kernel security update

4.18.0-553.66.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : ncurses (ELSA-2025-12876)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12876 advisory. 6.2-10.20210508.el96.2 - remove execute permissions from ANNOUNCE file RHEL-102738 6.2-10.20210508.el96.1 - guard against corrupt terminfo data in string...

Oracle Linux 7 : kernel (ELSA-2025-11358)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11358 advisory. - net: atlantic: fix aqvec index out of range error Chia-Lin Kao CVE-2022-50066 Orabug: 38201271 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2022-21385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in netrdsallocsgs in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 Availability impacts. CVSS Vector...

Oracle Linux 10 : gdk-pixbuf2 (ELSA-2025-12862)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12862 advisory. 2.42.12-4 - jpeg: Be more careful with chunked icc data Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : glibc (ELSA-2025-12748)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12748 advisory. 2.34-168.0.1.23 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi Oracle history: Tenable has extracted the preceding description block...

kernel security update

5.14.0-570.32.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 9 : python3.12-setuptools (ELSA-2025-12834)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12834 advisory. 68.2.2-5 - Security fix for CVE-2025-47273 Resolves: RHEL-101118 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : mod_ (ELSA-2025-12838)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12838 advisory. 2.9.6-2.1 - Resolves: RHEL-100102 - CVE-2025-48866 modsecurity: ModSecurity Denial of Service Vulnerability Tenable has extracted the preceding description blo...

Oracle Linux 8 : virt:rhel / and / virt-devel:rhel (ELSA-2025-12527)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12527 advisory. - Fixes: CVE-2022-40284 - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52728 libtpms libvirt Tenable has extracted the preceding...

Oracle Linux 10 : jq (ELSA-2025-12882)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-12882 advisory. - jq: jq has signed integer overflow in jv.c:jvparraywrite CVE-2024-23337 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : python-requests (ELSA-2025-12519)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12519 advisory. 2.25.1-10 - Security fix for CVE-2024-47081 Resolves: RHEL-105461 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : python3-setuptools (ELSA-2025-11607)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-11607 advisory. 39.2.0-10.0.5 - Back port fix for CVE-2025-47273 Orabug: 38229296 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : jackson-annotations, / jackson-core, / jackson-databind, / jackson-jaxrs-providers, / and / jackson-modules-base (ELSA-2025-12280)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12280 advisory. jackson-annotations 2.19.1-1 - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-core 2.19.1-1 - Update to version 2.19.1 - Resolves: RHEL-103636...

Oracle Linux 8 : libxml2 (ELSA-2025-12450)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12450 advisory. - Fix CVE-2025-7425 RHEL-102797 - Fix CVE-2025-6021 RHEL-96498 - Fix CVE-2025-49794 RHEL-96398 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : libxml2 (ELSA-2025-12447)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12447 advisory. 2.9.13-11 - Fix CVE-2025-7425 RHEL-102806 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : icu (ELSA-2025-12083)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12083 advisory. 67.1-10 - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : kernel (ELSA-2025-11855)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11855 advisory. 6.12.0-55.24.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 7 : apache-commons-beanutils (ELSA-2025-10814)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10814 advisory. - Add SuppressPropertiesBeanIntrospector.SUPPRESSDECLARINGCLASS Orabug: 38176946CVE-2025-48734 - Fix CVE-2014-0114 - Fix CVE-2019-10086 - Resolves: CVE-2013-15...

Oracle Linux 10 : thunderbird (ELSA-2025-12188)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-12188 advisory. 128.13.0-3.0.1 - Add Oracle prefs 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build...