Oracle Linux 9 : firefox (ELSA-2025-18155)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18155 advisory. 140.4.0-3.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

Oracle Linux 9 : .NET / 9.0 (ELSA-2025-18151)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18151 advisory. 9.0.111-1.0.1 - Add support for Oracle Linux 9.0.111-1 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116857 Tenable has extracted t...

Oracle Linux 10 : libsoup3 (ELSA-2025-18183)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-18183 advisory. - Fix handling of invalid dates in cookie expires attribute CVE-2025-11021 - Add patch for CVE-2025-32907 Tenable has extracted the preceding description bloc...

Oracle Linux 8 : .NET / 8.0 (ELSA-2025-18148)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18148 advisory. 8.0.121-1.0.1 - Add support for Oracle Linux 8.0.121-1 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116865 Tenable has extracted t...

Oracle Linux 10 : .NET / 9.0 (ELSA-2025-18153)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18153 advisory. 9.0.111-1.0.1 - Add support for Oracle Linux 9.0.111-1 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116860 Tenable has extracted...

Oracle Linux 10 : firefox (ELSA-2025-18154)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-18154 advisory. 140.4.0-3.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 8 : kernel (ELSA-2025-17797)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17797 advisory. - Bluetooth: L2CAP: Fix use-after-free CKI Backport Bot RHEL-116277 CVE-2023-53305 Tenable has extracted the preceding description block directly from...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20662)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20662 advisory. - tls: fix handling of zero-length records on the rxlist Jakub Kicinski Orabug: 38401543,38453832 CVE-2025-39682 - net: usb: asixdevices: Fix PHY...

Oracle Linux 7 : ImageMagick (ELSA-2025-16313)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-16313 advisory. - Security update CVE-2025-57803 Orabug: 38455460 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : cups (ELSA-2025-17054)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-17054 advisory. - CVE-2025-58060: Authentication Bypass in CUPS Authorization Handling Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : vim (ELSA-2025-17913)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17913 advisory. - RHEL-113550 CVE-2025-53906 vim: Vim path traversal Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20716)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20716 advisory. - afunix: Don't leave consecutive consumed OOB skbs. Kuniyuki Iwashima Orabug: 38528187 CVE-2025-38236 - fs: writeback: fix use-after-free in...

PT-2025-42172

🚨 CVE-2025-17742: Vim vulnerability in Oracle Linux 9 allows arbitrary code execution. Patch now! Read more: 👉 https://t.co/jdNZhEl52b Security https://t.co/p6FT2u2CmI...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-17802)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17802 advisory. 2.50.0-1 - Update to 2.50.0 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 10 : kernel (ELSA-2025-17776)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17776 advisory. 6.12.0-55.39.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

kernel security update

4.18.0-553.79.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : vim (ELSA-2025-17742)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17742 advisory. - RHEL-112006 CVE-2025-53905 vim: Vim path traversial - RHEL-112010 CVE-2025-53906 vim: Vim path traversal Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20663)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20663 advisory. - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro Orabug: 38310007 CVE-2025-38499 - HID: hid-ntrig: fix unable ...

kernel security update

5.14.0-570.52.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 8 : vim (ELSA-2025-17715)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17715 advisory. - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - CVE-2022-1785 vim: Out-of-bounds Write -...