kernel security, bug fix, and enhancement update

5.14.0-162.6.11.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : mingw-glib2 (ELSA-2022-8418)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8418 advisory. 2.70.1-2 - Rebuild for mingw-zlib update resolves: rhbz2116278 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : dpdk (ELSA-2022-8263)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8263 advisory. - Includes fixes for CVE-2022-2132 2107173 and CVE-2022-28199 2123616 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : mingw-zlib (ELSA-2022-8420)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8420 advisory. 1.2.12-2 - Fix changelog Related: rhbz2068371 1.2.12-1 - Bump version to 1.2.12 to fix CVE-2018-25032 Related: rhbz2068371 Tenable has extracted the preceding...

Oracle Linux 9 : virt-v2v (ELSA-2022-7968)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7968 advisory. - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz2102719 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : Image / Builder (ELSA-2022-7950)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7950 advisory. cockpit-composer 41-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095, Orabug:34398922 41-1 - New upstream release 40-1 - New...

Oracle Linux 9 : dovecot (ELSA-2022-8208)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8208 advisory. 1:2.3.16-7.0.1 - do not run systemd commands during leapp upgrade Orabug: 34680501 1:2.3.16-7 - fix possible privilege escalation when similar master and...

Oracle Linux 9 : unbound (ELSA-2022-8062)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8062 advisory. 1.16.2-2 - Require openssl tool for unbound-keygen 2116802 1.16.2-1 - Update to 1.16.2 2087120 1.16.0-3 - Disable ED25519 and ED448 in FIPS mode 207954...

Oracle Linux 9 : logrotate (ELSA-2022-8393)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8393 advisory. - fix potential DoS from unprivileged users via the state file CVE-2022-1348 Mon Aug 09 2021 Mohan Boddu Tenable has extracted the preceding description block...

Oracle Linux 9 : samba (ELSA-2022-8317)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8317 advisory. - resolves: rhbz2108332 - Fix CVE-2022-32742 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : runc (ELSA-2022-8090)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8090 advisory. 4:1.1.4-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.1.4 - Related: 2061316 Tenable has extracted the preceding description block direct...

Oracle Linux 9 : protobuf (ELSA-2022-7970)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7970 advisory. 3.14.0-13 - Rebuilt for test fixes 3.14.0-12 - Rebuilt for test fixes 3.14.0-11 - Applied patch for for CVE-2021-22570 2055641 Tenable has extracted the precedi...

Oracle Linux 9 : yajl (ELSA-2022-8252)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8252 advisory. - yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to...

Oracle Linux 9 : e2fsprogs (ELSA-2022-8361)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8361 advisory. 1.46.5-3 - Add sanity check to extent manipulation 2073549 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 9 : grafana-pcp (ELSA-2022-8250)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-8250 advisory. 3.2.0-3 - bump NVR Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : fribidi (ELSA-2022-8011)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8011 advisory. 1.0.10-6.el9.2 - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz2050086, rhbz2050069, rhbz2050063 Tenable has extracte...

Oracle Linux 9 : guestfs-tools (ELSA-2022-7959)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7959 advisory. - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz2102721 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : pcs (ELSA-2022-10007)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10007 advisory. 0.11.3-4 - Fixed ruby socket permissions - Resolves: rhbz2116841 0.11.3-3 - Fixed booth ticket mode value case insensitive - Fixed booth sync check whether...

Oracle Linux 9 : skopeo (ELSA-2022-7955)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7955 advisory. 2:1.9.2-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: 2061316 2:1.9.1-1 - update to...

Oracle Linux 9 : poppler (ELSA-2022-8151)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8151 advisory. 21.01.0-13 - Dont run out of file for Hints - Rebuild for 2096451 - Resolves: 2090970, 2096451 Tenable has extracted the preceding description block directly fr...