Oracle Linux 9 : .NET / 8.0 (ELSA-2025-7598)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7598 advisory. 8.0.116-1.0.1 - Add support for Oracle Linux 8.0.116-1 - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89448 Tenable has extracted the precedin...

Oracle Linux 9 : yelp (ELSA-2025-7430)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7430 advisory. 2:40.3-2.1 - Fix CVE-2025-3155 RHEL-85926 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 9 : python-requests (ELSA-2025-7049)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7049 advisory. 2.25.1-9 - Security fix for CVE-2024-35195 Resolves: RHEL-37609 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2025-7165)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7165 advisory. - CVE fix for: CVE-2025-26594 RHEL-80204, CVE-2025-26595 RHEL-80187, CVE-2025-26596 RHEL-80190, CVE-2025-26597 RHEL-80193, CVE-2025-26598 RHEL-80195,...

Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2025-7242)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7242 advisory. - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596,...

Oracle Linux 9 : microcode_ctl (ELSA-2025-7043)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7043 advisory. - Update Intel CPU microcode to microcode-20250211 release, addresses CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047, CVE-2024-28127,...

Oracle Linux 9 : krb5 (ELSA-2025-7067)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7067 advisory. - Prevent overflow when calculating ulog block size CVE-2025-24528 Resolves: RHEL-76759 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : osbuild-composer (ELSA-2025-7425)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7425 advisory. 132.2-1.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA...

Oracle Linux 9 : expat (ELSA-2025-7444)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7444 advisory. - Fix CVE-2024-8176 - Fix CVE-2024-50602 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 9 : vim (ELSA-2025-7440)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7440 advisory. 8.2.2637-22.0.1 - Remove upstream references Orabug: 31197557 2:8.2.2637-22 - RHEL-2159 vim: Heap Use After Free in function inscomplgetexp in vim/vim Tenable h...

Oracle Linux 9 : openssh (ELSA-2025-6993)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-6993 advisory. - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on...

Oracle Linux 9 : gstreamer1, / gstreamer1-plugins-bad-free, / gstreamer1-plugins-ugly-free, / and / gstreamer1-rtsp-server (ELSA-2025-7178)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7178 advisory. gstreamer1 1.22.12-3 - Rebuild - Resolves: RHEL-38511, RHEL-41157 1.22.12-2 - Rebuild - Resolves: RHEL-38511, RHEL-41157 1.22.12-1 - Update to 1.22.12...

Oracle Linux 9 : python3.12-cryptography (ELSA-2025-7317)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7317 advisory. - Security fix for CVE-2025-24898 in the bundled openssl crate Resolves: RHEL-77735 - Update to 41.0.7, fixes CVE-2023-49083 Tenable has extracted the preceding...

Oracle Linux 9 : git (ELSA-2025-7409)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7409 advisory. 2.47.1-2 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : xorg-x11-server (ELSA-2025-7163)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7163 advisory. - CVE fix for: CVE-2025-26594 RHEL-80201, CVE-2025-26595 RHEL-80186, CVE-2025-26596 RHEL-80188, CVE-2025-26597 RHEL-80191, CVE-2025-26598 RHEL-80192,...

Oracle Linux 9 : .NET / 9.0 (ELSA-2025-7600)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7600 advisory. 9.0.106-1.0.1 - Add support for Oracle Linux 9.0.106-1 - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89453 Tenable has extracted the preceding...

Oracle Linux 9 : 389-ds-base (ELSA-2025-7395)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7395 advisory. - Resolves: RHEL-83876 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service rhel-9.6 Tenable has extracted the preceding description...

Oracle Linux 9 : compat-openssl11 (ELSA-2025-7937)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7937 advisory. 1:1.1.1k-5.1 - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 1:1.1.1k-5 - Update expired certificates used in the...

Oracle Linux 9 : nodejs:20 (ELSA-2025-7426)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7426 advisory. nodejs 1:20.19.1-1 - Update to version 20.19.1 Resolves: RHEL-78764 1:20.18.2-3 - Update c-ares to 1.34.5 to address CVE-2025-31498 nodejs-nodemon...

Oracle Linux 9 : rpm-ostree (ELSA-2025-7147)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7147 advisory. 2025.5-1 - Rebase to 2025.5 Resolves: RHEL-78697 2025.4-1 - Rebase to 2025.4 Resolves: RHEL-68131 2025.3-1 - Rebase to 2025.3 Resolves: RHEL-68131 2025.2-1 -...