Oracle Linux 8 : kernel (ELSA-2023-7549)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7549 advisory. - media: dvb-core: Fix use-after-free due to race at dvbregisterdevice Mauro Carvalho Chehab CVE-2022-45884 - cifs: Fix UAF in cifsdemultiplexthread...

Oracle Linux 8 : postgresql:13 (ELSA-2023-7581)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7581 advisory. - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : thunderbird (ELSA-2023-7500)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-7500 advisory. 115.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 115.5.0-1 - Update to 115.5.0 build1 Tenable has...

Oracle Linux 8 : firefox (ELSA-2023-7508)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-7508 advisory. 115.5.0-1.0.1 - Update to 115.5.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file Tenable has extracted the...

Oracle Linux 8 : samba (ELSA-2023-7467)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7467 advisory. - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files Tenab...

Oracle Linux 8 : dotnet6.0 (ELSA-2023-7258)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7258 advisory. 6.0.125-1.0.2 - Add strict BuildRequires on 6.0.125-1.0.1 6.0.125-1.0.1 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 Tenable has extracted the...

Oracle Linux 8 : c-ares (ELSA-2023-7207)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7207 advisory. 1.13.0-9.1 - Resolves: RHEL-11931 - Buffer Underwrite in aresinetnetpton rhel-8.9.0.z 1.13.0-9 - Resolves: rhbz2238293 - CVE-2020-22217 c-ares:...

Oracle Linux 8 : container-tools:4.0 (ELSA-2023-7202)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7202 advisory. - rebuild for CVE-2023-29406 - rebuild for CVE-2023-29406 - rebuild because of CVE-2023-29406 Tenable has extracted the preceding description block directly fro...

Oracle Linux 8 : nodejs:20 (ELSA-2023-7205)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7205 advisory. - Fixes CVE-2023-44487 nghttp Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-13005)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-13005 advisory. - Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition Zheng Wang CVE-2023-1989 Tenable has extracted the preceding description bloc...

Oracle Linux 8 : squid:4 (ELSA-2023-7213)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7213 advisory. libecap squid 7:4.15-7.1 - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14776 - squid: squid:...

Oracle Linux 8 : dotnet7.0 (ELSA-2023-7256)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7256 advisory. 7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : open-vm-tools (ELSA-2023-7265)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7265 advisory. - Fix CVE-2023-34058 open-vm-tools: SAML token signature bypass Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : c-ares (ELSA-2023-7116)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7116 advisory. - Resolves: rhbz2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service rhel-8.9.0 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : libfastjson (ELSA-2023-6976)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6976 advisory. 0.99.9-2 - Address CVE-2020-12762 Resolves: rhbz2203171 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : tpm2-tss (ELSA-2023-7166)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7166 advisory. 2.3.2-5 - Ensure layer number is in bounds Resolves: rhbz2160302 Resolves: rhbz2162611 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : fwupd (ELSA-2023-7189)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7189 advisory. 1.7.8-2.0.1 - Modify %prep to correctly apply downstream patches - Align sections to 512 bytes Orabug: 35265981 - Use objcopy to build arm/aarch64 binaries if...

Oracle Linux 8 : emacs (ELSA-2023-7083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7083 advisory. 1:26.1-11 - Bump version Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 8 : bind (ELSA-2023-7177)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7177 advisory. - Prevent exahustion of memory from control channel CVE-2023-3341 - Prevent the cache going over the configured limit CVE-2023-2828 - Prevent flooding with UPDA...

Oracle Linux 8 : perl-HTTP-Tiny (ELSA-2023-7174)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7174 advisory. - Changes the verifySSL default parameter from 0 to 1 - CVE-2023-31486 Tenable has extracted the preceding description block directly from the Oracle Linux...