Oracle Linux 9 : sssd (ELSA-2026-42122)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42122 advisory. - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege...

Oracle Linux 9 : glibc (ELSA-2026-42952)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42952 advisory. - CVE-2026-5435 Out-of-bounds write via TSIG record processing RHEL-180336, RHEL-185614 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : tomcat9 (ELSA-2026-18536)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18536 advisory. - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks...

Oracle Linux 7 : poppler (ELSA-2026-30044)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-30044 advisory. - Fix for CVE-2026-10118 Orabug: 39637155 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : yggdrasil (ELSA-2026-24716)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-24716 advisory. 0.4.9.2-1 - Update yggdrasil to 0.4.9.2 0.4.9.1-1 - Update yggdrasil to 0.4.9.1 0.4.9-5 - Bump release for rebuild 0.4.9-4 - Bump release for rebuild...

Oracle Linux 10 : podman (ELSA-2026-18289)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18289 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

Oracle Linux 10 : vim (ELSA-2026-28210)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28210 advisory. - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete -...

Oracle Linux 10 : tomcat (ELSA-2026-18537)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18537 advisory. - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Paddi...

Oracle Linux 8 : kernel (ELSA-2026-42552)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42552 advisory. - RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss Gaurav Goklani RHEL-180153 CVE-2026-46117 Tenable has extracted the preceding...

Oracle Linux 10 : acl (ELSA-2026-42739)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42739 advisory. 2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186106 -...

kernel security, bug fix, and enhancement update

6.12.0-211.37.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : unbound (ELSA-2026-23231)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-23231 advisory. - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit te...

Oracle Linux 7 : python3 (ELSA-2026-35838)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35838 advisory. - Security update CVE-2026-4786 Orabug: 39695277 - Security update CVE-2026-4519 Orabug: 39246828 - Security update CVE-2025-15366, CVE-2025-15367, CVE-2026-12...

Oracle Linux 10 : cifs-utils (ELSA-2026-32990)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-32990 advisory. 7.6-2 - resolves: RHEL-192935 - fix krb5 mount regression 7.6-1 - Update to version 7.6 - resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spne...

Oracle Linux 10 : nginx (ELSA-2026-19159)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19159 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

Oracle Linux 10 : git-lfs (ELSA-2026-19133)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19133 advisory. - Fix CVE-2026-39821 in vendored golang.org/x/net idna package Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : perl-IO-Compress (ELSA-2026-30843)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30843 advisory. 2.061-2.0.1 - Fix for CVE-2026-48962 Orabug: 39658885 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : golang (ELSA-2026-22120)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22120 advisory. 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1...

Oracle Linux 10 : yggdrasil (ELSA-2026-19126)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19126 advisory. 0.4.9.2-1 - Update yggdrasil to 0.4.9.2 0.4.9.1-1 - Update yggdrasil to 0.4.9.1 0.4.9-5 - Bump release for rebuild 0.4.9-4 - Bump release for rebuild...

Oracle Linux 10 : libxml2 (ELSA-2026-28234)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28234 advisory. - Fix CVE-2025-6170 RHEL-182007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...