The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7418 advisory.

    php     [8.3.19-1]
    - rebase to 8.3.19

    [8.3.15-1]
    - rebase to 8.3.15

    [8.3.12-1]
    - rebase to 8.3.12 RHEL-62189
    - enable command history in phpdbg
    - backport Argon2 password hashing in OpenSSL ext
    - build sockets extension statically
    - switch to nikic/php-parser version 5
    - openssl: always warn about missing curve_name

    [8.2.13-1]
    - rebase to 8.2.13 RHEL-14699
    - add %__phpize and %__phpconfig macros
    - move httpd/nginx wants directives to config files in /etc
    - php-fpm.conf: move include directive after [global] section       following upstream example, allowing overriding
    - use SPDX license IDs

    php-pecl-apcu     php-pecl-redis6     [6.1.0-2]
    - ignore 1 ONLINE test

    [6.1.0-1]
    - RHEL build

    [6.1.0-1]
    - update to 6.1.0
    - drop patch merged upstream

    [6.1.0~RC2-1]
    - update to 6.1.0RC2
    - fix test suite with redis 6.2 using patch from       https://github.com/phpredis/phpredis/pull/2555

    [6.0.2-3]
    - cleanup and modernize spec file

    [6.0.2-2]
    - use valkey on Fedora 41
    - add upstream patch for PHP 8.4

    [6.0.2-1]
    - update to 6.0.2

    [6.0.1-1]
    - update to 6.0.1

    [6.0.0-1]
    - cleanup SCL stuff for Fedora review

    [6.0.0-1]     php-pecl-rrd     php-pecl-xdebug3     [3.3.1-1]
    - update to 3.3.1 for PHP 8.3

    php-pecl-zip

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 9 : php:8.3 (ELSA-2025-7418)

medium Nessus Plugin ID 237203

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Jan 21, 2026, 5:00 PM IAVM reference Plugin Feed: 202601211700
Version 1.2 Jun 30, 2025, 10:46 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202506301046
Version 1.1 May 24, 2025, 11:47 PM New Plugin Feed: 202505242347