Oracle Linux 10 : ruby (ELSA-2025-23141)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23141 advisory. - Fix possible denial of service in resolv gem CVE-2025-24294 - Fix URI Credential Leakage Bypass previous fixes. CVE-2025-61594 Tenable has extracte...

Oracle Linux 10 : libsoup3 (ELSA-2025-23139)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-23139 advisory. 3.6.5-7 - Add patch for CVE-2025-12105 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 10 : tomcat9 (ELSA-2025-23052)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23052 advisory. - Resolves: RHEL-124497 tomcat: Directory traversal via rewrite with possible RCE CVE-2025-55752 Tenable has extracted the preceding description bloc...

Oracle Linux 10 : kea (ELSA-2025-21006)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21006 advisory. - Fixes CVE-2025-11232 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 10 : qt6-qtsvg (ELSA-2025-21037)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21037 advisory. 6.9.1-2.1 - Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation Resolves: RHEL-119699 Tenable has extracted the preceding description blo...

Oracle Linux 10 : kea (ELSA-2025-21038)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21038 advisory. - Fixes CVE-2025-11232 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 10 : libsoup3 (ELSA-2025-21032)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21032 advisory. 3.6.5-6 - Fix integer overflow in date/time parsing 3.6.5-5 - Bump revision number 3.6.5-4 - Fix several CVEs Tenable has extracted the preceding...

Oracle Linux 10 : java-25-openjdk (ELSA-2025-21485)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21485 advisory. 1:25.0.1.0.8-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.1.0.8-2 - Remove superfluous backslashes that cause two alternative commands t...

Oracle Linux 10 : valkey (ELSA-2025-21936)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21936 advisory. - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and...

Oracle Linux 10 : delve / and / golang (ELSA-2025-21816)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21816 advisory. delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update Delve to 1.25.2 1.24.1-3 - Update CI support golang 1.25.3-1 ...

Oracle Linux 10 : expat (ELSA-2025-21030)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21030 advisory. - Fix CVE-2025-59375 - backport allocation tracking improvements Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : qt6-qtsvg (ELSA-2025-22394)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-22394 advisory. - Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion guard to prevent stack overflow Resolves: RHEL-119719 Tenable has extracted the...

Oracle Linux 10 : python-kdcproxy (ELSA-2025-21142)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-21142 advisory. - Use DNS discovery for declared realms only CVE-2025-59088 Resolves: RHEL-122777 Tenable has extracted the preceding description block directly from...

Oracle Linux 10 : ELSA-2025-20181-0: / pam (ELSA-2025-201810)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-201810 advisory. 1.6.1-8 - pamnamespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-101174 Tenable has extracted the preceding description block...

Oracle Linux 10 : ELSA-2025-20478-0: / zziplib (ELSA-2025-204780)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-204780 advisory. 0.13.78-2 - Fix directory traversal in unzip binary - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github...

Oracle Linux 10 : ELSA-2025-20155-0: / binutils (ELSA-2025-201550)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-201550 advisory. - Remove workaround for CVE-2025-5702. RHEL-100159 - Add fix for CVE-2025-5244. RHEL-100417 - USe correct fix for CVE-2025-5702. RHEL-100159 Tenable has...

Oracle Linux 10 : valkey (ELSA-2025-19675)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19675 advisory. - Fix for CVE-2025-49844 Orabug: 38515582 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2025-19435)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19435 advisory. 24.1.5-5 - CVE fix for: CVE-2025-62229 RHEL-119964, CVE-2025-62230 RHEL-120013, CVE-2025-62231 RHEL-125006 Tenable has extracted the preceding...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20719)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20719 advisory. - iouring/futex: ensure iofutexwait cleans up properly on failure Jens Axboe Orabug: 38572958 CVE-2025-39698 - fs: writeback: fix use-after-free ...

Oracle Linux 10 : libssh (ELSA-2025-18231)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-18231 advisory. - Fix CVE-2025-5318 Resolves: RHEL-111720 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...