NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2025-4597)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4597 advisory. cjose modauthopenidc 2.4.9.4-8 - Resolves: RHEL-87759 - Empty POST causes crash with OIDCPreservePost Tenable has extracted the preceding description block...

Oracle Linux 8 : libtiff (ELSA-2025-4658)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4658 advisory. 4.0.9-34 - fix CVE-2017-17095: heap-based buffer overflow in pal2rgb RHEL-87363 Tenable has extracted the preceding description block directly from the Oracle...

RockyLinux 8 : python3.11-cryptography (RLSA-2024:3105)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:3105 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : firefox (ELSA-2025-4458)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-4458 advisory. 128.10.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - Force use of gcc-toolset-13 due to clang dependency 128.10.0 - Add...

Oracle Linux 8 : libsoup (ELSA-2025-4560)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4560 advisory. 2.62.3-8 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-8703...

Oracle Linux 8 : nodejs:20 (ELSA-2025-4461)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4461 advisory. nodejs 1:20.19.1-1 - Update to version 20.19.1 Resolves: RHEL-78763 1:20.18.2-4 - Update c-ares to 1.34.5 to address CVE-2025-31498 Tenable has extracted the...

Oracle Linux 8 : glibc (ELSA-2025-20300)

"The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20300 advisory. 2.28-251.0.3.16 - Forward port of Oracle patches Reviewed-by: Elena Zannoni Oracle history: March-26-2025 Cupertino Miranda - 2.28-251.0.3.14 - OraBug: 366256...

Oracle Linux 8 : gnutls (ELSA-2025-4051)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4051 advisory. 3.6.16-8.3 - Backport the fix for CVE-2024-12243 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 8 : thunderbird (ELSA-2025-4170)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-4170 advisory. 128.9.0-2.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.9.0 - Add OpenELA debranding 128.9.0-2 - Update to 128.9.0 build3...

Oracle Linux 8 : ruby:3.1 (ELSA-2025-4063)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4063 advisory. - Fix DoS vulnerability in REXML. CVE-2024-39908 Resolves: RHEL-57051 - Fix DoS vulnerability in REXML. CVE-2024-43398 Resolves: RHEL-56002 - Fix REXML...

Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2025-3997)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3997 advisory. cjose modauthopenidc 2.4.9.4-7 - Resolves: RHEL-86218 - modauthopenidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data CVE-2025-31492 Tenable...

Oracle Linux 8 : bluez (ELSA-2025-4043)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4043 advisory. - Fixing CVE-2023-27349 - Fixing CVE-2023-51589 + bluez-5.63-4 - Fixing CVE-2023-50230 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : libtasn1 (ELSA-2025-4049)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4049 advisory. 4.13.0-5 - Backport the fix for CVE-2024-12133 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : xmlrpc-c (ELSA-2025-4048)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4048 advisory. 1.51.0-11 - Restrict XML Entity Expansion Depth in libexpat CVE-2024-8176 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2025-3855)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3855 advisory. 1:21.0.7.0.6-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.7.0.6-1 - Update to jdk-21.0.7+6 GA - Update release notes to 21.0.7+6 -...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-3974)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3974 advisory. 2.48.1-1 - Update to 2.48.1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 8 : kernel (ELSA-2025-3893)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3893 advisory. - ALSA: usb-audio: Fix out of bounds reads when finding clock sources Jarod Wilson RHEL-86737 CVE-2024-53150 - x86/xen: remove hypercall page Vitaly...

Oracle Linux 8 : expat (ELSA-2025-3913)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3913 advisory. - lib: Prevent integer overflow in doProlog CVE-2022-23990Orabug: 33910314 - Fix CVE-2024-8176 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : glibc (ELSA-2025-3828)

"The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3828 advisory. 2.28-251.0.3.16 - Forward port of Oracle patches Reviewed-by: Elena Zannoni Oracle history: March-26-2025 Cupertino Miranda - 2.28-251.0.3.14 - OraBug: 3662568...