The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0202 advisory.

    [11.0.18.0.10-2.0.1]
    - Replace upstream references [Orabug: 34340155]

    [1:11.0.18.0.10-2]
    - Update to jdk-11.0.18+10 (GA)
    - Update release notes to 11.0.18+10
    - Switch to GA mode for release
    - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
    - Related: rhbz#2157798

    [1:11.0.18.0.9-0.2.ea]
    - Update to jdk-11.0.18+9
    - Update release notes to 11.0.18+9
    - Drop local copy of JDK-8293834 now this is upstream
    - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
    - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
    - Resolves: rhbz#2157798

    [1:11.0.18.0.1-0.2.ea]
    - Update to jdk-11.0.18+1
    - Update release notes to 11.0.18+1
    - Switch to EA mode for 11.0.18 pre-release builds.
    - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
    - Drop local copy of JDK-8275535 which is finally upstream
    - Related: rhbz#2157798

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 9 : java-11-openjdk (ELSA-2023-0202)

low Nessus Plugin ID 170158

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Oct 22, 2024, 9:14 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410222114
Version 1.2 Sep 16, 2023, 2:14 AM Detection Plugin Feed: 202309160214
Version 1.1 Jan 20, 2023, 6:02 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202301201802
Version 1.0 Jan 19, 2023, 8:01 AM New Plugin Feed: 202301190801