3 (ELSA-2024-5309)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5309 advisory. 1.24.2-8 - Security fix for CVE-2024-37891 Resolves: RHEL-45334 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : 389-ds-base (ELSA-2024-5192)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5192 advisory. 2.4.5-9 - Bump version to 2.4.5-9 - Resolves: RHEL-44323 - unauthenticated user can trigger a DoS by sending a specific extended search request -...

Oracle Linux 8 : linux-firmware (ELSA-2024-12580)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12580 advisory. 20240715-999.34.git4c8fb21e.el8 - Rebase to latest upstream Orabug: 36826157 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : linux-firmware (ELSA-2024-12578)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12578 advisory. 20240715-999.34.git4c8fb21e.el9 - Rebase to latest upstream Orabug: 36826157 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : httpd (ELSA-2024-5138)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5138 advisory. - Resolves: RHEL-46047 - httpd: Security issues via backend applications whose response headers are malicious or exploitable CVE-2024-38476 Tenable has extracte...

Oracle Linux 7 : linux-firmware (ELSA-2024-12579)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12579 advisory. 20240715-999.34.git4c8fb21e.el7 - Rebase to latest upstream Orabug: 36826157 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : kernel (ELSA-2024-5101)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5101 advisory. - ionic: fix use after netifnapidel CKI Backport Bot RHEL-47624 CVE-2024-39502 - ionic: clean interrupt before enabling queue to avoid credit race CKI...

kernel security update

4.18.0-553.16.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : qemu-kvm (ELSA-2024-12574)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12574 advisory. - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit DAT is set hilippe Mathieu-Daude Orabug: 36575206 CVE-2024-3447 Tenable has extracted the preceding...

Oracle Linux 8 : libtiff (ELSA-2024-5079)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5079 advisory. - Fix CVE-2023-6228 CVE-2023-52356 CVE-2023-25433 CVE-2018-15209 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12571)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12571 advisory. - crypto: pcrypt - Fix hungtask for PADATARESET Lu Jialin Orabug: 36806710 CVE-2023-52813 - usbnet: sanity check for maxpacket Oliver Neukum Orabug:...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2024-12570)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12570 advisory. - crypto: pcrypt - Fix hungtask for PADATARESET Lu Jialin Orabug: 36806710 CVE-2023-52813 - usbnet: sanity check for maxpacket Oliver Neukum Orabug:...

Oracle Linux 9 : kernel (ELSA-2024-4928)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4928 advisory. - mlxbfgige: call requestirq after NAPI initialized Kamal Heib RHEL-43012 RHEL-37179 CVE-2024-35907 - mlxbfgige: stop PHY during open error paths Kamal...

Oracle Linux 9 : freeradius (ELSA-2024-4935)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4935 advisory. 3.0.21-40 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46566 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : freeradius:3.0 (ELSA-2024-4936)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4936 advisory. 3.0.20-15 - Backport BlastRADIUS CVE fix Resolves: RHEL-46572 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : libndp (ELSA-2024-4620)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-4620 advisory. 1.7-7 - Validate route information option length Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...