kernel security update

4.18.0-553.37.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 7 : raptor2 (ELSA-2025-0319)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0319 advisory. 2.0.9-3.0.1 - CVE-2024-57823: memcpy integer underflow and heap read overflow Orabug: 37476410 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : firefox (ELSA-2025-1066)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1066 advisory. 128.7.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : galera / and / mariadb (ELSA-2025-0914)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0914 advisory. galera 26.4.20-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete lp1184034 test case without using patches. 26.4.20-1 - Reba...

Oracle Linux 9 : mariadb:10.11 (ELSA-2025-0912)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0912 advisory. galera 26.4.20-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches...

Oracle Linux 9 : bzip2 (ELSA-2025-0925)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0925 advisory. - Revert the previous commit introduced a regression Resolves: CVE-2019-12900 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : keepalived (ELSA-2025-0917)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0917 advisory. 2.2.8-3 - Validate vrrp ipset names for CVE-2024-41184 Resolves: RHEL-49557 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : podman (ELSA-2025-0922)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0922 advisory. 5.2.2-13.0.1 - podman: do not set rlimits to the default value Orabug: 37310981 - Add devices on container startup, not on creation - overlay: Put should ignore...

Oracle Linux 9 : buildah (ELSA-2025-0923)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0923 advisory. 1.37.6-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.37.6-1 - update to the latest content of...

Oracle Linux 8 : mariadb:10.5 (ELSA-2025-0739)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0739 advisory. galera Judy mariadb 3:10.5.27-1 - Rebase to 10.5.27 3:10.5.26-1 - Rebase to 10.5.26 3:10.5.25-1 - Rebase to 10.5.25 Tenable has extracted the preceding...

Oracle Linux 8 : bzip2 (ELSA-2025-0733)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0733 advisory. 1.0.6-28 - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140 Tenable has...

Oracle Linux 8 : libsoup (ELSA-2025-0838)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0838 advisory. 2.62.3-7 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soupheaderparseparamliststrict Resolves: RHEL-76376 Tenable has...

Oracle Linux 8 : git-lfs (ELSA-2025-0845)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0845 advisory. - Backport CVE-2024-53263 fixes Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : unbound (ELSA-2025-0837)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0837 advisory. - Prevent unbounded name compression CVE-2024-8508 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : libsoup (ELSA-2025-0791)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0791 advisory. 2.72.0-8.3 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soupheaderparseparamliststrict Resolves: RHEL-76381 Tenable ha...

Oracle Linux 8 : python-jinja2 (ELSA-2025-0711)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0711 advisory. 2.10.1-6 - Security fix for CVE-2024-56326 Resolves: RHEL-74677 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : mariadb:10.11 (ELSA-2025-0737)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0737 advisory. galera 26.4.20-1 - Rebase to 26.4.20 26.4.19-1 - Rebase to 26.4.19 26.4.18-1 - Rebase to 26.4.18 Judy mariadb 3:10.11.10-1 - Rebase to 10.11.10 3:10.11.9-1 -...

Oracle Linux 9 : redis (ELSA-2025-0693)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0693 advisory. -- rebase to 6.2.17 for CVE-2024-46981 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 8 : keepalived (ELSA-2025-0743)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0743 advisory. 2.1.5-10 - CVE-2024-41184 Resolves: RHEL-49561 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : gimp:2.8 (ELSA-2025-0746)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0746 advisory. gimp 2:2.28.22-26 - bump spec pygobject2 2.28.7-5 - bump spec to fix NVR pygtk2 2.24.0-25 - Fix shebang mangling for prefix=app 1907579 - disable numpy...