Oracle Linux 10 : osbuild-composer (ELSA-2025-19566)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19566 advisory. - Ensure build on latest golang: CVE-2024-34156 - Rebuild for CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2025-19435)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19435 advisory. 24.1.5-5 - CVE fix for: CVE-2025-62229 RHEL-119964, CVE-2025-62230 RHEL-120013, CVE-2025-62231 RHEL-125006 Tenable has extracted the preceding...

kernel security update

5.14.0-570.60.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : xorg-x11-server (ELSA-2025-19434)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19434 advisory. 1.20.11-27 - CVE fix for: CVE-2025-62229 RHEL-119953, CVE-2025-62230 RHEL-120027, CVE-2025-62231 RHEL-124993 Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-25731)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25731 advisory. - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604168 CVE-2025-39973 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2025-19432)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-19432 advisory. 21.1.3-19 - CVE fix for: CVE-2025-62229 RHEL-119967, CVE-2025-62230 RHEL-120015, CVE-2025-62231 RHEL-125007 Tenable has extracted the preceding...

Oracle Linux 9 : xorg-x11-server (ELSA-2025-19433)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19433 advisory. 1.20.11-32 - CVE fix for: CVE-2025-62229 RHEL-119961, CVE-2025-62230 RHEL-120032, CVE-2025-62231 RHEL-125001 Tenable has extracted the preceding...

Oracle Linux 9 : tigervnc (ELSA-2025-19489)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19489 advisory. - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119987 - Fix CVE-2025-62230: xorg-x11-serve...

Oracle Linux 10 : expat (ELSA-2025-19403)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19403 advisory. 2.7.1-3 - Backport security fixes to expat 2.7.1-2 - https://issues.redhat.com/browse/RHELMISC-13073 Tenable has extracted the preceding description block...

Oracle Linux 9 : redis:7 (ELSA-2025-19345)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19345 advisory. 7.2.11-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.11-1 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818...

Oracle Linux 9 : redis (ELSA-2025-19237)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19237 advisory. 6.2.20-1 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 Tenable has extracted the preceding description block...

Oracle Linux 8 : redis:6 (ELSA-2025-19238)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19238 advisory. 6.2.20-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.20-1 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817...

Oracle Linux 8 : libtiff (ELSA-2025-19276)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19276 advisory. 4.0.9-35 - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented RHEL-112533 Tenable has extracted the preceding description block directly fr...

Oracle Linux 7 : compat-libtiff3 (ELSA-2025-17710)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-17710 advisory. 3.9.4-12.0.1 - Fixes CVE-2025-9900 buffer underflow Orabug: 38523840 Tenable has extracted the preceding description block directly from the Oracle Linux...

kernel security update

5.14.0-570.58.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : libtiff (ELSA-2025-19156)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19156 advisory. 4.6.0-6.1 - Fix buffer underflow crash in TIFFReadRGBAImageOriented - Resolves: RHEL-112522 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : libtiff (ELSA-2025-19113)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19113 advisory. - fix CVE-2025-8176 off-by-one error skipping first line in tiffdither and tiffmedian - fix CVE-2025-9900 buffer underflow in TIFFReadRGBAImageOriente...

Oracle Linux 9 : kernel (ELSA-2025-19105)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19105 advisory. - pstore/ram: Check start of empty przs during init CKI Backport Bot RHEL-122067 CVE-2023-53331 - vsock/virtio: Validate length in packet header befor...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20721)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20721 advisory. - nfsd: handle getclientlocked failure in nfsd4setclientidconfirm Jeff Layton Orabug: 38575798 CVE-2025-38724 Tenable has extracted the preceding...

Oracle Linux 8 : squid:4 (ELSA-2025-19107)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19107 advisory. libecap squid 7:4.15-10.9 - Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling...