Oracle Linux 9 : nodejs:24 (ELSA-2026-73838)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73838 advisory. - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 10 : freerdp (ELSA-2026-73979)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73979 advisory. - Abort after PROTOCOLFAILEDNEGO CVE-2026-91949 Resolves: RHEL-264913 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : kernel (ELSA-2026-71329)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71329 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 10 : gawk (ELSA-2026-73429)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73429 advisory. 5.3.0-6.1 - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467...

Oracle Linux 9 : kernel (ELSA-2026-72623)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72623 advisory. - arm64: tlb: Flush walk cache when unsharing PMD tables Rafael Aquini RHEL-259312 CVE-2026-63875 - perf: Reject exited events as group leaders Anubha...

Oracle Linux 9 : ruby (ELSA-2026-72286)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72286 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing T...

Oracle Linux 9 : gawk (ELSA-2026-73512)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73512 advisory. 5.1.0-6.1 - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467...

Oracle Linux 7 : freerdp (ELSA-2026-68707)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68707 advisory. - Backport fix for CVE-2026-55192 Orabug: 40040632 - Backport fix for CVE-2026-55194 Orabug: 40040632 - Backport fix for CVE-2026-64624 Orabug: 399648...

Oracle Linux 10 : thunderbird (ELSA-2026-73130)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-73130 advisory. 140.16.0-1.0.1 - Add Oracle prefs 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolve...

Oracle Linux 10 : ruby (ELSA-2026-72785)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72785 advisory. 3.3.12-15 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252031 Tenable has extracted the preceding descripti...

Oracle Linux 8 : ELSA-2026-67148-0: / osbuild-composer (ELSA-2026-671480)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671480 advisory. 101.5-3.0.1 - go.mod: update github.com/labstack/echo/v4 to v4.15.3 Resolves: RHEL-213908 - go.mod: update go.opentelemetry.io/otel to v1.44.0...

Oracle Linux 8 : firefox (ELSA-2026-71652)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-71652 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.16.0-1...

Oracle Linux 7 : ELSA-2026-62231-0: / libXfont2 (ELSA-2026-622310)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622310 advisory. - Backport fix for CVE-2026-44950 Orabug: 39960840 - Backport fix for CVE-2026-59679 Orabug: 39960840 Tenable has extracted the preceding description...

Oracle Linux 8 : perl-DBI (ELSA-2026-71608)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71608 advisory. 1.641-3 - Force placeholder limit on :N and :pN placeholders CVE-2026-73194 Resolves: RHEL-247320 Tenable has extracted the preceding description block directl...

Oracle Linux 10 : python-cryptography (ELSA-2026-71658)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71658 advisory. 43.0.0-4 - Fix CVE-2026-69249: add X.509 signature validation budget Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : expat (ELSA-2026-72663)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72663 advisory. - Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-72485)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72485 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252039 - Fix DoS via crafted IMAP responses in net-imap...

Oracle Linux 10 : openssh (ELSA-2026-69129)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69129 advisory. - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 -...

Oracle Linux 7 : ELSA-2026-61234-0: / xmlrpc-c (ELSA-2026-612340)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612340 advisory. 1.32.5-1905.0.1.svn2451 - Backport fix for CVE-2026-15928 Orabug: 39957695 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 9 : resteasy (ELSA-2026-72424)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72424 advisory. 3.0.26-20 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 Tenable has extracted the preceding description block...