Oracle Linux 7 : ELSA-2026-61657-0: / compat-libtiff3 (ELSA-2026-616570)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-616570 advisory. - Backport fix for CVE-2026-12912 Orabug: 39957703 - Backport fix for CVE-2026-4775 Orabug: 39535879 Tenable has extracted the preceding description block...

Oracle Linux 9 : rpcbind (ELSA-2026-83562)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-83562 advisory. - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows...

Oracle Linux 10 : rpcbind (ELSA-2026-83561)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-83561 advisory. 1.2.7-3.1 - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics...

Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2026-67861)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67861 advisory. - Backport fix for CVE-2026-19387 Orabug: 40030729 - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 - Security update for CVE-2026-52720...

Oracle Linux 9 : hplip (ELSA-2026-82882)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82882 advisory. 3.26.6-1.3 - Fix LEDM scanning 3.26.6-1.2 - fix OSH issues 3.26.6-1.1 - really fix missing /var/lib/hp 3.26.6-1 - Rebase to 3.26.6 3.21.2-6.6 -...

Oracle Linux 8 : lrzsz (ELSA-2026-83525)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-83525 advisory. - Backport tightened path handling from 0.13.1 CVE-2026-105840 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : ghostscript (ELSA-2026-83552)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83552 advisory. - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading...

Oracle Linux 9 : kernel (ELSA-2026-81552)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81552 advisory. - nvmet-auth: Synchronize timeout work during SQ teardown CKI Backport Bot RHEL-276348 CVE-2026-89970 - drm/amdkfd: Add TLB flush after MES queue...

Oracle Linux 8 : hplip (ELSA-2026-82295)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82295 advisory. 3.26.6-3 - Fix LEDM scanning 3.26.6-2 - fix OSH issues 3.26.6-1 - Rebase to 3.26.6 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500385)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500385 advisory. - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - landlock: Require...

Oracle Linux 8 : OpenEXR (ELSA-2026-82345)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82345 advisory. - fix CVE-2026-59184 - fix CVE-2026-59981 - fix CVE-2026-59189 - fix CVE-2026-59186 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : pcre2 (ELSA-2026-81532)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81532 advisory. 10.40-7.0.1 - Add post script to resolve Regex version mismatch Orabug: 34742224 10.40-7 - Backport multiple CVE fixes - CVE-2026-86145, CVE-2026-8915...

Oracle Linux 10 : kernel (ELSA-2026-81406)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81406 advisory. - nvmet-auth: Synchronize timeout work during SQ teardown CKI Backport Bot RHEL-276363 CVE-2026-89970 - thermal: core: Fix thermal zone device...

Oracle Linux 8 : emacs (ELSA-2026-80506)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80506 advisory. - Fix TRAMP user name shell injection vulnerability CVE-2026-79992 - Fix integer overflow in PBM image loader CVE-2026-77219 Tenable has extracted the...

kernel security update

5.14.0-687.57.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : librabbitmq (ELSA-2026-82094)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82094 advisory. 0.11.0-7.1 - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service rhel-8.10.z to denial of service rhel-8.10.z Resolves:...

Oracle Linux 9 : kernel (ELSA-2026-77689)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77689 advisory. - nfsd: defer vfree of compound ops to fix rpcstatus UAF Roberto Bergantinos Corpas RHEL-264950 CVE-2026-89690 - svcrdma: Reject inline replies that...

Oracle Linux 9 : curl (ELSA-2026-80511)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80511 advisory. - fix cookie injection via trailing dot super cookies CVE-2026-8924 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : libxml2 (ELSA-2026-80675)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80675 advisory. 2.9.7-21.10 - Fix CVE-2026-86144 RHEL-269184 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : perl-DBI (ELSA-2026-77576)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-77576 advisory. 1.641-4 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting...