Oracle Linux 9 : nodejs:20 (ELSA-2025-8468)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8468 advisory. nodejs 1:20.19.2-1 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 nodejs-nodemon nodejs-packaging Tenable has extracted the preceding...

Oracle Linux 8 : mingw-freetype / and / spice-client-win (ELSA-2025-8292)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8292 advisory. 2.8-3.1 - Fix CVE-2025-27363 Resolves: RHEL-83101 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 8 : rsync (ELSA-2025-8395)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8395 advisory. 3.1.3-23 - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps 3.1.3-22 - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl Tenable h...

Oracle Linux 8 : git (ELSA-2025-8414)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8414 advisory. 2.43.5-3 - add the option to sanitize sideband channel messages - Resolves: RHEL-74177 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : ghostscript (ELSA-2025-8421)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8421 advisory. 9.27-17 - RHEL-88965 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : python36:3.6 (ELSA-2025-8419)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8419 advisory. python36 python-distro python-docs python-docutils python-nose python-pygments python-pymongo 3.7.0-2 - Backport CVE-2024-5629 Tenable has extracted the precedi...

Oracle Linux 8 : varnish:6 (ELSA-2025-8336)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8336 advisory. varnish 6.0.13-1.1 - Resolves: RHEL-89695 - varnish: request smuggling attacks CVE-2025-47905 varnish-modules Tenable has extracted the preceding description...

Oracle Linux 9 : varnish (ELSA-2025-8337)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8337 advisory. 6.6.2-6.1 - Resolves: RHEL-89700 - varnish: request smuggling attacks CVE-2025-47905 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : firefox (ELSA-2025-8308)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8308 advisory. 128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

Oracle Linux 9 : pcs (ELSA-2025-8256)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8256 advisory. 0.11.9-2.el96.1 - rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser CVE-2025-46727 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : kernel (ELSA-2025-8246)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8246 advisory. - wifi: rtw89: Fix array index mistake in rtw89stainfogetiter CKI Backport Bot RHEL-54802 CVE-2024-43842 Tenable has extracted the preceding description block...

Oracle Linux 9 : firefox (ELSA-2025-8293)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8293 advisory. 128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

Oracle Linux 9 : thunderbird (ELSA-2025-8203)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8203 advisory. 128.10.1-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.10.1 - Add OpenELA debranding 128.10.1-1 - Update to 128.10.1 Tenable ha...

Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2025-8201)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8201 advisory. 1.16.1-5.0.1 - Update origin URL Orabug: 36209826 1.16.1-5 - fix for CVE-2025-3887 Resolves: RHEL-93051 Tenable has extracted the preceding description block...

Oracle Linux 9 : libsoup (ELSA-2025-8126)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8126 advisory. 2.72.0-10.2 - Backport patches for various CVEs Resolves: RHEL-85888 Resolves: RHEL-87081 Resolves: RHEL-88332 Resolves: RHEL-92285 Tenable has extract...

Oracle Linux 8 : libsoup (ELSA-2025-8132)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8132 advisory. 2.62.3-9 - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031...

Oracle Linux 9 : php:8.3 (ELSA-2025-7418)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7418 advisory. php 8.3.19-1 - rebase to 8.3.19 8.3.15-1 - rebase to 8.3.15 8.3.12-1 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2...

Oracle Linux 8 : kernel (ELSA-2025-8056)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8056 advisory. - net/mlx5: Always stop health timer during driver removal Michal Schmidt RHEL-47712 CVE-2024-40906 - net/mlx5e: SHAMPO, Fix invalid WQ linked list...

Oracle Linux 9 : openssh (ELSA-2025-6993)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-6993 advisory. - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on...

Oracle Linux 9 : thunderbird (ELSA-2025-7435)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7435 advisory. 128.10.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs Tenable has extracted the preceding description block directly from the Orac...