Oracle Linux 8 : resource-agents (ELSA-2026-1241)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-1241 advisory. - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139760, RHEL-140787 - bundled urllib3: fix CVE-2025-66418...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2026-0921)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0921 advisory. delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update to Delve 1.25.2 Sync from CentOS Stream 9 - Related: RHEL-12122...

Oracle Linux 8 : gnupg2 (ELSA-2026-0728)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0728 advisory. 2.2.20-4 - Fix CVE-2025-68973 gpg.fail/memcpy Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : libpq (ELSA-2026-0695)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0695 advisory. 13.23-1 - Rebase to upstream release 13.23 - Resolves: RHEL-131269 CVE-2025-12818 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : vsftpd (ELSA-2026-0608)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-0608 advisory. - Fix CVE-2025-14242 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 8 : cups (ELSA-2026-0596)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0596 advisory. - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack Tenable has extracted the preceding description block...

Oracle Linux 8 : postgresql:13 (ELSA-2026-0523)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0523 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 13.23-1 - Update to 13.23 - Resolves: RHEL-128818 CVE-2025-12818 Tenable has extracted the preceding...

Oracle Linux 8 : postgresql:16 (ELSA-2026-0519)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0519 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 16.11-1 - Update to 16.11 - Resolves: RHEL-128820 CVE-2025-12818 Tenable has extracted the preceding...

Oracle Linux 8 : mariadb:10.5 (ELSA-2026-0233)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0233 advisory. galera Judy mariadb 3:10.5.29-3 - Release bump for rebuild Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 8 : libpng (ELSA-2026-0241)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0241 advisory. - CVE-2025-64720: buffer overflow RHEL-131452 - CVE-2025-65018: heap buffer overflow RHEL-131465 - CVE-2025-66293: out-of-bounds read in...

Oracle Linux 8 : mingw-libpng (ELSA-2026-0125)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0125 advisory. - Fix the following CVEs CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : httpd:2.4 (ELSA-2025-23732)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23732 advisory. - Resolves: RHEL-135054 - httpd: Apache HTTP Server: moduserdir+suexec bypass via AllowOverride FileInfo CVE-2025-66200 - Resolves: RHEL-135039 - http...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-28068)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-28068 advisory. - fs/proc: fix uaf in procreaddirde Wei Yang Orabug: 38786776 CVE-2025-40271 - NFSD: Define a proclayoutcommit for the FlexFiles layout type Chuck Lever...

Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-23374)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-23374 advisory. - rebuild for CVE-2025-58183 - rebuild for CVE-2025-58183 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 8 : glibc (ELSA-2025-28054)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-28054 advisory. - CVE-2025-8058: Double free in regcomp RHEL-105326 - CVE-2025-4802: static setuid dlopen may search LDLIBRARYPATH RHEL-92685 Tenable has extracted the precedi...

Oracle Linux 8 : tomcat (ELSA-2025-23048)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23048 advisory. - Resolves: RHEL-124507 tomcat: Directory traversal via rewrite with possible RCE CVE-2025-55752 Tenable has extracted the preceding description block...

Oracle Linux 8 : luksmeta (ELSA-2025-23086)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-23086 advisory. 9-4.1 - Fix handling of large metadata Resolves: RHEL-122138 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : go-toolset:rhel8 (ELSA-2025-22668)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-22668 advisory. delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update to Delve 1.25.2 Sync from CentOS Stream 9 - Related:...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-22789)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-22789 advisory. 2.50.3-1 - Update to 2.50.3 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : firefox (ELSA-2025-22363)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-22363 advisory. 140.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.5.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...