Oracle Linux 8 : ELSA-2026-62507-0: / gimp:2.8 (ELSA-2026-625070)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625070 advisory. - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18303 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-66758 - fix CVE-2026-18304 -...

Oracle Linux 8 : ELSA-2026-62425-0: / gegl (ELSA-2026-624250)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-624250 advisory. 0.2.0-40.1 - Fix local code execution vulnerability in rgbereadscanlines CVE-2026-18300 Resolves: RHEL-246592 Tenable has extracted the preceding description...

image-builder security update

72.0.0-1.0.1 - Adopt upstream image-builder 72.0.0 tarball and spec file Orabug: 39666668 - Adopt Oracle Linux Support merged upstream in PR 2404...

Oracle Linux 8 : ELSA-2026-62407-0: / grafana (ELSA-2026-624070)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-624070 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 - Resolves RHEL-219393: CVE-2026-42127 Tenable has extracted t...

Oracle Linux 8 : ELSA-2026-61248-0: / libxml2 (ELSA-2026-612480)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612480 advisory. 2.9.7-21.7 - Fix CVE-2026-11979 RHEL-215569 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : ELSA-2026-61586-0: / tar (ELSA-2026-615860)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-615860 advisory. - Backport upstream patches for CVE-2026-18477, fixes a bug where incremental restore with cyclic renames between backups may create a temporary...

Oracle Linux 9 : ELSA-2026-62170-0: / gegl04 (ELSA-2026-621700)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-621700 advisory. 0.4.62-1.2 - Fix CVE-2026-18300: bounds check in rgbereadscanlines Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 10 : ELSA-2026-61377-0: / nodejs24 (ELSA-2026-613770)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613770 advisory. 1:24.19.0-1.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.19.0-1 - Update to version 24.19.0 Tenable has extracte...

Oracle Linux 8 : ELSA-2026-62218-0: / libssh (ELSA-2026-622180)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622180 advisory. 0.9.6-17 - Backport CVE patches from 0.11.5 Resolves: RHEL-215677 Resolves: RHEL-215674 Resolves: RHEL-215680 Resolves: RHEL-215678 Resolves:...

Oracle Linux 8 : ELSA-2026-62571-0: / freerdp (ELSA-2026-625710)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625710 advisory. 2:2.11.7-12 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225093, RHEL-227724,...

Oracle Linux 10 : ELSA-2026-62578-0: / go-fdo-server (ELSA-2026-625780)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625780 advisory. 1.0.1-4 - Rebuild go-fdo-server against updated golang 1.0.1-3 - Rebuild against updated golang Tenable has extracted the preceding description bloc...

Oracle Linux 10 : ELSA-2026-61625-0: / gzip (ELSA-2026-616250)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-616250 advisory. 1.13-4 - Fix an issue with a temporary file creations when mktemp is missing 41991 - Fix a global buffer overflow vulnerability in the LZH...

Oracle Linux 10 : ELSA-2026-61680-0: / iperf3 (ELSA-2026-616800)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-616800 advisory. - Fix JSON value bounds checks in getparameters and iperfparsearguments CVE-2026-71217 Tenable has extracted the preceding description block directly from th...

Oracle Linux 10 : ELSA-2026-63022-0: / grafana (ELSA-2026-630220)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-630220 advisory. 10.2.6-28.5 - Rebuild against updated golang - Resolves RHEL-241197 - Resolves RHEL-241426 - Resolves RHEL-241690 - Resolves RHEL-241975 - Resolves...

Oracle Linux 10 : ELSA-2026-62614-0: / php (ELSA-2026-626140)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-626140 advisory. 8.3.33-1 - rebase to 8.3.33 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 10 : ELSA-2026-61340-0: / dbus-broker (ELSA-2026-613400)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-613400 advisory. 36-5 - Fix session bus denial of service via EMFILE during peer setup. Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : ELSA-2026-62219-0: / nodejs:22 (ELSA-2026-622190)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622190 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-235693 RHEL-235688 RHEL-235662 nodejs-nodemon - Rebase...

Oracle Linux 8 : ELSA-2026-60305-0: / go-toolset:ol8 (ELSA-2026-603050)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603050 advisory. delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG...

Oracle Linux 8 : ELSA-2026-62144-0: / wget (ELSA-2026-621440)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621440 advisory. - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Fix CVE-2026-58471: buffer overflow in convertfname - Fix CVE-2026-58472: integer and...

Oracle Linux 10 / 8 / 9 : microcode_ctl (ELSA-2026-500239)

The remote Oracle Linux 10 / 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500239 advisory. - Security advisories: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html CVE-2025-31936...