Oracle Linux 7 : gdk-pixbuf2 (ELSA-2025-14683)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14683 advisory. 2.36.12-3.0.1 - jpeg: Be more careful with chunked icc data Orabug: 38359772CVE-2025-7345 Tenable has extracted the preceding description block directly from t...

Oracle Linux 9 : kernel (ELSA-2025-15429)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15429 advisory. - udmabuf: fix a buf size overflow issue during udmabuf creation CKI Backport Bot RHEL-99746 CVE-2025-37803 Tenable has extracted the preceding...

Oracle Linux 8 : php:8.2 (ELSA-2025-15687)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15687 advisory. libzip php 8.2.28-1 - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the preceding descripti...

Oracle Linux 8 : microcode_ctl (ELSA-2025-10991)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10991 advisory. 4:20250512-1.0.1 - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs...

kernel security update

5.14.0-570.41.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 8 : kernel (ELSA-2025-15471)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15471 advisory. - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel Oleg Nesterov RHEL-112775 CVE-2025-38352 - bpf: Don't use tnumrange on...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20551)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20551 advisory. - scsi: fnic: Fix crash in fnicwqcmplhandler when FDMI times out Karan Tilak Kumar Orabug: 38175020,38226429 CVE-2025-38238 - KVM: x86/xen: Fix...

kernel security update

4.18.0-553.74.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 7 : libxml2 (ELSA-2025-13789)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-13789 advisory. 2.9.1-6.0.11.6 - Fix CVE-2025-32415: Fix heap buffer overflow Orabug: 38310750 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : kernel (ELSA-2025-15005)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15005 advisory. - tipc: Fix use-after-free in tipcconnclose. - CVE-2025-38464 - netsched: hfsc: Fix a potential UAF in hfscdequeue too - CVE-2025-37823 - RDMA/iwcm:...

Oracle Linux 8 : resource-agents (ELSA-2025-14999)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-14999 advisory. - bundled requests: fix CVE-2024-47081 Resolves: RHEL-104761 - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-50360 - bundled urllib3: fix CVE-2024-37891...

Oracle Linux 8 : httpd:2.4 (ELSA-2025-15123)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15123 advisory. - Resolves: RHEL-99944 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade - Resolves: RHEL-99969 - CVE-2024-47252 httpd: insufficient...

Oracle Linux 8 : postgresql:12 (ELSA-2025-15115)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15115 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 12.22-5 - Fix previous Backport 12.22-4 - Backport CVE-2025-8715 Tenable has extracted the preceding...

Oracle Linux 10 : python3.12 (ELSA-2025-14984)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14984 advisory. - Security fix for CVE-2025-8194 Resolves: RHEL-106370 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Tenable...

Oracle Linux 10 : udisks2 (ELSA-2025-15020)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15020 advisory. - udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 - Fixes CVE-2021-3802 2003650 Tenable has extracted the preceding description block directly from...

Oracle Linux 7 : pam (ELSA-2025-10357)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10357 advisory. 1.1.8-23.0.3 - pamnamespace: fix potential privilege escalation CVE-2025-6020 Orabug: 38156729 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : httpd (ELSA-2025-15095)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15095 advisory. 2.4.63-1.0.1.2 - Replace index.html with Oracle's index page oracleindex.html. Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : python39:3.9 (ELSA-2025-14900)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14900 advisory. - Security fix for CVE-2025-8194 Resolves: RHEL-106359 python3x-pip python3x-setuptools Tenable has extracted the preceding description block directly...

Oracle Linux 9 : python3.9 (ELSA-2025-15019)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15019 advisory. 3.9.21-2.2 - Security fix for CVE-2025-8194 Resolves: RHEL-106375 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : python3.12 (ELSA-2025-15007)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15007 advisory. 3.12.9-1.2 - Security fix for CVE-2025-8194 Resolves: RHEL-106370 Tenable has extracted the preceding description block directly from the Oracle Linux security...