Oracle Linux 7 : libxslt (ELSA-2025-4098)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4098 advisory. - Fix CVE-2024-55549 issue due to memory leak Orabug: 37795485 Tenable has extracted the preceding description block directly from the Oracle Linux...

SUSE SLES15: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (SUSE-SU-2025:1349-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1349-1 advisory. - CVE-2025-32460: Fixed a heap-based buffer over-read in ReadJXLImage. bsc1241150 Tenable has extracted the preceding description block...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-3974)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3974 advisory. 2.48.1-1 - Update to 2.48.1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 9 : expat (ELSA-2025-3531)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3531 advisory. - Improve fix for CVE-2024-8176 - Fix CVE-2024-8176 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2025-091-01)

The version of mozilla-firefox installed on the remote host is prior to 128.9.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-091-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

Oracle Linux 9 : podman (ELSA-2025-3336)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3336 advisory. - fixes 'CVE-2025-22869 podman: Potential denial of service in golang.org/x/crypto rhel-9.5.z' Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : postgresql:12 (ELSA-2025-3082)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3082 advisory. - Fix backport for CVE-2025-1094 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 8 : libreoffice (ELSA-2025-2868)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2868 advisory. - Fix CVE-2025-1080 Filter out more unwanted command URIs Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

CBL Mariner 2.0 Security Update: ruby (CVE-2025-27220)

The version of ruby installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27220 advisory. - In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service ReDoS vulnerability exists in the...

Oracle Linux 9 : grub2 (ELSA-2025-2867)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2867 advisory. - Fix CVE-2022-3775 Orabug: 34871953 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Photon OS 4.0: Binutils PHSA-2025-4.0-0767

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0767. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libxml2 PHSA-2025-5.0-0485

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0485. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 7 : krb5 (ELSA-2025-1352)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1352 advisory. 1.15.1-55.0.9 - Fixes CVE-2025-24528 , Prevent overflow when calculating ulog block size Orabug: 37587301 Tenable has extracted the preceding description block...

RockyLinux 9 : postgresql:16 (RLSA-2025:1743)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1743 advisory. postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 Tenable has extracted the preceding...

AlmaLinux 9 : postgresql:15 (ALSA-2025:1741)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:1741 advisory. postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 Tenable has extracted the preceding...

Oracle Linux 9 : libpq (ELSA-2025-1738)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1738 advisory. 13.20-1 - Update to 13.20 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Medium: ansible-core

Issue Overview: This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks. CVE-2024-11079...

Azure Linux 3.0 Security Update: lua / memcached / ntopng (CVE-2021-44647)

The version of lua / memcached / ntopng installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44647 advisory. - Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function i...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2025:0552-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0552-1 advisory. - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Tenable has extracted the preceding...

SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2025:0583-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0583-1 advisory. - CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet bsc1236353. Tenable has extracted the...