sudo security update

1.8.23-10.0.3.3 - Security update for CVE-2026-35535 Orabug: 39320917 1.8.23-10.0.1.3 - CVE-2025-32462 sudo: LPE via host option Orabug: 38187299...

libarchive security update

3.1.2-14.0.3 - Fix CVE-2026-4424 CVE-2026-5121 Orabug: 39219508 3.1.2-14.0.1 - rar: Fix double free Orabug: 38364091CVE-2025-5914...

Oracle Linux 7 : ruby (ELSA-2026-37397)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37397 advisory. 2.0.0.648-39.0.1 - Fix CVE-2026-42246 and CVE-2026-42258 Orabug: 39711420 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 10 : kernel (ELSA-2026-33685)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33685 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Oracle Linux 10 : kernel (ELSA-2026-51295)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-51295 advisory. 6.12.0-211.44.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2026-47176)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47176 advisory. - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : ruby:4.0 (ELSA-2026-50827)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50827 advisory. ruby 4.0.6-34 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 rubygem-mysql2 0.5.7-1 - Upgrade to mysql2 0.5.7. Related:...

Oracle Linux 8 : ruby:3.3 (ELSA-2026-50728)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50728 advisory. ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 rubygem-abrt rubygem-mysql2 rubygem-pg Tenable has extracted the...

ruby security update

2.0.0.648-39.0.1 - Fix CVE-2026-42246 and CVE-2026-42258 Orabug: 39711420...

Oracle Linux 8 : kernel (ELSA-2026-50978)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50978 advisory. - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Dennis Chen RHEL-188786 CVE-2025-54518 Tenable has extracted the preceding...

Oracle Linux 9 : gpsd-minimal (ELSA-2026-51153)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-51153 advisory. - fix command injection in gpsprof CVE-2026-58459 - fix buffer overflow in NMEA2000 driver CVE-2025-67268 Tenable has extracted the preceding description block...

Oracle Linux 9 : php:8.3 (ELSA-2026-48197)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-48197 advisory. php 8.3.32-1 - rebase to 8.3.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis...

Oracle Linux 8 : glibc (ELSA-2026-500140)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500140 advisory. - CVE-2026-5435 Out-of-bounds write via TSIG record processing RHEL-181724 - CVE-2026-5928: Fix ungetwc operating on byte stream RHEL-181725 -...

kernel security, bug fix, and enhancement update

6.12.0-211.44.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 9 : kernel (ELSA-2026-51035)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-51035 advisory. - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup Waiman Long RHEL-193526 CVE-2026-52977 - futex: Require sysfutexrequeue to have...

Oracle Linux 7 : gnutls (ELSA-2026-34372)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-34372 advisory. 3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 Orabug: 39674042 Tenable ha...

Oracle Linux 10 : freerdp (ELSA-2026-50747)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50747 advisory. - Add codecID checks for CACHEBITMAPV3ORDER CVE-2026-55827 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : kernel (ELSA-2026-27288)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-27288 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Oracle Linux 10 : gpsd (ELSA-2026-51075)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-51075 advisory. 3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459 Tenable has extracted...

kernel security, bug fix, and enhancement update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...