kernel security, bug fix, and enhancement update

5.14.0-687.52.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : kernel (ELSA-2026-70459)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70459 advisory. - crypto: afalg - Fix incorrect boolean values in afalgctx CKI Backport Bot RHEL-264235 CVE-2025-39964 - crypto: afalg - Disallow concurrent writes in...

Oracle Linux 9 : thunderbird (ELSA-2026-70642)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-70642 advisory. 140.16.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.16.0 - Add OpenELA debranding 140.16.0-1 - Update to 140.16.0 ESR...

Oracle Linux 7 : abrt (ELSA-2026-69121)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69121 advisory. - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenabl...

Oracle Linux 9 : unbound (ELSA-2026-71487)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71487 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap...

Oracle Linux 10 : openexr (ELSA-2026-69609)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69609 advisory. 3.1.10-8.4 - fix CVE-2026-68515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 9 : libxml2 (ELSA-2026-71585)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71585 advisory. - Fix CVE-2026-86144 RHEL-256304 - Fix CVE-2026-86140 RHEL-256027 - Fix CVE-2026-74860 RHEL-256120 - Fix CVE-2026-86142 RHEL-256365 - Fix CVE-2026-861...

Oracle Linux 8 : corosync (ELSA-2026-69277)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69277 advisory. 3.1.8-1.2 - Resolves: RHEL-251531 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665 Tenable has extracted the preceding description block...

Oracle Linux 10 : libxml2 (ELSA-2026-71586)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71586 advisory. - Fix CVE-2026-86144 RHEL-256302 - Fix CVE-2026-86140 RHEL-256024 - Fix CVE-2026-74860 RHEL-255957 - Fix CVE-2026-86142 RHEL-256368 - Fix...

Oracle Linux 9 : kernel (ELSA-2026-71232)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71232 advisory. - net: tun: bound receive headroom CKI Backport Bot RHEL-264401 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft CKI Backport Bot...

Oracle Linux 9 : perl-DBI (ELSA-2026-71422)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71422 advisory. 1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : postgresql:15 (ELSA-2026-69923)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69923 advisory. pgaudit 1.7.0-1 - Update to 1.7.0 - Support postgresql 15 - Related: 2128241 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release...

Oracle Linux 9 : postgresql (ELSA-2026-69607)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69607 advisory. - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - F...

Oracle Linux 9 : skopeo (ELSA-2026-70641)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70641 advisory. - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 Tenable has extracted the preceding description block directl...

Oracle Linux 7 : host-metering (ELSA-2026-53416)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53416 advisory. - Rebuild with latest go-toolset-1.19-golang to fix CVE-2026-27145 Orabug: 39863765 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : postgresql:16 (ELSA-2026-69876)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69876 advisory. - Fix CVE-2026-6464 - Fix CVE-2026-18408 - Fix CVE-2026-14669 Tenable has extracted the preceding description block directly from the Oracle Linux...

kernel security, bug fix, and enhancement update

5.14.0-687.51.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 8 : openssh (ELSA-2026-69266)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69266 advisory. - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for...

Oracle Linux 9 : postgresql:15 (ELSA-2026-69914)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69914 advisory. pgaudit 1.7.0-1 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: 2128410 pgrepack 1.4.8-2 - Add new buil...

Oracle Linux 9 : firefox (ELSA-2026-69462)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69462 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...