Oracle Linux 8 : sqlite (ELSA-2022-7108)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7108 advisory. - Fixed CVE-2020-35527 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : gnutls (ELSA-2022-7105)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7105 advisory. 3.6.16-5 - Fix double-free in gnutlspkcs7verify 2109787 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : device-mapper-multipath (ELSA-2022-7192)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7192 advisory. 0.8.4-22.2 - Add 0092-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz 2133994 Tenable has extracted the preceding description block...

Oracle Linux 8 : libksba (ELSA-2022-7089)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7089 advisory. 1.3.5-8 - Fix for CVE-2022-3515 2135702 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2022-9930)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9930 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34566751 CVE-2022-3028 - KVM: x86: do not report a vCPU as preempted outside instruction...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9931)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9931 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34566751 CVE-2022-3028 - KVM: x86: do not report a vCPU as preempted outside instruction...

Oracle Linux 8 : java-17-openjdk (ELSA-2022-7000)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7000 advisory. 1:17.0.5.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patch...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2022-7006)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7006 advisory. 1:1.8.0.352.b08-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz21336...

Oracle Linux 8 : java-11-openjdk (ELSA-2022-7012)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7012 advisory. 1:11.0.17.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patc...

Oracle Linux 8 : firefox (ELSA-2022-7024)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-7024 advisory. 102.3.0-7.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.3.0-7 - Fix for expat...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9926)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9926 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34566752 CVE-2022-3028 Tenable has extracted the preceding description block...

Oracle Linux 8 : thunderbird (ELSA-2022-7023)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-7023 advisory. 102.3.0-4.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.3.0-4 - Fix for expat CVE-2022-40674 Tenable has...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9927)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9927 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34566752 CVE-2022-3028 Tenable has extracted the preceding description block...

Oracle Linux 8 : nodejs:16 (ELSA-2022-6964)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6964 advisory. - Resolves: CVE-2022-35255 CVE-2022-35256 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : kvm_utils2 (ELSA-2022-9862)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9862 advisory. - A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated message...

Oracle Linux 8 : expat (ELSA-2022-6878)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6878 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested for this issue but has...

Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2022-6912)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6912 advisory. 3.1.424-1.0.1 - Add missing Oracle Linux Runtime IDs 3.1.424-1 - Update to .NET SDK 3.1.424 and Runtime 3.1.30 - Resolves: RHBZ2131728 Tenable has extracted the...

Oracle Linux 8 : prometheus-jmx-exporter (ELSA-2022-6820)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6820 advisory. 0.12.0-8 - Bump snakeyaml version to 1.32 to collect fix for CVE-2022-25857 BZ 2128477 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : kubernetes (ELSA-2022-9854)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9854 advisory. - Addresses CVE-2022-3172 olcne - Resolve Kubernetes CVE-2022-3172 for version 1.21 - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 - Adress...

Oracle Linux 8 : squid:4 (ELSA-2022-6775)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6775 advisory. libecap squid 7:4.15-3.1 - Resolves: 2100782 - CVE-2021-46784 squid:4/squid: DoS when processing gopher server responses Tenable has extracted the preceding...