Oracle Linux 8 : python-cryptography (ELSA-2025-14553)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-14553 advisory. 3.2.1-8 - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates, resolves RHEL-97452 Tenable has extracted the preceding description block...

Oracle Linux 7 : libxml2 (ELSA-2025-13464)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-13464 advisory. 2.9.1-6.0.9.6 - Fix CVE-2025-7425: heap-use-after-free in xmlFreeID Orabug: 38290330 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : firefox (ELSA-2025-14442)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-14442 advisory. 128.14.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA defaul...

Oracle Linux 8 : pki-deps:10.6 (ELSA-2025-14126)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14126 advisory. apache-commons-collections apache-commons-lang apache-commons-net bea-stax fasterxml-oss-parent 69-1 - Rebase to version 69 - Resolves: RHEL-103106...

Oracle Linux 9 : firefox (ELSA-2025-14416)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14416 advisory. 128.14.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

kernel security update

4.18.0-553.71.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 7 : glibc (ELSA-2025-10219)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10219 advisory. 2.17-326.0.11.3 - Back port fix for CVE-2025-4802 Orabug: 38144086 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 9 : aide (ELSA-2025-14493)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-14493 advisory. 0.16-103.2 RHEL 9.6.Z ERRATUM - CVE-2025-54389 aide: improper output neutralization enables bypassing Resolves: RHEL-109910 Tenable has extracted the preceding...

Oracle Linux 10 : firefox (ELSA-2025-14417)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-14417 advisory. 128.14.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

kernel security update

5.14.0-570.37.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 10 : tomcat (ELSA-2025-14179)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14179 advisory. - tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 - tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources...

Oracle Linux 10 : kernel (ELSA-2025-14009)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14009 advisory. - tls: always refresh the queue when reading sock - CVE-2025-38471 - net: fix udp gso skbsegment after pull from fraglist - CVE-2025-38124 - Bluetoot...

Oracle Linux 9 : tomcat (ELSA-2025-14181)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14181 advisory. - Resolves: RHEL-102200 tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames CVE-2025-48989 - Resolves: RHEL-108491 tomcat: Apache...

Oracle Linux 10 : tomcat9 (ELSA-2025-14178)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14178 advisory. - Resolves: tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames CVE-2025-48989 - Resolves: tomcat: Apache Commons FileUpload DOS v...

Oracle Linux 8 : mingw-sqlite (ELSA-2025-14101)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14101 advisory. - Fix CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 - Fix CVE-2019-19603 CVE-2020-13435 CVE-2020-35527 - Fix CVE-2020-35525 CVE-2022-35737 CVE-2020-24736 - Fix...

Oracle Linux 8 : libarchive (ELSA-2025-14135)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14135 advisory. - Resolves: CVE-2025-5914 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not test...

Oracle Linux 10 : libarchive (ELSA-2025-14137)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14137 advisory. 3.7.7-4 - Resolves: CVE-2025-5914 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 9 : libarchive (ELSA-2025-14130)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14130 advisory. 3.5.3-6 - Resolves: CVE-2025-5914 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : tomcat (ELSA-2025-14177)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14177 advisory. - Resolves: RHEL-102193 tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames CVE-2025-48989 - Resolves: RHEL-108486 tomcat: Apache...

Oracle Linux 8 : kernel (ELSA-2025-13960)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-13960 advisory. - i2c/designware: Fix an initialization issue CKI Backport Bot RHEL-106617 CVE-2025-38380 - Bluetooth: hcicore: Fix use-after-free in vhciflush David...