Oracle Linux 8 : linux-firmware (ELSA-2023-7109)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7109 advisory. 20230516-999.27.git6c9e0ed5.el8 - Update firmware for qat4xxx devices Orabug: 35811008 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : python-pip (ELSA-2023-7176)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7176 advisory. 9.0.3-23 - Use tarfile.datafilter for extracting CVE-2007-4559, PEP-721, PEP-706 Resolves: RHBZ2218241 Tenable has extracted the preceding description block...

Oracle Linux 8 : libpq (ELSA-2023-7016)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7016 advisory. 13.11-1 - Rebase to 13.11 Resolves: 2171369 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : opensc (ELSA-2023-7160)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7160 advisory. - Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardoshaveverifyrcpackage 2211093 Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : ghostscript (ELSA-2023-7053)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7053 advisory. - fix for CVE-2023-4042 - fix for CVE-2023-38559 - fix for CVE-2023-28879 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 8 : librabbitmq (ELSA-2023-7150)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7150 advisory. 0.9.0-4 - Resolves: 2215765, insecure credentials submission Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : libX11 (ELSA-2023-7029)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7029 advisory. 1.6.8-6 - CVE fix for: CVE-2023-3138 Resolve: rhbz2213762 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : java-21-openjdk (ELSA-2023-6887)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6887 advisory. 1:21.0.1.0.12-2.0.1 - Add Oracle vendor bug URL 1:21.0.1.0.12-2 - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable...

Oracle Linux 8 : flatpak (ELSA-2023-7038)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7038 advisory. 1.10.8-1 - Rebase to 1.10.8 2222103 - Fix CVE-2023-28100 and CVE-2023-28101 2180311 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : shadow-utils (ELSA-2023-7112)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7112 advisory. 2:4.6-19 - gpasswd: fix password leak. Resolves: 2215947 2:4.6-18 - Update patch to close label to reset libselinux state. Resolves: 1984740 - useradd: check if...

Oracle Linux 8 : cloud-init (ELSA-2023-6943)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6943 advisory. - Resolves: bz2190081 CVE-2023-1786 cloud-init: sensitive data could be exposed in logs rhel-8 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2023-6917)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6917 advisory. 21.1.3-12 - Backport fix for a deadlock with DRI3 Resolves: rhbz2212831 21.1.3-11 - Fix CVE-2023-1393 2180298 Tenable has extracted the preceding description...

Oracle Linux 8 : libreoffice (ELSA-2023-6933)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6933 advisory. - Resolves: rhbz2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz2210195 CVE-2023-2255 libreoffice: Remote documents...

Oracle Linux 8 : xorg-x11-server (ELSA-2023-6916)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6916 advisory. 1.20.11-17 - Backport fix for a deadlock with DRI3 Resolves: rhbz2192556 1.20.11-16 - CVE fix for: CVE-2023-1393 Resolves: rhbz2180296 Tenable has extracted the...

Oracle Linux 8 : python3.11-pip (ELSA-2023-6914)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6914 advisory. - Use tarfile.datafilter for extracting CVE-2007-4559, PEP-721, PEP-706 Resolves: RHBZ2218249 Tenable has extracted the preceding description block directly fro...

Oracle Linux 8 : tang (ELSA-2023-7022)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7022 advisory. 7-8 - Set correct user/group tang/tang in tangd-keygen Resolves: rhbz2188743 7-7 - Fix race condition when creating/rotating keys Resolves: rhbz2182410 Resolves...

Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2023-6940)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6940 advisory. - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz2223308...

Oracle Linux 8 : libmicrohttpd (ELSA-2023-7090)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7090 advisory. 1:0.9.59-3 - Add cve-2023-27371.patch Related: rhbz2174639 CVE-2023-27371 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : sysstat (ELSA-2023-7010)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7010 advisory. - fix the arithmetic overflow in allocatestructures that is still possible on some 32 bit systems CVE-2023-33204 Tenable has extracted the preceding description...

Oracle Linux 8 : container-tools:4.0 (ELSA-2023-6938)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6938 advisory. - rebuild for CVE-2023-29406 - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723...