Oracle Linux 9 : xorg-x11-server (ELSA-2025-7163)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7163 advisory. - CVE fix for: CVE-2025-26594 RHEL-80201, CVE-2025-26595 RHEL-80186, CVE-2025-26596 RHEL-80188, CVE-2025-26597 RHEL-80191, CVE-2025-26598 RHEL-80192,...

Oracle Linux 9 : python3.12 (ELSA-2025-7107)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7107 advisory. - Security fix for CVE-2025-0938 Resolves: RHEL-77261 - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64886, RHEL-70320 Tenable has extracted...

Oracle Linux 9 : thunderbird (ELSA-2025-7435)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7435 advisory. 128.10.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 9 : mod_auth_openidc (ELSA-2025-7419)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7419 advisory. 2.4.10-1.el96.1 Resolves: RHEL-86224 - modauthopenidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data CVE-2025-31492 Tenable has extracted the...

Oracle Linux 9 : xdg-utils (ELSA-2025-7672)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7672 advisory. - Update documentation for CVE-2022-4055 RHEL-87487 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : vim (ELSA-2025-7440)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7440 advisory. 8.2.2637-22.0.1 - Remove upstream references Orabug: 31197557 2:8.2.2637-22 - RHEL-2159 vim: Heap Use After Free in function inscomplgetexp in vim/vim Tenable h...

Oracle Linux 9 : corosync (ELSA-2025-7201)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7201 advisory. - totemsrp: Check size of orftoken msg fixes CVE-2025-30472 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : python3.12-cryptography (ELSA-2025-7317)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7317 advisory. - Security fix for CVE-2025-24898 in the bundled openssl crate Resolves: RHEL-77735 - Update to 41.0.7, fixes CVE-2023-49083 Tenable has extracted the preceding...

Oracle Linux 9 : openssh (ELSA-2025-6993)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-6993 advisory. - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on...

Oracle Linux 9 : gstreamer1, / gstreamer1-plugins-bad-free, / gstreamer1-plugins-ugly-free, / and / gstreamer1-rtsp-server (ELSA-2025-7178)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7178 advisory. gstreamer1 1.22.12-3 - Rebuild - Resolves: RHEL-38511, RHEL-41157 1.22.12-2 - Rebuild - Resolves: RHEL-38511, RHEL-41157 1.22.12-1 - Update to 1.22.12...

Oracle Linux 9 : xterm (ELSA-2025-7427)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7427 advisory. - Fix CVE-2022-45063 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 9 : webkit2gtk3 (ELSA-2025-7387)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7387 advisory. 2.48.1-1 - Update to 2.48.1 2.48.0-1 - Update to 2.48.0 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : git-lfs (ELSA-2025-7256)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7256 advisory. 3.6.1-1 - Update to 3.6.1 - Resolves: RHEL-73940 3.6.0-1 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936,...

Oracle Linux 9 : python3.11 (ELSA-2025-7109)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7109 advisory. - Security fix for CVE-2025-0938 Resolves: RHEL-77262 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : rust-bootupd (ELSA-2025-7241)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7241 advisory. 0.2.27-3 - spec: remove ExcludeArch ix86 as this is c9s Resolves: RHEL-77736, RHEL-79091 0.2.27-2 - Add git to the build requires Resolves: RHEL-77736, RHEL-790...

Oracle Linux 9 : expat (ELSA-2025-7444)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7444 advisory. - Fix CVE-2024-8176 - Fix CVE-2024-50602 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

kernel security update

5.14.0-570.16.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 9 : .NET / 9.0 (ELSA-2025-7600)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7600 advisory. 9.0.106-1.0.1 - Add support for Oracle Linux 9.0.106-1 - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89453 Tenable has extracted the preceding...

Oracle Linux 9 : nodejs:20 (ELSA-2025-7426)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7426 advisory. nodejs 1:20.19.1-1 - Update to version 20.19.1 Resolves: RHEL-78764 1:20.18.2-3 - Update c-ares to 1.34.5 to address CVE-2025-31498 nodejs-nodemon...

Oracle Linux 9 : 389-ds-base (ELSA-2025-7395)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7395 advisory. - Resolves: RHEL-83876 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service rhel-9.6 Tenable has extracted the preceding description...