Oracle Linux 8 : kernel (ELSA-2025-19931)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19931 advisory. - fs: fix UAF/GPF bug in nilfsmdtdestroy Abhi Das RHEL-116658 CVE-2022-50367 - x86/vmscape: Add old Intel CPUs to affected list Waiman Long RHEL-11428...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20559)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20559 advisory. 5.15.0-312.187.5.1 - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343660 - x86/bugs: Move cpubugssmtupdate down Pawan Gupta...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20558)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20558 advisory. 6.12.0-103.40.4.2.el10uek - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343659 - x86/bugs: Move cpubugssmtupdate down Pawan...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20560)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20560 advisory. 5.4.17-2136.347.6.1 - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343661 - x86/bugs: Move cpubugssmtupdate down Pawan Gupta...

Oracle Linux 10 : kernel (ELSA-2025-19962)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19962 advisory. - wifi: cfg80211: fix use-after-free in cmpbss CKI Backport Bot RHEL-122878 CVE-2025-39864 - arm64: bpf: Only mitigate cBPF programs loaded by...

kernel security update

5.14.0-570.62.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : ELSA-2025-20034-0: / libtiff (ELSA-2025-200340)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-200340 advisory. 4.0.9-36 - fix CVE-2025-8176: prevent skipping first line in tiffdither and tiffmedian tools RHEL-120230 Tenable has extracted the preceding description block...

Oracle Linux 9 : bind (ELSA-2025-19951)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19951 advisory. - Prevent cache poisoning due to weak PRNG CVE-2025-40780 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : bind (ELSA-2025-19835)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19835 advisory. - Address various spoofing attacks CVE-2025-40778 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : bind9.18 (ELSA-2025-19950)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19950 advisory. - Fix upstream reported regression in recent CVE fix CVE-2025-8677 - Refuse malformed DNSKEY records CVE-2025-8677 - Address various spoofing attacks...

Oracle Linux 9 : galera / and / mariadb (ELSA-2025-19584)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19584 advisory. galera 26.4.22-1 - Rebase to 26.4.22 mariadb 3:10.5.29-2 - Release bump for rebuild 3:10.5.29-1 - Rebase to 10.5.29 Tenable has extracted the precedin...

Oracle Linux 9 : osbuild-composer (ELSA-2025-19594)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19594 advisory. 132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIR...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-25754)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-25754 advisory. 6.12.0-105.51.5 - RDMA/mlx5: Fix vport loopback forcing for MPV device Patrisious Haddad Orabug: 38226124 - arm64: Utilize foreachcpuwrap for...

Oracle Linux 8 : bind9.16 (ELSA-2025-19793)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19793 advisory. - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-25755)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-25755 advisory. - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604171 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder...

Oracle Linux 9 : runc (ELSA-2025-19927)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-19927 advisory. - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : mariadb:10.5 (ELSA-2025-19572)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19572 advisory. galera 26.4.22-1 - Rebase to 26.4.22 Judy 1.0.5-18 - Remove README.Fedora; no longer needed since 1.0.5 version - Resolves: 1638717 1.0.5-17 - ldconfi...

Oracle Linux 9 : qt5-qt3d (ELSA-2025-19911)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19911 advisory. 5.15.9-2.1 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120988 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : mingw-libtiff (ELSA-2025-19906)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19906 advisory. - Fix CVE-2018-5784 CVE-2018-7456 CVE-2017-9935 CVE-2017-9935 - Fix CVE-2017-18013 CVE-2018-8905 CVE-2018-10963 CVE-2018-17100 - Fix CVE-2018-18557...

Oracle Linux 7 : linux-firmware (ELSA-2025-25742)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25742 advisory. 20251030-999.44.1.gite9292517.el7 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...