Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20551)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20551 advisory. - scsi: fnic: Fix crash in fnicwqcmplhandler when FDMI times out Karan Tilak Kumar Orabug: 38175020,38226429 CVE-2025-38238 - KVM: x86/xen: Fix...

kernel security update

4.18.0-553.74.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 7 : libxml2 (ELSA-2025-13789)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-13789 advisory. 2.9.1-6.0.11.6 - Fix CVE-2025-32415: Fix heap buffer overflow Orabug: 38310750 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : kernel (ELSA-2025-15005)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15005 advisory. - tipc: Fix use-after-free in tipcconnclose. - CVE-2025-38464 - netsched: hfsc: Fix a potential UAF in hfscdequeue too - CVE-2025-37823 - RDMA/iwcm:...

Oracle Linux 8 : resource-agents (ELSA-2025-14999)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-14999 advisory. - bundled requests: fix CVE-2024-47081 Resolves: RHEL-104761 - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-50360 - bundled urllib3: fix CVE-2024-37891...

Oracle Linux 8 : httpd:2.4 (ELSA-2025-15123)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15123 advisory. - Resolves: RHEL-99944 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade - Resolves: RHEL-99969 - CVE-2024-47252 httpd: insufficient...

Oracle Linux 8 : postgresql:12 (ELSA-2025-15115)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15115 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 12.22-5 - Fix previous Backport 12.22-4 - Backport CVE-2025-8715 Tenable has extracted the preceding...

Oracle Linux 10 : python3.12 (ELSA-2025-14984)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14984 advisory. - Security fix for CVE-2025-8194 Resolves: RHEL-106370 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Tenable...

Oracle Linux 10 : udisks2 (ELSA-2025-15020)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15020 advisory. - udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 - Fixes CVE-2021-3802 2003650 Tenable has extracted the preceding description block directly from...

Oracle Linux 7 : pam (ELSA-2025-10357)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10357 advisory. 1.1.8-23.0.3 - pamnamespace: fix potential privilege escalation CVE-2025-6020 Orabug: 38156729 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : httpd (ELSA-2025-15095)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15095 advisory. 2.4.63-1.0.1.2 - Replace index.html with Oracle's index page oracleindex.html. Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : python39:3.9 (ELSA-2025-14900)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14900 advisory. - Security fix for CVE-2025-8194 Resolves: RHEL-106359 python3x-pip python3x-setuptools Tenable has extracted the preceding description block directly...

Oracle Linux 9 : python3.9 (ELSA-2025-15019)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15019 advisory. 3.9.21-2.2 - Security fix for CVE-2025-8194 Resolves: RHEL-106375 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : python3.12 (ELSA-2025-15007)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15007 advisory. 3.12.9-1.2 - Security fix for CVE-2025-8194 Resolves: RHEL-106370 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : python3.11 (ELSA-2025-15010)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15010 advisory. 3.11.11-2.2 - Security fix for CVE-2025-8194 Resolves: RHEL-106366 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 9 : udisks2 (ELSA-2025-15018)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15018 advisory. - udiskslinuxmanager: Add lower bounds check to fdindex CVE-2025-8067 RHEL-109417 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 9 : httpd (ELSA-2025-15023)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15023 advisory. - Resolves: RHEL-99949 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade - Resolves: RHEL-99972 - CVE-2024-47252 httpd: insufficient...

Oracle Linux 8 : udisks2 (ELSA-2025-15017)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15017 advisory. 2.9.0-16.1 - udiskslinuxmanager: Add lower bounds check to fdindex CVE-2025-8067 RHEL-109408 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : mod_http2 (ELSA-2025-14983)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-14983 advisory. 2.0.26-4.1 - Resolves: RHEL-99956 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache modproxyhttp2 module Tenable...

Oracle Linux 9 : postgresql (ELSA-2025-14878)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14878 advisory. 13.22-1 - Update to 13.22 13.18-1 - Update to 13.18 Tenable has extracted the preceding description block directly from the Oracle Linux security...