Oracle Linux 9 : .NET / 9.0 (ELSA-2026-55856)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55856 advisory. 9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 Tenable has extracted t...

Oracle Linux 9 : haproxy (ELSA-2026-55772)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-55772 advisory. - Fix NULL pointer dereference in hpackdhtinsert CVE-2026-55204 Resolves: RHEL-211082 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : gstreamer1-plugins-bad-free / and / gstreamer1-plugins-ugly-free (ELSA-2026-55865)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55865 advisory. - Fix ADPCM decoder negotiation and input size check CVE-2026-19387 Resolves: RHEL-235496 gstreamer1-plugins-ugly-free Tenable has extracted the...

Oracle Linux 9 : unbound (ELSA-2026-55841)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55841 advisory. 1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : libXfont2 (ELSA-2026-55447)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55447 advisory. - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221957 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : 389-ds-base (ELSA-2026-55423)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55423 advisory. - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-9.8.z - Resolves:...

Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2026-55436)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55436 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 Tenable has extracted the preceding description block...

Oracle Linux 9 : kernel (ELSA-2026-54443)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54443 advisory. - net/sched: actapi: use RCU with deferred freeing for action lifecycle CKI Backport Bot RHEL-218181 CVE-2026-53264 Tenable has extracted the precedin...

Oracle Linux 9 : dracut (ELSA-2026-54571)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54571 advisory. 057-120.git20260728.0.1 - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. Orabug: 38705580 - Ship...

Oracle Linux 9 : freerdp (ELSA-2026-54487)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54487 advisory. 2:2.11.7-7.5 - Backport several CVE fixes CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves: RHEL-213169, RHEL-222785,...

Oracle Linux 9 : iscsi-initiator-utils (ELSA-2026-53844)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53844 advisory. - fix CVE-2026-44943: path traversal via IQN names in discovery - fix CVE-2026-44944: iscsiuio socket credential verification bypass - fix...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-54574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54574 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 Tenable has extracted t...

Oracle Linux 9 : python-idna (ELSA-2026-54484)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54484 advisory. 2.10-8 - Security fix for CVE-2026-45409 Resolves: RHEL-215653 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : openssh (ELSA-2026-47756)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47756 advisory. - CVE-2026-59996: Fix remote glob result of '..' causing files to be placed in unintended parent directories when scp performs remote-to-remote copy v...

Oracle Linux 9 : nghttp2 (ELSA-2026-54662)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54662 advisory. 1.43.0-6.2 - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 Tenable has extracted the...

Oracle Linux 9 : grafana (ELSA-2026-54184)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54184 advisory. - fix CVE-2026-42127: cap request body size and validate public dashboard access Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : python3.9 (ELSA-2026-54268)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54268 advisory. - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 Tenable has extracted the preceding description...

Oracle Linux 9 : kernel (ELSA-2026-53329)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53329 advisory. - mm/slab: do not limit zeroing to origsize when only red zoning is enabled Rafael Aquini RHEL-223404 CVE-2026-64368 - net: openvswitch: reject...

Oracle Linux 9 : isns-utils (ELSA-2026-53847)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53847 advisory. 0.101-4.1 - Fix CVE-2026-55995: prevent double-free in attrs.c error paths Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2026-53452)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53452 advisory. 1.22.12-7.2 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 Tenable...