Vulnerability Discussion

An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

Oracle offers Oracle Linux Premier Support, for a fee, for those customers who wish to standardize on a specific minor release for an extended period.

Check

Verify that OL 9 is vendor supported with the following command:

$ cat /etc/oracle-release
Oracle Linux Server release 9.5

If the installed version of OL 9 is not supported, this is a finding.

Fix

Upgrade OL 9 to a supported version.