Oracle Linux 8 : ELSA-2026-65160-0: / thunderbird (ELSA-2026-651600)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651600 advisory. 140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...

Oracle Linux 9 : ELSA-2026-65606-0: / gpsd-minimal (ELSA-2026-656060)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-656060 advisory. 3.26.1-2.0.1.el98.2 - Replaced upstream reference Orabug: 35865525 1:3.26.1-2.el98.2 - fix another command injection in gpsprof CVE-2026-60122 Tenable has...

Oracle Linux 9 : ELSA-2026-64800-0: / glib2 (ELSA-2026-648000)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-648000 advisory. 2.68.4-19.10 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : ELSA-2026-65159-0: / thunderbird (ELSA-2026-651590)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651590 advisory. 140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

Oracle Linux 10 : ELSA-2026-65162-0: / gpsd (ELSA-2026-651620)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-651620 advisory. 3.26.1-3.0.1.el102.2 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.2 - fix another command injection in gpsprof CVE-2026-60122 Tenable has...

Oracle Linux 9 : ELSA-2026-64784-0: / 389-ds-base (ELSA-2026-647840)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647840 advisory. - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket...

kernel security, bug fix, and enhancement update

5.14.0-687.44.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : ELSA-2026-64807-0: / valkey (ELSA-2026-648070)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648070 advisory. 8.0.10-1 - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis Tenable has extracted the preceding description block directly...

Oracle Linux 10 : ELSA-2026-64787-0: / xz (ELSA-2026-647870)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647870 advisory. 1:5.6.2-4.1 - Fix: a buffer overflow in lzmaindexappend - Add test for the issue above needs a special build config to actually fail - does not fail in our...

Oracle Linux 10 : ELSA-2026-64788-0: / git-lfs (ELSA-2026-647880)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647880 advisory. 3.7.1-7 - Rebuild with new Golang 3.7.1-6 - Rebuild with new Golang Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : ELSA-2026-64810-0: / expat (ELSA-2026-648100)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648100 advisory. - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219: forbid XMLParserFree/Reset from handlers - expat:...

Oracle Linux 10 : ELSA-2026-64818-0: / skopeo (ELSA-2026-648180)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648180 advisory. 2:1.22.2-5 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 2:1.22.2-4 - re-add te...

Oracle Linux 10 : ELSA-2026-64785-0: / 389-ds-base (ELSA-2026-647850)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647850 advisory. - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket...

Oracle Linux 10 : ELSA-2026-64799-0: / glib2 (ELSA-2026-647990)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647990 advisory. - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58011: range validatio...

Oracle Linux 10 : ELSA-2026-64796-0: / valkey (ELSA-2026-647960)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647960 advisory. 8.0.11-1 - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis Tenable has extracted the preceding description block directly...

Oracle Linux 10 : glibc (ELSA-2026-42694)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42694 advisory. - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing RHEL-180652, RHEL-185612 Tenable has extracted the preceding description block...

Oracle Linux 9 : qemu-kvm (ELSA-2026-500245)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500245 advisory. - dmg: reject inconsistent UDRW chunk sector count and length CVE-2026-65928 Stefan Hajnoczi Orabug: 39849788 CVE-2026-65928 - dmg: fix out-of-bounds...

Oracle Linux 9 : ELSA-2026-62217-0: / libssh (ELSA-2026-622170)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622170 advisory. 0.10.4-19 - Backport CVE patches from 0.11.5 Resolves: RHEL-213033 Resolves: RHEL-213041 Resolves: RHEL-213047 Resolves: RHEL-213081 Resolves:...

kernel security, bug fix, and enhancement update

4.18.0-553.159.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...