Oracle Linux 9 : podman (ELSA-2026-90362)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90362 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 9 : kernel (ELSA-2026-87805)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87805 advisory. - xfs: bounds-check buffer log item's dirty bitmap Pavel Reichl RHEL-253366 CVE-2026-80536 - ovl: check access to copyfilerange source with src mounte...

Oracle Linux 9 : brotli (ELSA-2026-500513)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500513 advisory. 1.0.9-10.0.1 - Fix out-of-bounds write in the Brotli decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : nodejs:24 (ELSA-2026-500518)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500518 advisory. - Fix out-of-bounds write in bundled Brotli decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : xz (ELSA-2026-89749)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89749 advisory. 5.2.5-8.1 - Fix: a buffer overflow in lzmaindexappend - Add test for the issue above needs a special build config to actually fail - does not fail in our...

Oracle Linux 9 : lrzsz (ELSA-2026-89755)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89755 advisory. - Backport tightened path handling from 0.13.1 CVE-2026-105840 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : flatpak (ELSA-2026-89850)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89850 advisory. - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272190 Tenable has extracted the preceding description...

Oracle Linux 9 : libreswan (ELSA-2026-89748)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89748 advisory. 4.15-11.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.15-11 - Backport fixes for CVE-2026-94453, CVE-2026-77206, and CVE-2026-77207...

Oracle Linux 9 : bind (ELSA-2026-89745)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89745 advisory. - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-196...

Oracle Linux 9 : firefox (ELSA-2026-89757)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89757 advisory. 153.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

Oracle Linux 9 : python3.9 (ELSA-2026-89742)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89742 advisory. - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio Resolves: RHEL-274143 ...

Oracle Linux 9 : ca-certificates (ELSA-2026-88459)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88459 advisory. 2026.2.92v9.0.319-90.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-90.2 - Removing: emSign Root CS CA - G3 from Microso...

Oracle Linux 9 : httpd (ELSA-2026-88229)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88229 advisory. - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in modvhostalias CVE-2026-63292 - Resolves: RHEL-280369 - httpd:...

Oracle Linux 9 : libcap (ELSA-2026-12441)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-12441 advisory. 2.48-10.1 - Fix TOCTOU race condition in capsetfile CVE-2026-4878 Resolves: RHEL-169311 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : sudo (ELSA-2026-12310)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-12310 advisory. 1.9.5p2-15 RHEL 9.7.0 ERRATUM - CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166065 Tenable has extracted the...

Oracle Linux 9 : cockpit-machines (ELSA-2026-86970)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-86970 advisory. - CVE-2026-92768 RHEL-263127 - CVE-2026-92747 RHEL-263114 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 9 : openexr (ELSA-2026-86983)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86983 advisory. - fix CVE-2026-59982 - fix CVE-2026-59184 - fix CVE-2026-59189 - fix CVE-2026-59981 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : qt5-qtbase (ELSA-2026-87082)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87082 advisory. - Fix CVE-2026-19248: unbounded recursion and ON2 behavior in QDom Resolves: RHEL-261136 Tenable has extracted the preceding description block directl...

Oracle Linux 9 : fetchmail (ELSA-2026-86981)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-86981 advisory. 6.4.24-1.1 - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 Resolves: RHEL-265195 Tenable has extracted the...

Oracle Linux 9 : python-oci-sdk (ELSA-2026-604898)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-604898 advisory. 2.187.0-1.0.5 - Fix multiple CVEs in pyjwt, aiohttp, pyOpenSSL, multidict Tenable has extracted the preceding description block directly from the...