Oracle Linux 8 : libtiff (ELSA-2025-19276)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19276 advisory. 4.0.9-35 - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented RHEL-112533 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : redis (ELSA-2025-19237)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19237 advisory. 6.2.20-1 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 Tenable has extracted the preceding description block...

Oracle Linux 7 : compat-libtiff3 (ELSA-2025-17710)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-17710 advisory. 3.9.4-12.0.1 - Fixes CVE-2025-9900 buffer underflow Orabug: 38523840 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : libtiff (ELSA-2025-19113)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19113 advisory. - fix CVE-2025-8176 off-by-one error skipping first line in tiffdither and tiffmedian - fix CVE-2025-9900 buffer underflow in TIFFReadRGBAImageOriente...

Oracle Linux 10 : libtiff (ELSA-2025-19156)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19156 advisory. 4.6.0-6.1 - Fix buffer underflow crash in TIFFReadRGBAImageOriented - Resolves: RHEL-112522 Tenable has extracted the preceding description block directly fro...

Oracle Linux 8 : squid:4 (ELSA-2025-19107)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19107 advisory. libecap squid 7:4.15-10.9 - Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling...

Oracle Linux 9 : kernel (ELSA-2025-19105)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19105 advisory. - pstore/ram: Check start of empty przs during init CKI Backport Bot RHEL-122067 CVE-2023-53331 - vsock/virtio: Validate length in packet header befor...

Oracle Linux 8 : kernel (ELSA-2025-19102)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19102 advisory. - Bluetooth: L2CAP: Fix user-after-free CKI Backport Bot RHEL-117369 CVE-2022-50386 - Bluetooth: Fix potential use-after-free when clear keys CKI...

kernel security update

5.14.0-570.58.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : kernel (ELSA-2025-19106)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19106 advisory. - ALSA: hda/ca0132: Fix buffer overflow in addtuningcontrol CKI Backport Bot RHEL-114853 CVE-2025-39751 - erofs: fix blksize PAGESIZE for file-backed...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20721)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20721 advisory. - nfsd: handle getclientlocked failure in nfsd4setclientidconfirm Jeff Layton Orabug: 38575798 CVE-2025-38724 Tenable has extracted the preceding...

kernel security update

4.18.0-553.81.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2025-18824)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18824 advisory. 1:21.0.9.0.10-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.9.0.10-1 - Update to jdk-21.0.9+10 GA - Update release notes to...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20719)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20719 advisory. - iouring/futex: ensure iofutexwait cleans up properly on failure Jens Axboe Orabug: 38572958 CVE-2025-39698 - fs: writeback: fix use-after-free ...

Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2025-18815)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18815 advisory. 1:1.8.0.472.b08-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.472.b08-1 - Update to 8u472-b08 GA. - Update release notes for 8u472-b0...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2025-18821)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18821 advisory. 1:17.0.17.0.10-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.17.0.10-1 - Update to jdk-17.0.17+10 GA - Add to .gitignore...

Oracle Linux 8 : thunderbird (ELSA-2025-18983)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-18983 advisory. 140.4.0-2.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.4.0 - Add OpenELA debranding 140.4.0-2 - Update to 140.4.0 ESR...

Oracle Linux 8 : libssh (ELSA-2025-18286)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-18286 advisory. 0.9.6-15 - Fix CVE-2025-5318 Resolves: RHEL-111724 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : microcode_ctl (ELSA-2025-10108)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10108 advisory. 2:2.1-73.24.0.20250512 - update microcode bundle to 20250512 Orabug: 38139038 2:2.1-73.23.0.20250211 - update microcode bundle to 20250211 Orabug: 37670820 -...

Oracle Linux 10 : thunderbird (ELSA-2025-18320)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-18320 advisory. 140.4.0-2.0.1 - Add Oracle prefs 140.4.0-2 - Update to 140.4.0 ESR Tenable has extracted the preceding description block directly from the Oracle Lin...