CLSA-2025-1742929277 Update of shim-signed

Add support for oraclelinux7...

Oracle Linux 7 : python-pyasn1 (ELSA-2026-4148)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-4148 advisory. 0.1.9-7.0.1 - Fixes CVE-2026-23490 fixes potential memory exhaustion Orabug: 39060516 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : squid (ELSA-2025-19167)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19167 advisory. - Fixes CVE-2025-62168, squid: Squid vulnerable to information disclosure via - Fixes CVE-2025-54574, add URN access disabling config options Orabug: 38350105 ...

Oracle Linux 7 : libarchive (ELSA-2025-14828)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14828 advisory. 3.1.2-14.0.1 - rar: Fix double free Orabug: 38364091CVE-2025-5914 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : python-setuptools (ELSA-2025-11984)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-11984 advisory. 0.9.8-7.0.3 - Fix CVE-2025-47273 Orabug: 38247921 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : tigervnc (ELSA-2025-10375)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10375 advisory. 1.8.0-33.0.7 - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 Orabug: 38157695 Tenable has extracted the preceding...

Oracle Linux 7 : xorg-x11-server (ELSA-2025-10360)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10360 advisory. - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 Orabug: 38157695 - Fixed CVE-2025-26594 CVE-2025-26595...

Oracle Linux 7 : apache-commons-vfs (ELSA-2025-10548)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10548 advisory. 2.0-11.0.1 - Simplify UriParser Orabug: 38161936CVE-2025-27553 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : sudo (ELSA-2025-10871)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10871 advisory. 1.8.23-10.0.1.3 - CVE-2025-32462 sudo: LPE via host option Orabug: 38187299 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 7 : firefox (ELSA-2025-10181)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-10181 advisory. 128.12.0-1.0.1 - Update to 128.12.0 Orabug: 38141310CVE-2025-6424CVE-2025-6425 CVE-2025-6429CVE-2025-6430 Tenable has extracted the preceding...

Oracle Linux 7 : mpfr (ELSA-2025-9332)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9332 advisory. 3.1.1-4.0.1 - Fixes buffer overflow in mpfrstrtofr CVE-2014-9474 Orabug: 38103811 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : perl-File-Find-Rule-Perl (ELSA-2025-9740)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9740 advisory. 1.13-2.0.1 - Use 3 arg open in grep Orabug: 38120371CVE-2011-10007 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20406)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20406 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129026 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

Oracle Linux 7 : ipa (ELSA-2025-9189)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9189 advisory. 4.6.8-5.0.3.el79.17 - Fix privilege escalation from host to domain vulnerability - CVE-2025-4404 Orabug: 38085890 Tenable has extracted the preceding descriptio...

Oracle Linux 7 : gimp (ELSA-2025-9501)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9501 advisory. - Fixes CVE-2025-5473 GIMP ICO File Parsing Integer Overflow Orabug: 38110877 - Fixes CVE-2025-48797 Multiple heap buffer overflows in TGA parser Tenab...

Oracle Linux 7 : python-tornado (ELSA-2025-8664)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8664 advisory. 4.2.1-5.0.1 - Fixed CVE-2025-47287 Raise errors instead of logging Orabug: 38049949 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 7 : perl-FCGI (ELSA-2025-8625)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-8625 advisory. 1:0.74-8.0.1 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters Orabug: 38047531 Tenable has extracted the preceding description block direct...

Oracle Linux 7 : firefox (ELSA-2025-9074)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-9074 advisory. 128.11.0-1.0.1 - Update to 128.11.0 Orabug: 38077559CVE-2025-5263CVE-2025-5264 CVE-2025-5266CVE-2025-5267CVE-2025-5268CVE-2025-5269 Tenable has extract...

Oracle Linux 7 : kernel (ELSA-2025-7898)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7898 advisory. - netfilter: ipset: add missing range check in bitmapipuadt Jeongjun Park CVE-2024-53141 Orabug: 37964173 Tenable has extracted the preceding description block...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20372)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20372 advisory. - net/mlx5e: Fix NULL deref in mlx5etirbuilderalloc Elena Salomatkina Orabug: 37206299,37670859 CVE-2024-50000 - net/mlx5: Fix error path in...