Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20716)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20716 advisory. - afunix: Don't leave consecutive consumed OOB skbs. Kuniyuki Iwashima Orabug: 38528187 CVE-2025-38236 - fs: writeback: fix use-after-free in...

PT-2025-42172

🚨 CVE-2025-17742: Vim vulnerability in Oracle Linux 9 allows arbitrary code execution. Patch now! Read more: 👉 https://t.co/jdNZhEl52b Security https://t.co/p6FT2u2CmI...

Oracle Linux 10 : kernel (ELSA-2025-17776)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17776 advisory. 6.12.0-55.39.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-17802)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17802 advisory. 2.50.0-1 - Update to 2.50.0 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

kernel security update

4.18.0-553.79.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security update

5.14.0-570.52.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20663)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20663 advisory. - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro Orabug: 38310007 CVE-2025-38499 - HID: hid-ntrig: fix unable ...

Oracle Linux 9 : vim (ELSA-2025-17742)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17742 advisory. - RHEL-112006 CVE-2025-53905 vim: Vim path traversial - RHEL-112010 CVE-2025-53906 vim: Vim path traversal Tenable has extracted the preceding...

Oracle Linux 8 : gnutls (ELSA-2025-17415)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17415 advisory. - Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 8 : vim (ELSA-2025-17715)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17715 advisory. - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - CVE-2022-1785 vim: Out-of-bounds Write -...

CLSA-2025-1760022881 Update of vim

version sync with OracleLinux version 7.4.629-8.0.1...

Oracle Linux 8 : compat-libtiff3 (ELSA-2025-17675)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-17675 advisory. 3.9.4-14 - fix CVE-2025-9900: Write-What-Where via TIFFReadRGBAImageOriented RHEL-112528 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : udisks2 (ELSA-2025-16130)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-16130 advisory. 2.8.4-1.0.1 - Fix index underflow in LoopSetup CVE-2025-8067 Orabug: 38444282 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : redis (ELSA-2025-20656)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20656 advisory. 6.2.9-1.0.2 - Fix for CVE-2025-49844 Orabug: 38515582 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : kernel (ELSA-2025-17397)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17397 advisory. - smb: client: fix use-after-free in cifsoplockbreak Paulo Alcantara RHEL-111190 CVE-2025-38527 Tenable has extracted the preceding description block...

Oracle Linux 10 : kernel (ELSA-2025-17396)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17396 advisory. 6.12.0-55.38.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 8 : open-vm-tools (ELSA-2025-17509)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-17509 advisory. - Resolves: RHEL-117388 CISA Major Incident CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools rhel-8.10.z Tenable has extracted the...

Oracle Linux 9 : iputils (ELSA-2025-17558)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-17558 advisory. - Fix CVE-2025-48964 iputils: iputils integer overflow RHEL-112001 - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils...

Oracle Linux 9 : redis (ELSA-2025-20654)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20654 advisory. 7.2.10-1.0.2 - Fix for CVE-2025-49844 Orabug: 38515582 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : valkey (ELSA-2025-20653)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20653 advisory. 8.0.4-1.0.1 - Fix for CVE-2025-49844 Orabug: 38515582 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...