Oracle Linux 9 : firefox (ELSA-2025-2359)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2359 advisory. 128.8.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : webkit2gtk3 (ELSA-2025-2035)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2035 advisory. 2.46.6-1 - Update to 2.46.6 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-2034)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2034 advisory. 2.46.6-1 - Update to 2.46.6 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 7 : doxygen (ELSA-2025-1255)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1255 advisory. 1:1.8.5-4.0.1 - Fix CVE-2020-11022 and CVE-2022-11023 in vendored jQuery Orabug: 37577394 Tenable has extracted the preceding description block directly from th...

Oracle Linux 9 : kernel (ELSA-2025-1659)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1659 advisory. - media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CKI Backport Bot RHEL-78075 CVE-2024-53104 - mm: migrate: fix getting incorrect...

Oracle Linux 9 : emacs (ELSA-2025-1915)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1915 advisory. 1:27.2-11.1 - Eliminate use of obsolete patch syntax RHEL-80443 1:27.2-11 - Fix man.el shell injection vulnerability RHEL-79025 Tenable has extracted the...

kernel security update

5.14.0-503.26.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 8 : emacs (ELSA-2025-1917)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1917 advisory. 1:26.1-13 - Fix man.el shell injection vulnerability RHEL-79016 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : postgresql:16 (ELSA-2025-1740)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1740 advisory. pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pgrepack 1.5.1-1 - Update to 1.5.1...

Oracle Linux 9 : bind9.18 (ELSA-2025-1670)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1670 advisory. - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion Tenable has extracted the preceding description block...

Oracle Linux 9 : bind (ELSA-2025-1681)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1681 advisory. 32:9.16.23-24.0.1.el95.3 - Fix bind: bind9: Many records in the additional section cause CPU exhaustion CVE-2024-11187 Tenable has extracted the preceding...

Oracle Linux 8 : libpq (ELSA-2025-1737)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1737 advisory. 13.20-1 - Update to 13.20 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Oracle Linux 9 : libpq (ELSA-2025-1738)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1738 advisory. 13.20-1 - Update to 13.20 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Oracle Linux 7 : libsoup (ELSA-2025-1047)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1047 advisory. - Fixed CVE-2024-52531 buffer overflow via UTF-8 conversion in Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : postgresql:15 (ELSA-2025-1739)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1739 advisory. pgaudit 1.7.0-1 - Update to 1.7.0 - Support postgresql 15 - Related: 2128241 pgrepack 1.4.8-1 - Update to version 1.4.8 - Postgresql 15 is supported - Related:...

Oracle Linux 9 : postgresql (ELSA-2025-1742)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1742 advisory. 13.18-1 - Update to 13.18 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Oracle Linux 8 : postgresql:13 (ELSA-2025-1736)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1736 advisory. pgaudit 1.5.0-1 - Update to version 1.5.0 Related: 1855776 pgrepack 1.4.6-3 - Release bump - enable gating postgres-decoderbufs 0.10.0-2 - Release bump for...

Oracle Linux 9 : postgresql:15 (ELSA-2025-1741)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1741 advisory. - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix CVE-2024-0985 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-3941...

Oracle Linux 8 : bind9.16 (ELSA-2025-1676)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1676 advisory. - Fix application of patch for CVE-2024-11187 - Limit additional section records CPU processing CVE-2024-11187 Tenable has extracted the preceding description...

Oracle Linux 9 : postgresql:16 (ELSA-2025-1743)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1743 advisory. pgaudit pgrepack 1.5.1-1 - Update to v1.5.1 pgvector 0.6.2-1 - Initial packaging postgres-decoderbufs postgresql 16.8-1 - Update to 16.8 - Fix CVE-2025-1094...