Oracle Linux 10 : gvisor-tap-vsock (ELSA-2025-9151)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9151 advisory. - Rebuild on new golang to fix CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : libvpx (ELSA-2025-9120)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9120 advisory. 1.14.1-3 - Add patch for double free Resolves: RHEL-93905 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 10 : libarchive (ELSA-2025-7510)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7510 advisory. - Fix for CVE-2024-57970 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Oracle Linux 10 : expat (ELSA-2025-7512)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7512 advisory. - Fix behavior change caused by fix for CVE-2024-8176 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : git (ELSA-2025-7482)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7482 advisory. 2.47.1-2 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 Tenable has extracted the preceding description block directly from the...

Oracle Linux 10 : varnish (ELSA-2025-8550)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8550 advisory. 7.6.1-2.el100.1 - Resolves: RHEL-89691 - varnish: request smuggling attacks CVE-2025-47905 Tenable has extracted the preceding description block directly from...

Oracle Linux 10 : libblockdev (ELSA-2025-9328)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9328 advisory. 3.2.0-4.0.1 - enable btrfs support Orabug: 30792917 3.2.0-4 - Don't allow suid and dev set on fs resize - CVE-2025-6019 Tenable has extracted the preceding...

Oracle Linux 10 : nodejs22 (ELSA-2025-8493)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8493 advisory. - Update c-ares with fix for CVE-2025-31498 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 10 : libsoup3 (ELSA-2025-8128)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8128 advisory. - Fix CVE-2025-4035, CVE-2025-4948, CVE-2025-32049, CVE-2025-32907 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 10 : firefox (ELSA-2025-8341)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8341 advisory. 128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

Oracle Linux 10 : ipa (ELSA-2025-9190)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9190 advisory. - Resolves: RHEL-89908 EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA Tenable has extracted the preceding description...

Oracle Linux 10 : sqlite (ELSA-2025-7517)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7517 advisory. - Fix for CVE-2025-3277 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 10 : valkey (ELSA-2025-7509)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7509 advisory. 8.0.3.1 - rebase to 8.0.3 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not test...

Oracle Linux 10 : xz (ELSA-2025-7524)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7524 advisory. - Fix: heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : python-tornado (ELSA-2025-8135)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-8135 advisory. 6.4.2-1.el100.1 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91992 Tenable has extracted the preceding description...

Oracle Linux 10 : perl (ELSA-2025-7500)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7500 advisory. 4:5.40.2-512.1 - 5.40.2 bump see - Resolves: RHEL-87186 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RHEL 10 : kernel (RHSA-2025:8669)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8669 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/virtio: discard packets...

Oracle Linux 10 : Unbreakable Enterprise kernel (ELSA-2025-20371)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20371 advisory. 6.12.0-100.28.2.el10uek - sched/eevdf: Fix se-slice being set to U64MAX and resulting crash Omar Sandoval - certs: Add new Oracle Linux Driver Signing key 1...

Oracle Linux 10 : git-lfs (ELSA-2025-9063)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9063 advisory. 3.6.1-2 - Rebuild with new Golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

RHEL 10 : libblockdev (RHSA-2025:9328)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9328 advisory. The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves a...