Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500385)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500385 advisory. - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - landlock: Require...

Oracle Linux 8 : libxml2 (ELSA-2026-80675)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80675 advisory. 2.9.7-21.10 - Fix CVE-2026-86144 RHEL-269184 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : pcre2 (ELSA-2026-81613)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81613 advisory. - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : compat-openssl10 (ELSA-2026-80510)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80510 advisory. 1:1.0.2o-4.4 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Tenable has extracted the preceding description block directl...

Oracle Linux 8 : kernel (ELSA-2026-77498)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77498 advisory. - svcrdma: Reject inline replies that overflow the pull-up buffer Roberto Bergantinos Corpas RHEL-187743 CVE-2026-89530 - packet: use consistent...

Oracle Linux 8 : tftp (ELSA-2026-78952)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-78952 advisory. 5.2-28 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260620 Tenable has extracted the preceding description block direct...

Oracle Linux 8 : firefox (ELSA-2026-76850)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-76850 advisory. 140.17.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.17.0 -...

Oracle Linux 8 : nodejs:24 (ELSA-2026-74085)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74085 advisory. - Update to version 24.21.0 Fix: CVE-2026-85152 CVE-2026-84961 CVE-2026-19534 Resolves: RHEL-255252 RHEL-255291 RHEL-255313 RHEL-249188 - deps: update...

Oracle Linux 8 : bind (ELSA-2026-79162)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-79162 advisory. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent crash on wildcard responses containing both NSEC and NSEC3...

Oracle Linux 8 : gd (ELSA-2026-75680)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75680 advisory. 2.2.5-8 - Fix CVE-2026-9672: incorrect array index and uninitialized memory in GIF LZW decoder Resolves: RHEL-259584 Tenable has extracted the preceding...

Oracle Linux 8 : python3.12 (ELSA-2026-77028)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77028 advisory. - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix...

Oracle Linux 8 : freerdp (ELSA-2026-76747)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76747 advisory. 2:2.11.7-14 - Backport several CVE fixes CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964 Resolves:...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500377)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500377 advisory. - tcp: fix potential race in tcpv6synrecvsock Eric Dumazet Orabug: 39331624 CVE-2026-43198 - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe Bjoe...

Oracle Linux 8 : kernel (ELSA-2026-75747)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75747 advisory. - nvme/ioctl: check SUBMITIO with CAPSYSADMIN Chris Leech RHEL-269479 CVE-2026-90227 - nvme-pci: fix mempool alloc size Maurizio Lombardi RHEL-230386...

Oracle Linux 8 : kernel (ELSA-2026-72468)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72468 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...

Oracle Linux 8 : kernel (ELSA-2026-74133)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74133 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...

Oracle Linux 8 : kernel (ELSA-2026-70402)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70402 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 8 : kernel (ELSA-2026-71213)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71213 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-74084)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74084 advisory. 2.54.0-1 - Update to 2.54.0 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 8 : gawk (ELSA-2026-73511)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-73511 advisory. - Fix use-after-free in dogetlineredir CVE-2026-40467 Resolves: RHEL-222601 Tenable has extracted the preceding description block directly from the...