Oracle Linux 9 : golang (ELSA-2025-10676)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10676 advisory. - Fix for CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : javapackages-tools:201801 (ELSA-2025-9318)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9318 advisory. - Resolves: CVE-2019-10086, CVE-2025-48734 apache-commons-cli apache-commons-codec apache-commons-collections apache-commons-compress apache-commons-ex...

kernel security update

4.18.0-553.60.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 7 : mpfr (ELSA-2025-9332)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9332 advisory. 3.1.1-4.0.1 - Fixes buffer overflow in mpfrstrtofr CVE-2014-9474 Orabug: 38103811 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20406)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20406 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129026 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

Oracle Linux 10 : gnome-remote-desktop (ELSA-2025-10635)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10635 advisory. 47.3-2 - Backport connection throttling Resolves: RHEL-92787 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-10551)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10551 advisory. - fixes 'CVE-2025-6032 container-tools:rhel8/podman: podman missing TLS verification rhel-8.10.z' Tenable has extracted the preceding description block directl...

Oracle Linux 9 : gnome-remote-desktop (ELSA-2025-10631)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10631 advisory. 40.0-11 - Backport connection throttling Resolves: RHEL-92795 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : glibc (ELSA-2025-20411)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20411 advisory. 2.34-168.0.1.20 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi Oracle history: June-9-2025 Cupertino Miranda - 2.34-168.0.1.19 -...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20405)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20405 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129827 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20404)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20404 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

Oracle Linux 9 : podman (ELSA-2025-10550)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10550 advisory. - fixes 'CVE-2025-6032 podman: podman missing TLS verification rhel-9.6.z' Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : kernel (ELSA-2025-10379)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10379 advisory. - udf: Fix a slab-out-of-bounds write bug in udffindentry CKI Backport Bot RHEL-99124 CVE-2022-49846 - vmxnet3: Fix malformed packet sizing in...

Oracle Linux 10 : kernel (ELSA-2025-10371)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10371 advisory. 6.12.0-55.20.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 9 : jq (ELSA-2025-10585)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10585 advisory. - Fix CVE-2025-48060 - Fix CVE-2024-23337 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : ipa (ELSA-2025-9189)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9189 advisory. 4.6.8-5.0.3.el79.17 - Fix privilege escalation from host to domain vulnerability - CVE-2025-4404 Orabug: 38085890 Tenable has extracted the preceding descriptio...

Oracle Linux 10 : buildah (ELSA-2025-7459)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7459 advisory. - Rebuild on new golang to fix CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2025-7458)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7458 advisory. - CVE fix for: CVE-2025-49175 RHEL-97129, CVE-2025-49176 RHEL-97135, CVE-2025-49177 RHEL-97141, CVE-2025-49178 RHEL-97147, CVE-2025-49179 RHEL-97153,...

kernel security update

5.14.0-570.25.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Oracle Linux 9 : python-setuptools (ELSA-2025-10407)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10407 advisory. 53.0.0-13.1 - Security fix for CVE-2025-47273 Resolves: RHEL-96807 Tenable has extracted the preceding description block directly from the Oracle Linux securit...