The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2357 advisory.

    [3.2.0-1]
    - Update to 3.2.0
    - Resolves: #2139383

    [2.13.3-4]
    - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags       Related: rhbz#1991688

    [2.13.3-3]
    - Rebuilt for RHEL 9 BETA for openssl 3.0       Related: rhbz#1971065

    [2.13.3-2]
    - Fixed name of source tarball
    - Fixed date in the latest changelog entry
    - Related: #1952517

    [2.13.3-1]
    - Update to latest version
    - Resolves: #1952517

    [2.13.0-2]
    - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

    [2.13.0-1]
    - Enable bundling
    - Update to latest version

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 9 : git-lfs (ELSA-2023-2357)

high Nessus Plugin ID 175715

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Oct 22, 2024, 6:42 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410221842
Version 1.1 May 23, 2023, 10:07 AM IAVM reference Plugin Feed: 202305231007
Version 1.0 May 16, 2023, 2:02 AM New Plugin Feed: 202305160202