Oracle Linux 8 : nginx:1.24 (ELSA-2026-59216)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59216 advisory. - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-21930...

Oracle Linux 9 : nginx:1.26 (ELSA-2026-59496)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59496 advisory. - Fixes CVE-2026-56434 and CVE-2026-60005 - nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-176218 - nginx:1.26/nginx: NGIN...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59972)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59972 advisory. 1.26.7-2.8 - Fix use-after-free vulnerability in RTP SBC depayloader CVE-2026-18299 Resolves: RHEL-246613 Tenable has extracted the preceding description bloc...

Oracle Linux 9 : ELSA-2026-60215-0: / assertj-core (ELSA-2026-602150)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-602150 advisory. - Fix CVE-2026-24400: prevent XXE attacks in XmlStringPrettyFormatter Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : pam (ELSA-2026-59379)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59379 advisory. 1.6.1-9.1 - pamuserdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191704 Tenable has extracted the preceding description block...

Oracle Linux 10 : attr (ELSA-2026-59380)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59380 advisory. 2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128 Tenable has extracted...

kernel security, bug fix, and enhancement update

4.18.0-553.158.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2026-59487)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59487 advisory. 1.16.1-6.0.1.el810.1 - Update origin URL Orabug: 36209826 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576 Tenable has extracted the preceding...

Oracle Linux 8 : abrt (ELSA-2026-54272)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54272 advisory. - Resolves: CVE-2026-54229 - Resolves: CVE-2026-54228 - Resolves: CVE-2026-54231 - Resolves: CVE-2026-54230 Tenable has extracted the preceding...

Oracle Linux 7 : ELSA-2026-50117-0: / xorg-x11-server (ELSA-2026-501170)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501170 advisory. - Security update for CVE-2026-55999 Orabug: 39831768 - Security update for CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260...

Oracle Linux 9 : httpd (ELSA-2026-59347)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59347 advisory. - Resolves: RHEL-190807 - httpd: use-after-free in modldap uldapconnectionfind via per-directory client cert list CVE-2026-29167 - Resolves: RHEL-192752 -...

Oracle Linux 9 : mod_http2 (ELSA-2026-59387)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-59387 advisory. 2.0.26-6.2 - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in modhttp2 Tenable has extracted the preceding description block...

Oracle Linux 10 : ELSA-2026-60004-0: / httpd (ELSA-2026-600040)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-600040 advisory. - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration...

Oracle Linux 10 : polkit (ELSA-2026-59997)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59997 advisory. 125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after...

Oracle Linux 10 : nodejs24 (ELSA-2026-58819)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58819 advisory. - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : sqlite (ELSA-2026-58936)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58936 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : python-pyasn1 (ELSA-2026-59242)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59242 advisory. - Fix CVE-2026-59886: prevent overflow in Real type float conversion Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : python-urwid (ELSA-2026-58562)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58562 advisory. - Use secure random session identifiers in web display CVE-2026-9323 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : python-urwid (ELSA-2026-58952)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58952 advisory. - Fix CVE-2026-9323: use cryptographically secure session identifiers in web display module Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2026-59179)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59179 advisory. - Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover Resolves: RHEL-246382 - Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decode...