Oracle Linux 9 : ipa (ELSA-2025-17084)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-17084 advisory. - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA Tenable has extracted the preceding description...

Oracle Linux 9 : python3.12-cryptography (ELSA-2025-15608)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-15608 advisory. 41.0.7-2.1 - Security fix for CVE-2024-26130 Resolves: RHEL-112483 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

AlmaLinux 9 : python3.12-cryptography (ALSA-2025:15608)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:15608 advisory. python-cryptography: NULL pointer dereference with pkcs12.serializekeyandcertificates when called with a non-matching certificate and private key and an hmachash...

Oracle Linux 9 : udisks2 (ELSA-2025-15018)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15018 advisory. - udiskslinuxmanager: Add lower bounds check to fdindex CVE-2025-8067 RHEL-109417 Tenable has extracted the preceding description block directly from the Oracl...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Oracle Linux 9 : python3.11-setuptools (ELSA-2025-13578)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-13578 advisory. 65.5.1-4 - Security fix for CVE-2025-47273 Resolves: RHEL-101113 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : gdk-pixbuf2 (ELSA-2025-12841)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12841 advisory. - Backport fixes for CVE-2025-7345 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

RHEL 9 : kernel (RHSA-2025:13135)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:13135 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: powerpc: Fix access beyond en...

Oracle Linux 9 : python3.12-setuptools (ELSA-2025-12834)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12834 advisory. 68.2.2-5 - Security fix for CVE-2025-47273 Resolves: RHEL-101118 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : mod_ (ELSA-2025-12838)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12838 advisory. 2.9.6-2.1 - Resolves: RHEL-100102 - CVE-2025-48866 modsecurity: ModSecurity Denial of Service Vulnerability Tenable has extracted the preceding description blo...

Oracle Linux 9 : python-requests (ELSA-2025-12519)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12519 advisory. 2.25.1-10 - Security fix for CVE-2024-47081 Resolves: RHEL-105461 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : jackson-annotations, / jackson-core, / jackson-databind, / jackson-jaxrs-providers, / and / jackson-modules-base (ELSA-2025-12280)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12280 advisory. jackson-annotations 2.19.1-1 - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-core 2.19.1-1 - Update to version 2.19.1 - Resolves: RHEL-103636...

Oracle Linux 9 : libxml2 (ELSA-2025-12447)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12447 advisory. 2.9.13-11 - Fix CVE-2025-7425 RHEL-102806 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2025-10873)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10873 advisory. 1:21.0.8.0.9-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.8.0.9-1.1 - Update to jdk-21.0.8+9 GA - Update release notes to 21.0.8...

Oracle Linux 9 : icu (ELSA-2025-12083)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12083 advisory. 67.1-10 - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : thunderbird (ELSA-2025-12187)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-12187 advisory. 128.13.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.13.0 - Add OpenELA debranding 128.13.0-3 - Update to 128.13.0 build3...

Oracle Linux 9 : libtpms (ELSA-2025-12100)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-12100 advisory. 0.9.1-5.20211126git1ff6fe1f43 - Fix CVE-2025-49133 Resolves: RHEL-96258 Tenable has extracted the preceding description block directly from the Oracle Linux...

qemu-kvm security update

An update is available for qemu-kvm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linux...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

php:8.3 security update

An update is available for php-pecl-zip, module.php-pecl-apcu, php-pecl-xdebug3, module.php, php-pecl-redis6, module.php-pecl-xdebug3, php-pecl-rrd, php, module.php-pecl-zip, php-pecl-apcu, module.php-pecl-redis6, module.php-pecl-rrd. This update affects Rocky Linux 9. A Common Vulnerability...