Oracle Linux 9 : nginx:1.24 (ELSA-2025-3262)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3262 advisory. - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/...

Oracle Linux 9 : podman (ELSA-2025-3336)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3336 advisory. - fixes 'CVE-2025-22869 podman: Potential denial of service in golang.org/x/crypto rhel-9.5.z' Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : grafana (ELSA-2025-3344)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3344 advisory. 10.2.6-9 - Resolves RHEL-84634: CVE-2025-30204 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : nginx:1.22 (ELSA-2025-3261)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3261 advisory. - Resolves: RHEL-84486 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/...

Oracle Linux 8 : kernel (ELSA-2025-3260)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3260 advisory. - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array CKI Backport Bot RHEL-82720 CVE-2025-21785 Tenable has extracted the preceding description bloc...

kernel security update

4.18.0-553.46.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : kernel (ELSA-2025-3208)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3208 advisory. - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array CKI Backport Bot RHEL-82734 CVE-2025-21785 Tenable has extracted the preceding description bloc...

kernel security update

5.14.0-503.34.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 8 : container-tools:ol8 (ELSA-2025-3210)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3210 advisory. - fixes 'CVE-2025-22869 container-tools:rhel8/podman: Potential denial of service in golang.org/x/crypto rhel-8.10.z' Tenable has extracted the preceding...

Oracle Linux 9 : fence-agents (ELSA-2025-3113)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3113 advisory. 4.10.0-76.6 - fenceibmvpc: refresh bearer-token if token data is corrupt, and avoid edge-case of writing empty token file Resolves: RHEL-83487 4.10.0-76.5 -...

Oracle Linux 9 : libxslt (ELSA-2025-3107)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3107 advisory. 1.1.34-9.0.1.el95.1 - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball 1.1.34-9.1 - Fix CVE-2025-24855 RHEL-83501 Tenable has...

Oracle Linux 7 : emacs (ELSA-2025-2130)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2130 advisory. 1:24.3-23.0.1.1 - Fix CVE-2025-1244 man.el shell injection vulnerability Orabug: 37658579 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : libxml2 (ELSA-2025-2673)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2673 advisory. - Fix CVE-2024-56171 Orabug: 37694105 - Fix CVE-2025-24928 Orabug: 37694105 - Fix CVE-2016-4658 1966916 - Fix CVE-2019-19956 1793000 - Fix CVE-2019-203...

Oracle Linux 8 : postgresql:12 (ELSA-2025-3082)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3082 advisory. - Fix backport for CVE-2025-1094 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20190)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20190 advisory. - ima: Fix use-after-free on a dentry's dname.name Stefan Berger Orabug: 37727037 CVE-2024-39494 - ocfs2: fix slab-use-after-free due to dangling...

Oracle Linux 8 : libreoffice (ELSA-2025-2868)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2868 advisory. - Fix CVE-2025-1080 Filter out more unwanted command URIs Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : kernel (ELSA-2025-3026)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3026 advisory. - gve: Clear napi-skb before devkfreeskbany Joshua Washington RHEL-73269 CVE-2024-40937 - can: bcm: Fix UAF in bcmprocshow CKI Backport Bot RHEL-80733...

Oracle Linux 8 : pcs (ELSA-2025-2872)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2872 advisory. 0.10.18-2.0.1.el810.4 - Replace HAM-logo.png with a generic one 0.10.18-2.el810.4 - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-81924 Tenabl...

Oracle Linux 9 : grub2 (ELSA-2025-2867)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2867 advisory. - Fix CVE-2022-3775 Orabug: 34871953 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 8 : thunderbird (ELSA-2025-2900)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-2900 advisory. 128.8.0-2.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.8.0 - Add OpenELA debranding 128.8.0-2 - Update to 128.8.0 build5...