Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2026-55787)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55787 advisory. 1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625...

kernel security, bug fix, and enhancement update

4.18.0-553.155.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security, bug fix, and enhancement update

5.14.0-687.41.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 10 / 9 : java-25-openjdk (ELSA-2026-55798)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55798 advisory. 1:25.0.4.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.1.1-1.1 - Update to jdk-25.0.4.1+1 GA - Update release notes to...

kernel security, bug fix, and enhancement update

6.12.0-211.49.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : perl-Date-Manip (ELSA-2026-56971)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-56971 advisory. 6.94-5.1 - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790 Tenable has...

Oracle Linux 8 : kernel (ELSA-2026-54246)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54246 advisory. - udf: fix partition descriptor append bookkeeping Ravi Singh RHEL-179571 CVE-2026-45991 Tenable has extracted the preceding description block directl...

Oracle Linux 10 : kernel (ELSA-2026-38492)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38492 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Oracle Linux 10 : mysql8.4 (ELSA-2026-56007)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56007 advisory. 8.4.11-1 - Rebase to 8.4.11 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2026-56521)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56521 advisory. - Fix IMA ADPCM input size check in adpcmdec CVE-2026-19387 Resolves: RHEL-235503 Tenable has extracted the preceding description block directly from the Oracl...

.NET 10.0 security, bug fix, and enhancement update

10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482...

.NET 9.0 security, bug fix, and enhancement update

9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476...

.NET 10.0 security, bug fix, and enhancement update

10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481...

pcp security update

5.3.7-22.0.12.el810.5 - Implemented units header in csv output using pmrepOrabug: 39064482 - Adds interval option support in PCP nfsiostat tool Orabug: 38902336 - Introduces proc.numamaps metrics in linuxproc PMDA Orabug: 38509848 - adds numastat process option in the tool - Added support for siz...

Oracle Linux 9 : gstreamer1-plugins-bad-free / and / gstreamer1-plugins-ugly-free (ELSA-2026-55865)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55865 advisory. - Fix ADPCM decoder negotiation and input size check CVE-2026-19387 Resolves: RHEL-235496 gstreamer1-plugins-ugly-free Tenable has extracted the...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-55434)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55434 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 Tenable has extracted the preceding description block...

Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2026-55436)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55436 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 Tenable has extracted the preceding description block...

Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-55433)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55433 advisory. - Fix ADPCM decoder input validation CVE-2026-19387 Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats...

Oracle Linux 10 : gstreamer1-plugins-ugly-free (ELSA-2026-55435)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-55435 advisory. 1.26.7-2.2 - Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux Resolves: RHEL-235515 Tenable has extracted the preceding description block...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-54550)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54550 advisory. 9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235473 Tenable has extracted t...