Oracle Linux 9 : poppler (ELSA-2022-8151)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8151 advisory. 21.01.0-13 - Dont run out of file for Hints - Rebuild for 2096451 - Resolves: 2090970, 2096451 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : harfbuzz (ELSA-2022-8384)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8384 advisory. - Resolves:rh2103849 CVE-2022-33068 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 9 : qemu-kvm (ELSA-2022-7967)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7967 advisory. - Resolves: bz1951522 CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers rhel-9.0 Tenable has extracted the preceding...

Oracle Linux 9 : freetype (ELSA-2022-8340)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8340 advisory. 2.10.4-9 - Guard face-size - Resolves: 2079280 2.10.4-8 - Properly guard faceindex - Resolves: 2079262 2.10.4-7 - Avoid invalid face index - Resolves:...

libguestfs security, bug fix, and enhancement update

1.48.4-2.0.1 - Add btrfs-progs to the packages installed in the appliance Orabug: 34137448 - Replace upstream references from a description tag - Fix build on Oracle Linux Orabug: 29319324 - Set DISTROORACLELINUX correspeonding to ol 1:1.48.4-2 - Rebase to new stable branch version 1.48.4 resolve...

Oracle Linux 9 : dnsmasq (ELSA-2022-8070)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8070 advisory. 2.85-5 - Prevent endless loop in forwardquery 2120711 2.85-4 - Prevent use after free in dhcp6norelay CVE-2022-0934 Tenable has extracted the preceding...

Oracle Linux 9 : python-lxml (ELSA-2022-8226)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8226 advisory. - Security fix for CVE-2022-2309 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 9 : rsync (ELSA-2022-8291)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8291 advisory. 3.2.3-18 - Resolves: 2111177 - remote arbitrary files write inside the directories of connecting peers 3.2.3-17 - Resolves: 2116669 - zlib: a heap-based buffer...

Oracle Linux 9 : swtpm (ELSA-2022-8100)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8100 advisory. 0.7.0-3.20211109gitb79fd91 - Disable OpenSSL FIPS mode to avoid libtpms failures Resolves: rhbz2090219 0.7.0-2.20211109gitb79fd91 - Add fix for CVE-2022-23645...

Oracle Linux 9 : bind (ELSA-2022-8068)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8068 advisory. - Fix possible serve-stale related crash CVE-2022-3080 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify...

Oracle Linux 9 : libvirt (ELSA-2022-8003)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8003 advisory. 8.5.0-7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 8.5.0-7 - securityselinux: Dont ignore NVMe disks when setting image label rhbz2121441 8.5.0-6...

Oracle Linux 9 : mingw-gcc (ELSA-2022-8415)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8415 advisory. 12.0.1-11.2 - Bump release and rebuild resolves: rhbz2096010 12.0.1-11.1 - Rebase to Fedora Rawhide resolves: rhbz2080170 Tenable has extracted the preceding...

Oracle Linux 9 : podman (ELSA-2022-7954)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7954 advisory. 2:4.2.0-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:4.2.0-3 - fix dependency in test subpackage - Related:...

Oracle Linux 9 : redis (ELSA-2022-8096)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8096 advisory. 6.2.7-1 - rebase to 6.2.7 2083151 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : libldb (ELSA-2022-8318)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8318 advisory. - resolves: rhbz2109017 - Fix CVE-2022-32746 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2022-8222)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-8222 advisory. 21.1.3-3 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2110440, rhbz2110433 Tenable has extracted the preceding...

Oracle Linux 9 : openjpeg2 (ELSA-2022-8207)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8207 advisory. 2.4.0-7 - Fix CVE-2022-1122 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : webkit2gtk3 (ELSA-2022-8054)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8054 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macO...

Oracle Linux 9 : ignition (ELSA-2022-8126)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8126 advisory. 2.14.0-1 - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service 2.13.0-2 - Rename -validate-nonlinux...

Oracle Linux 7 : hsqldb (ELSA-2022-8560)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8560 advisory. 1:1.8.1.3-15 - Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853 Tenable has extracted the preceding description block directly from t...