Oracle Linux 9 : php:8.2 (ELSA-2025-7432)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7432 advisory. php 8.2.28-1 - rebase to 8.2.28 8.2.25-1 - rebase to 8.2.25 RHEL-65837 8.2.13-1 - rebase to 8.2.13 RHEL-14699 - add %phpize and %phpconfig macros - mov...

Oracle Linux 9 : kernel (ELSA-2025-7903)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7903 advisory. - vsock: Orphan socket after transport release Jay Shin RHEL-89113 CVE-2025-21756 - vsock: Keep the binding until socket destruction Jay Shin RHEL-8911...

Oracle Linux 9 : gvisor-tap-vsock (ELSA-2025-7416)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7416 advisory. - Fix CVE-2025-22869 by updating to 0.8.5 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 9 : webkit2gtk3 (ELSA-2025-7995)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7995 advisory. 2.48.2-1 - Update to 2.48.2 - Reenable JIT Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : kernel (ELSA-2025-7423)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7423 advisory. - soc: qcom: socinfo: Avoid out of bounds read of serial number Jared Kangas RHEL-88252 CVE-2024-58007 - iouring/sqpoll: zero sqd-thread on tctx errors...

CVE-2022-21385

A flaw in netrdsallocsgs in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 Availability impacts. CVSS Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

kernel security update

5.14.0-570.17.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 9 : protobuf (ELSA-2025-7138)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7138 advisory. - Applied patch for CVE-2022-1941 RHEL-40872 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : iptraf-ng (ELSA-2025-7064)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7064 advisory. 1.2.2-1.el9 - New version 1.2.2 Andrea Claudi RHEL-77280 - Fix buffer overflow via ifaces.c Andrea Claudi RHEL-71493 Tenable has extracted the preceding...

Oracle Linux 9 : openjpeg2 (ELSA-2025-7309)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7309 advisory. 2.4.0-8 - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 RHEL-72519,RHEL-72521 Tenable has extracted the preceding description block...

Oracle Linux 9 : rsync (ELSA-2025-7050)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7050 advisory. 3.2.5-3 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 3.2.5-2 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-702...

Oracle Linux 9 : python3.12 (ELSA-2025-7107)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7107 advisory. - Security fix for CVE-2025-0938 Resolves: RHEL-77261 - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64886, RHEL-70320 Tenable has extracted...

Oracle Linux 9 : pcs (ELSA-2025-7085)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7085 advisory. 0.11.9-2 - Fixed restarting bundles Resolves: RHEL-79055 - Fixed deletion of misconfigured bundles Resolves: RHEL-79160 - Fixed filtering of resource clones in...

Oracle Linux 9 : thunderbird (ELSA-2025-7435)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7435 advisory. 128.10.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 8 : kernel (ELSA-2025-8056)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8056 advisory. - net/mlx5: Always stop health timer during driver removal Michal Schmidt RHEL-47712 CVE-2024-40906 - net/mlx5e: SHAMPO, Fix invalid WQ linked list...

Oracle Linux 9 : xorg-x11-server (ELSA-2025-7163)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7163 advisory. - CVE fix for: CVE-2025-26594 RHEL-80201, CVE-2025-26595 RHEL-80186, CVE-2025-26596 RHEL-80188, CVE-2025-26597 RHEL-80191, CVE-2025-26598 RHEL-80192,...

Oracle Linux 9 : vim (ELSA-2025-7440)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7440 advisory. 8.2.2637-22.0.1 - Remove upstream references Orabug: 31197557 2:8.2.2637-22 - RHEL-2159 vim: Heap Use After Free in function inscomplgetexp in vim/vim Tenable h...

Oracle Linux 9 : .NET / 8.0 (ELSA-2025-7598)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7598 advisory. 8.0.116-1.0.1 - Add support for Oracle Linux 8.0.116-1 - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89448 Tenable has extracted the precedin...

Oracle Linux 9 : grub2 (ELSA-2025-6990)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-6990 advisory. - Fix CVE-2022-3775 Orabug: 34871953 - Resolves: CVE-2024-45779 CVE-2024-45778 CVE-2025-1118 - Resolves: CVE-2025-0677 CVE-2024-45782 CVE-2025-0690 -...

Oracle Linux 9 : openssh (ELSA-2025-6993)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-6993 advisory. - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on...