Oracle Linux 9 : skopeo (ELSA-2026-36317)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36317 advisory. - Rebuild for golang = 1.26.4 to fix CVE-2026-27145 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : cups (ELSA-2026-36733)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36733 advisory. 1:2.2.6-68 - RHEL-177947 CVE-2026-34980 cups: control character injection in option values Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2026-36774)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36774 advisory. 1.16.1-7 - Fix integer overflow vulnerabilities in wavpackdec CVE-2026-53705 Resolves: RHEL-184473 Tenable has extracted the preceding description block direct...

Oracle Linux 8 : libxml2 (ELSA-2026-36734)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36734 advisory. 2.9.7-21.6 - Fix CVE-2025-6170 RHEL-182012 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : libyang (ELSA-2026-25051)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25051 advisory. 2.1.148-1.1 - Fix integer overflow and OOM in LYB parser string/value reading - Resolves: RHEL-177019 Tenable has extracted the preceding description block...

Oracle Linux 9 : kernel (ELSA-2026-33285)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33285 advisory. - tcp: fix potential race in tcpv6synrecvsock Paolo Abeni RHEL-174243 CVE-2026-43198 - crypto: tegra - Add missing CRYPTOALGASYNC Vladislav Dronov...

Oracle Linux 7 : xorg-x11-server (ELSA-2026-20590)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20590 advisory. - Security update for CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 Orabug: 39440282 - Security update for CVE-2025-62229...

Oracle Linux 8 : python-urllib3 (ELSA-2026-36732)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36732 advisory. 1.24.2-10 - Security fix for CVE-2026-44431 Resolves: RHEL-184858 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : python3.14-pip (ELSA-2026-36315)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36315 advisory. 25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion +...

Oracle Linux 9 : openssl (ELSA-2026-50379)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50379 advisory. 3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: ad...

Oracle Linux 8 : freeipmi (ELSA-2026-36307)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36307 advisory. 1.6.18-1 - Update to 1.6.18, fixes CVE-2026-50031 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : compat-openssl10 (ELSA-2026-36215)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36215 advisory. 1.1.0-2o-4.3 - Fix CVE-2026-45447: Fix double-free of caller-owned BIO in PKCS7verify Tenable has extracted the preceding description block directly from the...

kernel security, bug fix, and enhancement update

5.14.0-687.20.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : grafana (ELSA-2026-35828)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35828 advisory. - Resolves RHEL-183803: CVE-2026-39821 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 9 : freeipmi (ELSA-2026-36210)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36210 advisory. 1.6.18-1 - Update to 1.6.18, fixes CVE-2026-50031 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : perl-HTTP-Daemon (ELSA-2026-36187)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36187 advisory. - Fix CVE-2026-8450: sendfile shell-magic injection via 2-arg open Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 9 : grafana-pcp (ELSA-2026-35829)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-35829 advisory. - Resolves RHEL-183820: CVE-2026-39821 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

kernel security, bug fix, and enhancement update

5.14.0-687.19.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

container-tools:ol8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 2:1.10.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 2:1.9.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 - Related:...

Oracle Linux 8 : grafana-pcp (ELSA-2026-35831)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-35831 advisory. - Resolves RHEL-183733: CVE-2026-39821 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...