RockyLinux 9 : firefox (RLSA-2025:21280)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21280 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...

Oracle Linux 9 : redis:7 (ELSA-2025-20955)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20955 advisory. - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and...

Oracle Linux 9 : xorg-x11-server (ELSA-2025-20961)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20961 advisory. 1.20.11-32 - CVE fix for: CVE-2025-62229 RHEL-119960, CVE-2025-62230 RHEL-120033, CVE-2025-62231 RHEL-125002 Tenable has extracted the preceding...

Oracle Linux 9 : redis (ELSA-2025-20926)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20926 advisory. - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase t...

AlmaLinux 9 : kernel (ALSA-2025:21926)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:21926 advisory. kernel: mm: slub: avoid wake up kswapd in settrackprepare CVE-2025-39843 Tenable has extracted the preceding description block directly from the AlmaLinux securit...

AlmaLinux 9 : gimp (ALSA-2025:21968)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21968 advisory. gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-10922 gimp: GIMP ICNS File Parsing Out-Of-Bounds Writ...

AlmaLinux 9 : bind9.18 (ALSA-2025:21111)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21111 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 bind: Resource exhaustion via...

Oracle Linux 9 : kernel (ELSA-2025-22405)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-22405 advisory. - tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. Antoine Tenart RHEL-120668 CVE-2025-39955 - Bluetooth: MGMT: fix crash in setmeshsync and...

AlmaLinux 9 : tigervnc (ALSA-2025:20958)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20958 advisory. xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal...

Oracle Linux 9 : pcs (ELSA-2025-20962)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20962 advisory. - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945,...

Oracle Linux 9 : kernel (ELSA-2025-21926)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21926 advisory. - mm: slub: avoid wake up kswapd in settrackprepare Audra Mitchell RHEL-125521 CVE-2025-39843 - slub: Reflow slaballoc Audra Mitchell RHEL-125521 CVE-2025-3984...

AlmaLinux 9 : valkey (ALSA-2025:21916)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21916 advisory. redis: Lua library commands may lead to integer overflow and potential RCE CVE-2025-46817 Redis: Redis: Authenticated users can execute LUA scripts as a...

AlmaLinux 9 : openssl (ALSA-2025:21255)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:21255 advisory. openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap CVE-2025-9230 Tenable has extracted the preceding description block directly from the AlmaLinux securit...

RockyLinux 9 : sssd (RLSA-2025:20954)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20954 advisory. sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems CVE-2025-11561 Tenable has extracted the preceding description...

Oracle Linux 9 : firefox (ELSA-2025-21280)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21280 advisory. 140.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

RockyLinux 9 : expat (RLSA-2025:22175)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:22175 advisory. expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375 Tenable h...

Oracle Linux 9 : sqlite (ELSA-2025-20936)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20936 advisory. 3.34.1-9 - Fixes CVE-2025-6965 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

RockyLinux 9 : ipa (RLSA-2025:20928)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20928 advisory. FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA CVE-2025-7493 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : squid (ELSA-2025-20935)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-20935 advisory. - Resolves: RHEL-122492 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has...

Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2025-20960)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20960 advisory. 23.2.7-5 - CVE fix for: CVE-2025-62229 RHEL-119974, CVE-2025-62230 RHEL-120021, CVE-2025-62231 RHEL-125017 Tenable has extracted the preceding...