The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-1879 advisory.

    [17.0.7.0.7-1.0.1]
    - Replace upstream references [Orabug: 34340155]

    [1:17.0.7.0.7-1]
    - Update to jdk-17.0.7.0+7
    - Update release notes to 17.0.7.0+7
    - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
    - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
    - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
    - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
    - Update FIPS support against 17.0.7+6 and bring in latest changes:
    - * RH2134669: Add missing attributes when registering services in FIPS mode.
    - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
    - * RH1940064: Enable XML Signature provider in FIPS mode
    - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
    - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
    - Resolves: rhbz#2185182
    - Resolves: rhbz#2186804
    - Resolves: rhbz#2186811
    - Resolves: rhbz#2186807

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 9 : java-17-openjdk (ELSA-2023-1879)

high Nessus Plugin ID 174501

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Oct 22, 2024, 9:14 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410222114
Version 1.1 Sep 18, 2023, 10:10 PM Detection Plugin Feed: 202309182210
Version 1.0 Apr 20, 2023, 8:08 AM New Plugin Feed: 202304200808