Oracle Linux 9 : tigervnc (ELSA-2025-9306)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9306 advisory. - Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97305 - Fix CVE-2025-49175:...

Oracle Linux 9 : pam (ELSA-2025-9526)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9526 advisory. 1.5.1-25.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36406534 1.5.1-25 - pamnamespace: fix potential privilege escalation. Resolves:...

Oracle Linux 9 : libarchive (ELSA-2025-9431)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9431 advisory. 3.5.3-5 - Resolves: CVE-2025-25724 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 9 : qt5-qtbase (ELSA-2025-9462)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9462 advisory. 5.15.9-11 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96233 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : mod_auth_openidc (ELSA-2025-9396)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9396 advisory. 2.4.10-1.el96.2 Resolves: RHEL-95948 - modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled CVE-2025-3891 Tenable has extracted th...

Oracle Linux 9 : perl-File-Find-Rule (ELSA-2025-9517)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9517 advisory. - Use 3 arg open in grep CVE-2011-10007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Oracle Linux 9 : apache-commons-beanutils (ELSA-2025-9114)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9114 advisory. Fri Jun 13 2025 Mikolaj Izdebski - Fix improper access control vulnerability - Resolves: CVE-2025-48734 Tenable has extracted the preceding description block...

Oracle Linux 9 : skopeo (ELSA-2025-9145)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9145 advisory. - rebuild to fix CVE-2025-22871 skopeo: Request smuggling due to acceptance of invalid chunked data in net/http Tenable has extracted the preceding description...

Oracle Linux 9 : gvisor-tap-vsock (ELSA-2025-9150)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9150 advisory. - rebuild for CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : kernel (ELSA-2025-9080)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9080 advisory. - Bluetooth: L2CAP: Fix corrupted list in hcichandel David Marlin RHEL-87890 CVE-2025-21969 - Bluetooth: L2CAP: Fix slab-use-after-free Read in...

Oracle Linux 9 : buildah (ELSA-2025-9147)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9147 advisory. - rebuild to fix CVE-2025-22871 buildah: Request smuggling due to acceptance of invalid chunked data in net/http Tenable has extracted the preceding description...

Oracle Linux 9 : podman (ELSA-2025-9144)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9144 advisory. - rebuild to fix CVE-2025-22871 podman: Request smuggling due to acceptance of invalid chunked data in net/http Tenable has extracted the preceding description...

Oracle Linux 9 : git-lfs (ELSA-2025-9106)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9106 advisory. 3.6.1-2 - Rebuild with new Golang - Resolves: RHEL-89304 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : grafana-pcp (ELSA-2025-8916)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-8916 advisory. 5.1.1-11 - Resolves RHEL-89314: CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : .NET / 8.0 (ELSA-2025-8813)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8813 advisory. 8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94420 Tenable has extracted the precedin...

Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2025-20368)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20368 advisory. - selftest/x86/bugs: Add selftests for ITS Pawan Gupta Orabug: 37945459 CVE-2024-28956 - x86/its: Align RETs in BHB clear sequence to avoid thunking Pawan Gupt...

Oracle Linux 9 : glibc (ELSA-2025-8655)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8655 advisory. 2.34-168.0.1.19 - Forward-port Oracle patches for ol9-u6 Reviewed-by: David Faust Oracle history: Tenable has extracted the preceding description block directly...

Oracle Linux 9 : thunderbird (ELSA-2025-8607)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8607 advisory. 128.11.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.11.0 - Add OpenELA debranding 128.11.0-1 - Update to 128.11.0 Tenable ha...

Oracle Linux 9 : nodejs:22 (ELSA-2025-8467)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8467 advisory. nodejs 1:22.16.0-1 - Update to 22.16.0 Resolves: RHEL-89600 RHEL-92872 RHEL-92420 Tenable has extracted the preceding description block directly from the Oracle...