Oracle Linux 8 : cups (ELSA-2025-0083)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0083 advisory. 1:2.2.6-62 - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file Tenable has extracted the preceding description...

kernel security update

5.14.0-503.21.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : thunderbird (ELSA-2025-0147)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-0147 advisory. 128.6.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.6.0 - Add OpenELA debranding 128.6.0-3 - Update to 128.6.0 build3 128.6.0...

Oracle Linux 9 : firefox (ELSA-2025-0080)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0080 advisory. 128.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 9 : webkit2gtk3 (ELSA-2025-0146)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0146 advisory. 2.46.5-1 - Update to 2.46.5 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-0145)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0145 advisory. 2.46.5-1 - Update to 2.46.5 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 9 : dpdk (ELSA-2025-0210)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0210 advisory. 23.11-2 - Backport fixes for CVE-2024-11614 RHEL-68601 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

kernel security update

4.18.0-553.34.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security update

5.14.0-503.19.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 8 : python-requests (ELSA-2025-0012)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0012 advisory. - Security fix for CVE-2024-35195 Resolves: RHEL-37605 - Security fix for CVE-2023-32681 Resolves: rhbz2209469 - Update to v2.20.0 for CVE-2018-18074. - Remove...

Oracle Linux 7 : postgresql (ELSA-2024-10882)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10882 advisory. - Fixes CVE-2024-10979 where environment variable mutations Orabug: 37370704 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : unbound:1.16.2 (ELSA-2024-11232)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11232 advisory. - Fix unbounded name compression could lead to Denial of Service CVE-2024-8508 - Ensure group access correction reaches also updated configs CVE-2024-1488 -...

Oracle Linux 9 : edk2:20240524 (ELSA-2024-11219)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11219 advisory. 20240524-6.0.1.el95.3 - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch RHEL-58631 - Resolves: RHEL-58631 Regression HTTP Boot fails to work wi...

Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2024-11345)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-11345 advisory. 1.16.1-5.0.1 - Update origin URL Orabug: 36209826 1.16.1-5 - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615 Resolves: RHEL-70974, RHEL-71010...

Oracle Linux 9 : containernetworking-plugins (ELSA-2024-11216)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-11216 advisory. 1:1.5.1-3 - rebuild to fix CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : mpg123:1.32.9 (ELSA-2024-11242)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11242 advisory. - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : skopeo (ELSA-2024-11217)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11217 advisory. 2:1.16.1-2 - rebuild to fix CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : python3.11-urllib3 (ELSA-2024-11238)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-11238 advisory. 1.26.12-2.2 - Security fix for CVE-2023-45803 Resolves: RHEL-66551 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 9 : libsndfile:1.0.31 (ELSA-2024-11237)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11237 advisory. 1.0.31-8.2 - fix crash in ogg vorbis RHEL-65096 CVE-2024-50612 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : pam (ELSA-2024-11250)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11250 advisory. - pamunix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62880 - pamnamespace: protectdir: use ODIRECTORY to...