Oracle Linux 9 : python3.12 (ELSA-2025-3631)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3631 advisory. 3.12.5-2.3 - Security fix for CVE-2024-7592 Resolves: RHEL-85300 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : firefox (ELSA-2025-3582)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-3582 advisory. 128.9.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.9.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

Oracle Linux 9 : firefox (ELSA-2025-3556)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3556 advisory. 128.9.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : expat (ELSA-2025-3531)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3531 advisory. - Improve fix for CVE-2024-8176 - Fix CVE-2024-8176 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : libreoffice (ELSA-2025-3408)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3408 advisory. 1:7.1.8.1-15.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Added the --with-hamcrest option to configure. 1:7.1.8.1-15 - Fix CVE-2025-1080 Filter o...

Oracle Linux 9 : freetype (ELSA-2025-3407)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3407 advisory. - Fix for CVE-2025-27363 out-of-bound write vulnerability Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : tigervnc (ELSA-2025-2861)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2861 advisory. - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Orabug: 37712725 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in...

Oracle Linux 7 : kernel (ELSA-2025-2501)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2501 advisory. - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices Benot Sevens CVE-2024-53197 Orabug: 37686305 - can: bcm: Fix UAF in...

Oracle Linux 9 : python-jinja2 (ELSA-2025-3406)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-3406 advisory. 2.11.3-8 - Security fix for CVE-2025-27516 Resolves: RHEL-85064 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : kernel (ELSA-2025-3208)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3208 advisory. - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array CKI Backport Bot RHEL-82734 CVE-2025-21785 Tenable has extracted the preceding description bloc...

Oracle Linux 9 : fence-agents (ELSA-2025-3113)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3113 advisory. 4.10.0-76.6 - fenceibmvpc: refresh bearer-token if token data is corrupt, and avoid edge-case of writing empty token file Resolves: RHEL-83487 4.10.0-76.5 -...

Oracle Linux 9 : libxslt (ELSA-2025-3107)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3107 advisory. 1.1.34-9.0.1.el95.1 - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball 1.1.34-9.1 - Fix CVE-2025-24855 RHEL-83501 Tenable has...

Oracle Linux 7 : emacs (ELSA-2025-2130)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2130 advisory. 1:24.3-23.0.1.1 - Fix CVE-2025-1244 man.el shell injection vulnerability Orabug: 37658579 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : libxml2 (ELSA-2025-2673)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2673 advisory. - Fix CVE-2024-56171 Orabug: 37694105 - Fix CVE-2025-24928 Orabug: 37694105 - Fix CVE-2016-4658 1966916 - Fix CVE-2019-19956 1793000 - Fix CVE-2019-203...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20190)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20190 advisory. - ima: Fix use-after-free on a dentry's dname.name Stefan Berger Orabug: 37727037 CVE-2024-39494 - ocfs2: fix slab-use-after-free due to dangling...

Oracle Linux 8 : kernel (ELSA-2025-3026)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3026 advisory. - gve: Clear napi-skb before devkfreeskbany Joshua Washington RHEL-73269 CVE-2024-40937 - can: bcm: Fix UAF in bcmprocshow CKI Backport Bot RHEL-80733...

Oracle Linux 8 : pcs (ELSA-2025-2872)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2872 advisory. 0.10.18-2.0.1.el810.4 - Replace HAM-logo.png with a generic one 0.10.18-2.el810.4 - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-81924 Tenabl...

Oracle Linux 8 : thunderbird (ELSA-2025-2900)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-2900 advisory. 128.8.0-2.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.8.0 - Add OpenELA debranding 128.8.0-2 - Update to 128.8.0 build5...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-2863)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2863 advisory. 2.46.6-2 - Add patch for CVE-2025-24201 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 9 : thunderbird (ELSA-2025-2899)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-2899 advisory. 128.8.0-2.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.8.0 - Add OpenELA debranding 128.8.0-2 - Update to 128.8.0 build5 128.8.0...