RHEL 8 / 9 : Red Hat Ceph Storage 6.1 update (Important) (RHSA-2025:4238)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4238 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage...

AlmaLinux 8 : firefox (ALSA-2025:8060)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:8060 advisory. firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919 Tenable...

RHEL 8 : kernel (RHSA-2025:8056)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8056 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/mlx5: Always stop health...

RHEL 8 : osbuild-composer (RHSA-2025:8075)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8075 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for...

AlmaLinux 8 : osbuild-composer (ALSA-2025:7967)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7967 advisory. golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing CVE-2025-30204 Tenable has extracted the preceding description block directly from...

AlmaLinux 8 : compat-openssl10 (ALSA-2025:7895)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:7895 advisory. openssl: X.400 address type confusion in X.509 GeneralName CVE-2023-0286 Tenable has extracted the preceding description block directly from the AlmaLinux security...

Scope 3, Category 8: What Akamai Is Doing for Customer Reporting

...

Scope 3, Category 8: What Akamai Is Doing for Customer Reporting

...

Oracle Linux 8 : compat-openssl10 (ELSA-2025-7895)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7895 advisory. 1.1.0.2o-4.1 - Fix CVE-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-9699 Tenable has extracted the preceding description block...

Oracle Linux 8 : redis:6 (ELSA-2025-7686)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7686 advisory. 6.2.18-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.18-1 - rebase to 6.2.18 for CVE-2025-21605 Tenable has extracted the...

Oracle Linux 8 : grafana (ELSA-2025-7894)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7894 advisory. 9.2.10-23 - Resolves RHEL-89949: CVE-2025-4123 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RHEL 8 : osbuild-composer (RHSA-2025:7967)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7967 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for...

Oracle Linux 8 : ruby:2.5 (ELSA-2025-7539)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7539 advisory. - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 rubygem-abrt rubygem-bson rubygem-bundler Tenable ha...

Oracle Linux 8 : .NET / 8.0 (ELSA-2025-7589)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7589 advisory. 8.0.116-1.0.1 - Add support for Oracle Linux 8.0.116-1 - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89446 Tenable has extracted the precedin...

AlmaLinux 8 : .NET 9.0 (ALSA-2025:7571)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7571 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the AlmaLinux security...

AlmaLinux 8 : .NET 8.0 (ALSA-2025:2670)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:2670 advisory. dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method CVE-2025-24070 Bug Fixes and Enhancements: dotnet: Privilege Escalation...

Oracle Linux 8 : kernel (ELSA-2025-7531)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7531 advisory. - netfilter: ipset: add missing range check in bitmapipuadt Florian Westphal RHEL-70268 CVE-2024-53141 Tenable has extracted the preceding description...

AlmaLinux 8 : yelp and yelp-xsl (ALSA-2025:7569)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7569 advisory. yelp: Arbitrary file read CVE-2025-3155 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that Nessus has n...

Oracle Linux 8 : .NET / 9.0 (ELSA-2025-7571)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7571 advisory. 9.0.106-1.0.1 - Add support for Oracle Linux 9.0.106-1 - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89451 9.0.105-2 - Update to .NET SDK...

AlmaLinux 8 : kernel-rt (ALSA-2025:7532)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7532 advisory. kernel: hwmon: coretemp fix pci device refcount leak in nv1aramnew CVE-2022-49011 kernel: netfilter: ipset: add missing range check in bitmapipuadt...