Oracle Linux 10 : perl (ELSA-2025-12056)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12056 advisory. 4:5.40.2-512.2 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : redis:7 (ELSA-2025-12008)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-12008 advisory. - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and...

Oracle Linux 9 : kernel (ELSA-2025-11861)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11861 advisory. - netsched: hfsc: Fix a UAF vulnerability in class handling Davide Caratti RHEL-95853 CVE-2025-37797 - ext4: fix out-of-bound read in...

Oracle Linux 10 : firefox (ELSA-2025-11797)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-11797 advisory. 128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.13.0-1 - Update to 128.13.0 build1 Tenable has extracted the...

Oracle Linux 10 : unbound (ELSA-2025-12064)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12064 advisory. 1.20.0-12 - Fix CVE-2025-5994 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : nodejs:22 (ELSA-2025-11802)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11802 advisory. nodejs 1:22.16.0-2 - Patch fix for CVE-2025-6965 Resolves: RHEL-103851 nodejs-nodemon nodejs-packaging Tenable has extracted the preceding description block...

Oracle Linux 10 : sqlite (ELSA-2025-11933)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11933 advisory. - Fix CVE-2025-6965 - Fix for CVE-2025-3277 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : libtpms (ELSA-2025-12100)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-12100 advisory. 0.9.1-5.20211126git1ff6fe1f43 - Fix CVE-2025-49133 Resolves: RHEL-96258 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : sqlite (ELSA-2025-12010)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12010 advisory. 3.26.0-20 - Fixes CVE-2025-6965 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2025-10862)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10862 advisory. 1:1.8.0.462.b08-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.462.b08-1 - Update to 8u462-b08 GA - Update release notes for 8u462-b08...

Oracle Linux 9 : sqlite (ELSA-2025-11992)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11992 advisory. 3.34.1-8 - Fixes CVE-2025-6965 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

kernel security update

5.14.0-570.30.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 8 : kernel (ELSA-2025-11850)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11850 advisory. - sched/fair: Fix potential memory corruption in childcfsrqonlist CKI Backport Bot RHEL-100387 CVE-2025-21919 - ftrace: Fix NULL pointer dereference i...

Oracle Linux 10 : icu (ELSA-2025-11888)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11888 advisory. - Resolves: rhbz1646703 CVE-2018-18928 - Resolves: rhbz1524820 CVE-2017-17484 - Resolves: rhbz1510932 CVE-2017-14952 - Resolves: rhbz1444101 CVE-2017-7867...

Oracle Linux 8 : unbound (ELSA-2025-11884)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11884 advisory. - Fix RebirthDay Attack CVE-2025-5994 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 9 : perl (ELSA-2025-11804)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11804 advisory. 4:5.32.1-481.1 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : nodejs:22 (ELSA-2025-11803)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11803 advisory. - Patch fix for sqlite CVE-2025-6965 Resolves: RHEL-103835 - Update to 22.16.0 Fixes: CVE-2025-23166 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300...

kernel security update

4.18.0-553.64.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : unbound (ELSA-2025-11849)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11849 advisory. - Fix RebirthDay Attack CVE-2025-5994 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 : perl (ELSA-2025-11805)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11805 advisory. - Fix CVE-2025-40909 - Clone dirhandles without fchdir Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...