kernel security, bug fix, and enhancement update

5.14.0-687.25.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 10 : unbound (ELSA-2026-18556)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18556 advisory. 1.24.2-7 - Recreate configure unconditionally 1.24.2-6 - Add byacc into BuildRequires 1.24.2-5 - Change the default of tls-use-system-policy-versions...

Oracle Linux 10 : python3.12 (ELSA-2026-19064)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19064 advisory. - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 -...

Oracle Linux 10 : crun (ELSA-2026-19020)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19020 advisory. 1.27-2 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : edk2 (ELSA-2026-18465)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18465 advisory. - Resolves: RHEL-134956 CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution rhel-10.2 - Resolves: RHEL-115880 CVE-2025-9230...

Oracle Linux 10 : sudo (ELSA-2026-19067)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19067 advisory. - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-164620 - CVE-2026-35535 sudo...

kernel security update

4.18.0-553.144.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

container-tools:ol8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-4 - switch source URL from GitHub to the internal GitLab sustaining-engineering repo - update to the latest content of release-1.33 commit 2cbee78 - bump golang.org/x/crypto to v0.53.0 to fix...

Oracle Linux 10 : delve (ELSA-2026-19013)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19013 advisory. 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update Delve to version 1.26.1 Tenable has extracted the precedin...

Oracle Linux 10 : libssh (ELSA-2026-18160)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18160 advisory. 0.12.0-2 - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 0.12.0-1 - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825,...

Oracle Linux 10 : freerdp (ELSA-2026-19033)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19033 advisory. - Update CLEARVBARENTRY size after alloc CVE-2026-33984 - Fail progressiverfxquantsub on invalid values CVE-2026-33983 Resolves: RHEL-162947,...

Oracle Linux 9 : qemu-kvm (ELSA-2026-39311)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39311 advisory. 10.1.0-17.el98.4 - kvm-virtio-blk-add-missing-VIRTIOBLKTSCSICMD-size-ch.patch RHEL-184527 - Resolves: RHEL-184527 CVE-2026-48914 qemu-kvm: Heap buffer overflow...

Oracle Linux 9 : nginx (ELSA-2026-36331)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36331 advisory. - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055...

Oracle Linux 9 : vim (ELSA-2026-38511)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38511 advisory. - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete ...

go-toolset:ol8 security, bug fix, and enhancement update

delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 golang 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var - Backported from OL9u7 - Resolves: OLDIS-53586 1.26.5-1 - Update to Go 1.26.5 fips-1 ...

Oracle Linux 8 : freerdp (ELSA-2026-38501)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38501 advisory. 2:2.11.7-10 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186983 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : podman (ELSA-2026-38878)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38878 advisory. - rebuild for CVE-2026-39822 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : openssl (ELSA-2026-38503)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38503 advisory. 1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165783 Tenable has extract...

Oracle Linux 9 : buildah (ELSA-2026-38493)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38493 advisory. - rebuild for CVE-2026-39822 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

kernel update

4.18.0-553.143.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...