Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-25733)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25733 advisory. - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38603025 CVE-2025-39973 Tenable has extracted the preceding description block directly from...

Oracle Linux 9 : pcs (ELSA-2025-19512)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19512 advisory. 0.11.9-2.el96.2 - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves:...

Oracle Linux 9 : kernel (ELSA-2025-19409)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19409 advisory. - crypto: xts - Handle EBUSY correctly CKI Backport Bot RHEL-119235 CVE-2023-53494 - fs: fix UAF/GPF bug in nilfsmdtdestroy CKI Backport Bot RHEL-1166...

kernel security update

5.14.0-570.60.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2025-19435)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19435 advisory. 24.1.5-5 - CVE fix for: CVE-2025-62229 RHEL-119964, CVE-2025-62230 RHEL-120013, CVE-2025-62231 RHEL-125006 Tenable has extracted the preceding...

Oracle Linux 9 : tigervnc (ELSA-2025-19489)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19489 advisory. - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119987 - Fix CVE-2025-62230: xorg-x11-serve...

Oracle Linux 9 : xorg-x11-server (ELSA-2025-19433)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19433 advisory. 1.20.11-32 - CVE fix for: CVE-2025-62229 RHEL-119961, CVE-2025-62230 RHEL-120032, CVE-2025-62231 RHEL-125001 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-25731)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25731 advisory. - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604168 CVE-2025-39973 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2025-19432)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-19432 advisory. 21.1.3-19 - CVE fix for: CVE-2025-62229 RHEL-119967, CVE-2025-62230 RHEL-120015, CVE-2025-62231 RHEL-125007 Tenable has extracted the preceding...

Oracle Linux 8 : xorg-x11-server (ELSA-2025-19434)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19434 advisory. 1.20.11-27 - CVE fix for: CVE-2025-62229 RHEL-119953, CVE-2025-62230 RHEL-120027, CVE-2025-62231 RHEL-124993 Tenable has extracted the preceding...

Oracle Linux 10 : expat (ELSA-2025-19403)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19403 advisory. 2.7.1-3 - Backport security fixes to expat 2.7.1-2 - https://issues.redhat.com/browse/RHELMISC-13073 Tenable has extracted the preceding description block...

Oracle Linux 9 : redis:7 (ELSA-2025-19345)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19345 advisory. 7.2.11-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.11-1 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818...

Oracle Linux 8 : libtiff (ELSA-2025-19276)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19276 advisory. 4.0.9-35 - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented RHEL-112533 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : redis (ELSA-2025-19237)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19237 advisory. 6.2.20-1 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 Tenable has extracted the preceding description block...

Oracle Linux 8 : redis:6 (ELSA-2025-19238)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19238 advisory. 6.2.20-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.20-1 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817...

Oracle Linux 7 : compat-libtiff3 (ELSA-2025-17710)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-17710 advisory. 3.9.4-12.0.1 - Fixes CVE-2025-9900 buffer underflow Orabug: 38523840 Tenable has extracted the preceding description block directly from the Oracle Linux...

kernel security update

5.14.0-570.58.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : squid:4 (ELSA-2025-19107)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19107 advisory. libecap squid 7:4.15-10.9 - Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling...

Oracle Linux 9 : kernel (ELSA-2025-19105)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19105 advisory. - pstore/ram: Check start of empty przs during init CKI Backport Bot RHEL-122067 CVE-2023-53331 - vsock/virtio: Validate length in packet header befor...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20721)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20721 advisory. - nfsd: handle getclientlocked failure in nfsd4setclientidconfirm Jeff Layton Orabug: 38575798 CVE-2025-38724 Tenable has extracted the preceding...