Oracle Linux 9 : ELSA-2026-61240-0: / pipewire (ELSA-2026-612400)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612400 advisory. - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : ELSA-2026-60224-0: / pam (ELSA-2026-602240)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-602240 advisory. 1.5.1-28.0.1.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36406534 1.5.1-28.1 - pamuserdb: fix password comparison timing leak. Resolves:...

Oracle Linux 9 : ELSA-2026-61386-0: / nodejs:24 (ELSA-2026-613860)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613860 advisory. - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : xorg-x11-server (ELSA-2026-38487)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38487 advisory. 1.20.11-28.3 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191504 Tenable has extracted the preceding description block...

Oracle Linux 9 : ELSA-2026-61623-0: / gzip (ELSA-2026-616230)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-616230 advisory. 1.12-2 - Fix an issue with a temporary file creations when mktemp is missing 41991 - Fix a global buffer overflow vulnerability in the LZH...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-38489)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38489 advisory. 24.1.9-4.3 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191518 Resolves:...

Oracle Linux 8 : ELSA-2026-61242-0: / mingw-sqlite (ELSA-2026-612420)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612420 advisory. 3.26.0.0-3 - Fix CVE-2026-11822 CVE-2026-11824 Resolves: RHEL-218233 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : ELSA-2026-61766-0: / glib2 (ELSA-2026-617660)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-617660 advisory. - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: rang...

Oracle Linux 10 : ELSA-2026-61376-0: / nodejs22 (ELSA-2026-613760)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613760 advisory. 1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : ELSA-2026-60394-0: / libxml2 (ELSA-2026-603940)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-603940 advisory. 2.12.5-10.3 - Fix CVE-2026-11979 RHEL-215571 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 10 : ELSA-2026-60306-0: / golang (ELSA-2026-603060)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603060 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 Tenable has extracted the preceding...

Oracle Linux 8 : kernel (ELSA-2026-59821)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59821 advisory. - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page Maurizio Lombardi RHEL-219613 CVE-2026-64320 - i2c: stub: Reject I2C block...

Oracle Linux 8 : ELSA-2026-60329-0: / mingw-openssl (ELSA-2026-603290)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-603290 advisory. - Fix CVE-2024-5535 SSLselectnextproto buffer overread Resolves: RHEL-45673 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : ELSA-2026-60226-0: / attr (ELSA-2026-602260)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-602260 advisory. 2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186121 Tenable has extracted...

Oracle Linux 9 : kernel (ELSA-2026-59723)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59723 advisory. - net: ipv6: clear suppressed fib6 rule result Paolo Abeni RHEL-246347 CVE-2026-74581 - i2c: stub: Reject I2C block transfers with invalid length CKI...

USN-8659-4: Linux kernel (Oracle) vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...

USN-8659-4 linux-oracle vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...

Oracle Linux 10 : assertj-core (ELSA-2026-59372)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59372 advisory. - Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : nginx:1.26 (ELSA-2026-59496)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59496 advisory. - Fixes CVE-2026-56434 and CVE-2026-60005 - nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-176218 - nginx:1.26/nginx: NGIN...

Oracle Linux 8 : sqlite (ELSA-2026-58938)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58938 advisory. 3.26.0-21 - Fixes CVE-2026-11822 and CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security...