Oracle Linux 8 : tar (ELSA-2026-70390)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-70390 advisory. - Backport upstream fix for CVE-2026-5704 file injection hidden from -t - Fix --one-top-level with absolute path broken by the CVE-2025-45582 fix Also...

Oracle Linux 8 : coreutils (ELSA-2026-69964)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69964 advisory. 8.30-21.0.1 - clean up empty file if cp is failed Orabug 15973168 - df --local: recognize afs, auristorfs, and smb3 as remote fs 1798030 - fix formatting of...

Oracle Linux 8 : apr-util (ELSA-2026-69113)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69113 advisory. - Resolves: RHEL-236630 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation CVE-2025-49506 -...

Oracle Linux 8 : openssh (ELSA-2026-69266)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69266 advisory. - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for...

Oracle Linux 8 : unbound (ELSA-2026-69120)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69120 advisory. - Backport additional fix from 1.26.0 CVE-2026-50252 - Correct new warning in previous change CVE-2026-44690 Tenable has extracted the preceding description...

Oracle Linux 8 : perl-Net-DNS (ELSA-2026-68787)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-68787 advisory. - Fix unbounded recursion in TSIG record processing CVE-2026-81928 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : python-lxml (ELSA-2026-67943)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-67943 advisory. - Security fix for CVE-2026-49825: missing xlink:href in known HTML link attributes Resolves: RHEL-251508 - Security fix for CVE-2021-43818 Resolves: rhbz20325...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-68676)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68676 advisory. 10.0.112-1.0.1 - Add support for Oracle Linux 10.0.112-1 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252315 Tenable has extract...

Oracle Linux 8 : kernel (ELSA-2026-68531)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68531 advisory. - net: qrtr: fix 32-bit integer overflow in qrtrendpointpost Izabela Bakollari RHEL-244096 CVE-2026-72298 - ipv6: sit: reload inner IPv6 header after...

Oracle Linux 8 : tomcat (ELSA-2026-68677)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68677 advisory. - Resolves: RHEL-192806 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219561 Security constraint bypass via improper URL encodi...

Oracle Linux 8 : firefox (ELSA-2026-68549)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-68549 advisory. 140.15.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.15.0 -...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-68233)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68233 advisory. 9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252274 Tenable has extracted t...

Oracle Linux 8 : .NET / 8.0 (ELSA-2026-68316)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68316 advisory. 8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252244 Tenable has extracted the...

Oracle Linux 8 : libsoup (ELSA-2026-68266)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68266 advisory. 2.62.3-15 - Backport patch for CVE-2026-15711 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : ELSA-2026-65147-0: / microcode_ctl (ELSA-2026-651470)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651470 advisory. - Security advisories: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html CVE-2025-31936...

Oracle Linux 8 : tesseract (ELSA-2026-67832)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67832 advisory. 4.1.1-3 - Resolves: CVE-2026-73066 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : ELSA-2026-67315-0: / nginx:1.24 (ELSA-2026-673150)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-673150 advisory. - Resolves: RHEL-212457 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 - Resolves: RHEL-217957 - nginx:1.24/ngin...

Oracle Linux 8 : ELSA-2026-67468-0: / kernel (ELSA-2026-674680)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-674680 advisory. - EDAC/bluefield: Fix potential integer overflow Joel Savitz RHEL-234337 CVE-2024-53161 - scsi: libiscsitcp: Bound SCSI Response data segment to the...

Oracle Linux 8 : ELSA-2026-67266-0: / libkcapi (ELSA-2026-672660)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-672660 advisory. - CVE-2026-71226: Fix memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path Resolves: RHEL-224809 - CVE-2026-71227:...

Oracle Linux 8 : ELSA-2026-66000-0: / kernel (ELSA-2026-660000)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-660000 advisory. - tipc: fix slab-use-after-free Read in tipcaeaddecryptdone Xin Long RHEL-228877 CVE-2026-63801 - tipc: clear sock-sk on the failed-insert path in...