Oracle Linux 10 : galera / and / mariadb11.8 (ELSA-2026-19021)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19021 advisory. galera 26.4.25-1 - Rebased to 26.4.25 26.4.24-1 - Rebase to 26.4.24 26.4.23-1 - Rebase to 26.4.23 26.4.22-1 - Rebase to 26.4.22 26.4.21-2 - Add sysusers.d...

Oracle Linux 10 : freeipmi (ELSA-2026-19053)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19053 advisory. 1.6.17-1 - Update to 1.6.17 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 10 : buildah (ELSA-2026-19032)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19032 advisory. - Rebuild for new golang to address CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 10 : glibc (ELSA-2026-19061)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19061 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

Oracle Linux 10 : crun (ELSA-2026-19020)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19020 advisory. 1.27-2 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : openssh (ELSA-2026-19069)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19069 advisory. - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add...

python3 security update

3.6.8-77.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-77 - Security fix for CVE-2026-15308 Resolves: RHEL-193772...

Oracle Linux 10 : python-jwcrypto (ELSA-2026-19042)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19042 advisory. 1.5.6-5 - Fix CVE-2026-39373: Memory exhaustion via crafted compressed JWE tokens Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 10 : grafana (ELSA-2026-19027)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19027 advisory. 10.2.6-25 - Resolves RHEL-158484: CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-19049)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19049 advisory. - rebuilt to fix CVE-2026-27137, CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 9 : git-lfs (ELSA-2026-39319)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-39319 advisory. 3.7.1-4.2 - Rebuild with new Golang - Resolves: RHEL-187329 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : qemu-kvm (ELSA-2026-39311)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39311 advisory. 10.1.0-17.el98.4 - kvm-virtio-blk-add-missing-VIRTIOBLKTSCSICMD-size-ch.patch RHEL-184527 - Resolves: RHEL-184527 CVE-2026-48914 qemu-kvm: Heap buffer overflow...

Oracle Linux 10 : kernel (ELSA-2026-19074)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19074 advisory. - xfrm: esp: avoid in-place decrypt on shared skb frags CKI Backport Bot RHEL-174546 CVE-2026-43284 - crypto: authencesn - Do not place hiseq at end ...

Oracle Linux 10 : luksmeta (ELSA-2026-18421)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18421 advisory. 10-1 - Align to upstream release 10 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 10 : python-tornado (ELSA-2026-19034)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19034 advisory. 6.5.5-1 - Update to 6.5.5 Resolves: RHEL-160935 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 10 : podman (ELSA-2026-19017)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19017 advisory. - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE Tenable has extracted the preceding description block directly from the...

container-tools:ol8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-4 - switch source URL from GitHub to the internal GitLab sustaining-engineering repo - update to the latest content of release-1.33 commit 2cbee78 - bump golang.org/x/crypto to v0.53.0 to fix...

Oracle Linux 10 : skopeo (ELSA-2026-19031)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19031 advisory. - Rebuild for new golang to address CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 10 : sudo (ELSA-2026-19067)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19067 advisory. - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-164620 - CVE-2026-35535 sudo...

Oracle Linux 10 : firefox (ELSA-2026-19041)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19041 advisory. 140.10.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...