Oracle Linux 7 : microcode_ctl (ELSA-2023-12722)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-12722 advisory. - Resolves for Oracle hardware: CVE-2022-40982 Orabug: 35692745 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : dbus (ELSA-2023-4569)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4569 advisory. - Fix CVE-2023-34969 2213402 - Fix CVE-2022-42010 2133647 - Fix CVE-2022-42011 2133641 - Fix CVE-2022-42012 2133635 Tenable has extracted the preceding...

Oracle Linux 8 : iperf3 (ELSA-2023-4570)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-4570 advisory. 3.5-7 - Fixes CVE-2023-38403 Resolves: rhbz2223729 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : linux-firmware (ELSA-2023-12715)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12715 advisory. 20230516-999.25.git6c9e0ed5.el9 - Add missing amd-ucode/ files to nano and core rpm Orabug: 35642190 - Add posttrans scriptlet to reload microcode on AMD Orabu...

Oracle Linux 9 : microcode_ctl (ELSA-2023-12724)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-12724 advisory. 4:20220809-2.20230214.1.0.3 - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 -...

Oracle Linux 8 : linux-firmware (ELSA-2023-12714)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12714 advisory. 20230516-999.25.git6c9e0ed5.el8 - Add missing amd-ucode/ files to nano and core rpm Orabug: 35642190 - Add posttrans scriptlet to reload microcode on AMD Orabu...

Oracle Linux 8 : postgresql:10 (ELSA-2023-4539)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4539 advisory. - Backport fixes for CVE-2023-2454 and CVE-2023-2455 - Resolves: CVE-2022-2625 - Resolves: CVE-2022-1552 - Resolves: CVE-2021-23214 Tenable has extract...

Oracle Linux 8 : curl (ELSA-2023-4523)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4523 advisory. - GSS delegation too eager connection re-use CVE-2023-27536 - fix host name wildcard checking CVE-2023-28321 Tenable has extracted the preceding...

Oracle Linux 9 : iperf3 (ELSA-2023-4571)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-4571 advisory. 3.9-10 - Fixes CVE-2023-38403 Resolves: rhbz2223676 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : nodejs:18 (ELSA-2023-4536)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4536 advisory. - Rebase to 18.16.1 Resolves: rhbz2188290 rhbz2166926 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 Tenable has extracted the...

Oracle Linux 8 : postgresql:12 (ELSA-2023-4535)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4535 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 12.15-1.0.1 - Fixed postgresql port binding issue during bootup Orabug: 35103668 12.15-1 - Update...

Oracle Linux 8 : .NET / 6.0 (ELSA-2023-4645)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4645 advisory. 6.0.121-1.0.1 - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ2228567 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : kernel (ELSA-2023-4517)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4517 advisory. - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM Tamas Koczka CVE-2022-42896 - net/sched: tcindex: update imperfect hash filters...

Oracle Linux 6 : openssh (ELSA-2023-4428)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4428 advisory. - Fix for CVE-2016-6210 incomplete fix Orabug: 29375502CVE-2016-6210 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 6 : kernel (ELSA-2023-1822)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1822 advisory. - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds CVE-2022-4378 Orabug: 35304147 Tenable has extracted the preceding description...

Oracle Linux 7 : linux-firmware (ELSA-2023-12712)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12712 advisory. 20230516-999.25.git6c9e0ed5.el7 - Add missing amd-ucode/ files to nano rpm Orabug: 35642190 - Add posttrans scriptlet to reload microcode on AMD Orabug: 356369...

Oracle Linux 7 : thunderbird (ELSA-2023-4495)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-4495 advisory. 102.14.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.14.0-1 - Update to...

kernel security and bug fix update

3.10.0-1160.95.1.0.1.OL7 - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 3.10.0-1160.95.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 2481767...

firefox security update

102.14.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.14.0-1 - Update to 102.14.0 build1...

Oracle Linux 9 : firefox (ELSA-2023-4462)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4462 advisory. 102.14.0-1.0.1 - Updated homepages to use https Orabug: 34648274 102.14.0-1 - Update to 102.14.0 build1 Tenable has extracted the preceding description...