The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1846 advisory.

    bind-dyndb-ldap     [11.6-2]
    - Rebuild against bind 9.11.26
    - Resolves: rhbz#1904612

    [11.6-1]
    - New upstream release
    - Resolves: rhbz#1891735

    ipa     [4.9.2-3.0.1]
    - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

    [4.9.2-3]
    - ipa-client-install displays false message       'sudo binary does not seem to be present on this system'       Resolves: RHBZ#1939371

    [4.9.2-2]
    - Sync ipatests from upstream to RHEL packages for FreeIPA 4.9 branch       Resolves: RHBZ#1932289
    - Fix krb5kdc is crashing intermittently on IPA server       Resolves: RHBZ#1932784

    [4.9.2-1]
    - Upstream release FreeIPA 4.9.2       Related: RHBZ#1891832

    opendnssec     [2.1.7-1]
    - Upstream release 2.1.7
    - Resolves: rhbz#1904484

    softhsm     [2.6.0-5]
    - Install prever devel package requirements for new negative option patch       Related: RHBZ#1857272

    [2.6.0-4]
    - Fixes: rhbz#1857272 - negative option for token.mechanism not working correctly

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : idm:DL1 / and / idm:client (ELSA-2021-1846)

medium Nessus Plugin ID 155348

Version 1.9