Oracle Linux 10 : libvpx (ELSA-2025-9120)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9120 advisory. 1.14.1-3 - Add patch for double free Resolves: RHEL-93905 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 10 : kea (ELSA-2025-9178)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9178 advisory. - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 10 : thunderbird (ELSA-2025-8608)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8608 advisory. 128.11.0-1.0.1 - Add Oracle prefs 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1 Tenable has extracted the preceding description bloc...

Oracle Linux 10 : exiv2 (ELSA-2025-7457)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7457 advisory. 0.28.3-3.2 - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106 Tenable has extracted the precedin...

Oracle Linux 10 : ipa (ELSA-2025-9190)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9190 advisory. - Resolves: RHEL-89908 EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA Tenable has extracted the preceding description...

Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2025-8184)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8184 advisory. 1.24.11-2 - fix for CVE-2025-3887 Resolves: RHEL-93045 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : kernel (ELSA-2025-9580)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9580 advisory. - ndisc: use RCU protection in ndiscallocskb Xin Long RHEL-89535 CVE-2025-21764 - ipv6: use RCU protection in ip6defaultadvmss Xin Long RHEL-89535...

Oracle Linux 10 : Unbreakable Enterprise kernel (ELSA-2025-20371)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20371 advisory. 6.12.0-100.28.2.el10uek - sched/eevdf: Fix se-slice being set to U64MAX and resulting crash Omar Sandoval - certs: Add new Oracle Linux Driver Signing key 1...

Oracle Linux 9 : osbuild-composer (ELSA-2025-9634)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9634 advisory. 132.2-2.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA...

Oracle Linux 9 : weldr-client (ELSA-2025-9635)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9635 advisory. 35.12-4 - Bump release for y-stream AND z-stream building using centpkg build --rhel-target=zstream Related: RHEL-89344 35.12-3 - tests: OSTree does not support...

Oracle Linux 8 : perl-File-Find-Rule (ELSA-2025-9605)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9605 advisory. - Use 3 arg open in grep CVE-2011-10007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 10 : git-lfs (ELSA-2025-9063)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9063 advisory. 3.6.1-2 - Rebuild with new Golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : perl-YAML-LibYAML (ELSA-2025-9329)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9329 advisory. 1:0.70-2 - Use 3-arg form of open in LoadFile CVE-2025-40908 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : pam (ELSA-2025-9526)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9526 advisory. 1.5.1-25.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36406534 1.5.1-25 - pamnamespace: fix potential privilege escalation. Resolves:...

Oracle Linux 8 : xorg-x11-server / and / xorg-x11-server-Xwayland (ELSA-2025-9305)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9305 advisory. - CVE fix for: CVE-2025-49175 RHEL-97273, CVE-2025-49176 RHEL-97329, CVE-2025-49178 RHEL-97369, CVE-2025-49179 RHEL-97422, CVE-2025-49180 RHEL-97235...

kernel security update

4.18.0-553.58.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : libblockdev (ELSA-2025-9327)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9327 advisory. 2.28-14.0.1 - enable btrfs support Orabug: 30792917 2.28-14 - Don't allow suid and dev set on fs resize CVE-2025-6019 Resolves: RHEL-96038 Tenable has extracted...

Oracle Linux 9 : tigervnc (ELSA-2025-9306)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9306 advisory. - Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97305 - Fix CVE-2025-49175:...

osbuild-composer security update

132.2-2.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA: OLDIS-35893 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux Orabug: 37253643 - Support using OCI...

Oracle Linux 9 : mod_auth_openidc (ELSA-2025-9396)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9396 advisory. 2.4.10-1.el96.2 Resolves: RHEL-95948 - modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled CVE-2025-3891 Tenable has extracted th...