The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0535 advisory.

    clutter     [1.14.4-12]
    - Include upstream patch to prevent a crash when hitting hardware limits       Resolves: rhbz#1115162

    [1.14.4-11]
    - Fix a typo in the Requires

    [1.14.4-10]
    - Add patch for quadbuffer stereo suppport       Resolves: rhbz#1108891

    cogl     [1.14.1-6]
    - Add patches for quadbuffer stereo suppport       Resolves: rhbz#1108890

    [1.14.0-5.2]
    - Ensure the glBlitFramebuffer case is not hit for swrast, since that's       still broken.

    gnome-shell     [3.8.4-45]
    - Don't inform GDM about session changes that came from GDM       Resolves: #1163474

    [3.8.4-44]
    - If password authentication is disabled and smartcard authentication is       enabled and smartcard isn't plugged in at start up, prompt user for       smartcard       Resolves: #1159385

    [3.8.4-43]
    - Support long login banner messages more effectively       Resolves: #1110036

    [3.8.4-42]
    - Respect disk-writes lockdown setting       Resolves: rhbz#1154122

    [3.8.4-41]
    - Disallow consecutive screenshot requests to avoid an OOM situation       Resolves: rhbz#1154107

    [3.8.4-41]
    - Add option to limit app switcher to current workspace       Resolves: rhbz#1101568

    [3.8.4-40]
    - Try harder to use the default calendar application       Resolves: rhbz#1052201

    [3.8.4-40]
    - Update workspace switcher fix       Resolves: rhbz#1092102

    [3.8.4-39]
    - Validate screenshot parameters       Resolves: rhbz#1104694

    [3.8.4-38]
    - Fix shrinking workspace switcher       Resolves: rhbz#1092102

    [3.8.4-38]
    - Update fix for vertical monitor layouts to upstream fix       Resolves: rhbz#1075240

    [3.8.4-38]
    - Fix traceback introduced in 3.8.4-36 when unlocking via       user switcher       Related: #1101333

    [3.8.4-37]
    - Fix problems with LDAP and disable-user-list=TRUE       Resolves: rhbz#1137041

    [3.8.4-36]
    - Fix login screen focus issue following idle       Resolves: rhbz#1101333

    [3.8.4-35]
    - Disallow cancel from login screen before login attempt       has been initiated.
      Resolves: rhbz#1109530

    [3.8.4-34]
    - Disallow cancel from login screen after login is already       commencing.
      Resolves: rhbz#1079294

    [3.8.4-33]
    - Add a patch for quadbuffer stereo suppport       Resolves: rhbz#1108893

    mutter     [3.8.4.16]
    - Fix window placement regression       Resolves: rhbz#1153641

    [3.8.4-15]
    - Fix delayed mouse mode       Resolves: rhbz#1149585

    [3.8.4-14]
    - Preserve window placement on monitor changes       Resolves: rhbz#1126754

    [3.8.4-13]
    - Improve handling of vertical monitor layouts       Resolves: rhbz#1108322

    [3.8.4-13]
    - Add patches for quadbuffer stereo suppport       Fix a bad performance problem drawing window thumbnails       Resolves: rhbz#861507

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : GNOME / Shell (ELSA-2015-0535)

medium Nessus Plugin ID 81807

Version 1.11

Version 1.10

Version 1.11 Nov 1, 2024, 11:44 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202411012344
Version 1.10 Oct 23, 2024, 3:47 PM CVSS metrics ("CVSSv3 score" set to 6.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2014-7300") CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410231547