kernel security update

4.18.0-553.164.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security, bug fix, and enhancement update

5.14.0-687.49.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 8 : kernel (ELSA-2026-68531)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68531 advisory. - net: qrtr: fix 32-bit integer overflow in qrtrendpointpost Izabela Bakollari RHEL-244096 CVE-2026-72298 - ipv6: sit: reload inner IPv6 header after...

Oracle Linux 9 : kernel (ELSA-2026-68570)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68570 advisory. - selinux: check connect-related permissions on TCP Fast Open CKI Backport Bot RHEL-258014 CVE-2026-72243 - wifi: mac80211: limit injected antenna ind...

Oracle Linux 8 : python-lxml (ELSA-2026-67943)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-67943 advisory. - Security fix for CVE-2026-49825: missing xlink:href in known HTML link attributes Resolves: RHEL-251508 - Security fix for CVE-2021-43818 Resolves: rhbz20325...

Oracle Linux 9 : postgresql:18 (ELSA-2026-67848)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67848 advisory. - Fix backport regression in STFromFlatGeobufToTable CVE-2026-73515 patch - Backported a patch to fix a security vulnerability CVE-2026-73515 Tenable...

Oracle Linux 10 : libsoup3 (ELSA-2026-68235)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68235 advisory. - Fix CVE-2026-85197: http2 crash after connection destroyed - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Fix CVE-2026-15709:...

kernel security, bug fix, and enhancement update

6.12.0-211.56.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : libevent (ELSA-2026-67909)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67909 advisory. - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 Tenable has extracted the...

Oracle Linux 8 : libsoup (ELSA-2026-68266)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68266 advisory. 2.62.3-15 - Backport patch for CVE-2026-15711 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : libevent (ELSA-2026-67910)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67910 advisory. - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 Tenable has extracted the...

Oracle Linux 8 : .NET / 8.0 (ELSA-2026-68316)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68316 advisory. 8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252244 Tenable has extracted the...

Oracle Linux 9 : postgresql:16 (ELSA-2026-67491)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67491 advisory. - Fix CVE-2026-73515 - Fix CVE-2026-73515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-68233)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68233 advisory. 9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252274 Tenable has extracted t...

Oracle Linux 9 : unbound (ELSA-2026-68292)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68292 advisory. - Backport additional fix from 1.26.0 CVE-2026-50252 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : libsoup (ELSA-2026-68234)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68234 advisory. - Fix CVE-2026-15711: Reject oversized WebSocket control frames Tenable has extracted the preceding description block directly from the Oracle Linux...

.NET 8.0 security, bug fix, and enhancement update

8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252244...

.NET 9.0 security, bug fix, and enhancement update

9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252274...

.NET 10.0 security, bug fix, and enhancement update

10.0.112-1.0.1 - Add support for Oracle Linux 10.0.112-1 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252315...

Oracle Linux 10 : openssl (ELSA-2026-500326)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500326 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...