kernel security, bug fix, and enhancement update

6.12.0-211.43.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : gpsd (ELSA-2026-51075)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-51075 advisory. 3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459 Tenable has extracted...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500135)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500135 advisory. - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832878 CVE-2026-64561 - x86/bugs: Mak...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500136)

The remote Oracle Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500136 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832992 CVE-2026-68480 - xfs: resample the data fork...

Oracle Linux 8 : kernel (ELSA-2026-49857)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49857 advisory. - ipc: limit nextid allocation to the valid ID range Rafael Aquini RHEL-188216 CVE-2026-52923 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : osbuild-composer (ELSA-2026-22714)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22714 advisory. 175-1.0.1 - Track github upstream Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : thunderbird (ELSA-2026-49921)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49921 advisory. 140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR Tenab...

Oracle Linux 10 : ELSA-2026-50142-0: / sg3_utils (ELSA-2026-501420)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501420 advisory. 1.48-7.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188123 Tenable has extracted the preceding description block directly from the...

Oracle Linux 10 : ldns (ELSA-2026-49836)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49836 advisory. 1.8.3-18.1 - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient query-response matching RHEL-210690 Tenable has extracted the preceding...

Oracle Linux 8 : fence-agents (ELSA-2026-49927)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49927 advisory. 4.2.1-129.28 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178594 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : ldns (ELSA-2026-49520)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49520 advisory. - Fix CVE-2026-10846: validate DNS response source address, transaction ID, and query section matching Tenable has extracted the preceding description block...

Oracle Linux 9 : glibc (ELSA-2026-500131)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500131 advisory. - CVE-2026-5435 Out-of-bounds write via TSIG record processing RHEL-180336, RHEL-185614 - CVE-2026-5928: Fix ungetwc operating on byte stream...

Oracle Linux 8 : kernel (ELSA-2026-49214)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-49214 advisory. - net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle CKI Backport Bot RHEL-213300 CVE-2026-64530 - netfilter: ctnetlink: ensure safe access to...

Oracle Linux 10 : ELSA-2026-50144-0: / libgcrypt (ELSA-2026-501440)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501440 advisory. - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext Tenable has extracted the preceding description block directly from t...

Oracle Linux 9 : ELSA-2026-50108-0: / ldns (ELSA-2026-501080)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501080 advisory. 1.7.1-12.1 - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation RHEL-210701 Tenable has extracted the...

Oracle Linux 10 : php8.4 (ELSA-2026-49914)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49914 advisory. 8.4.23-1 - rebase to 8.4.23 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : ELSA-2026-50317-0: / fence-agents (ELSA-2026-503170)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-503170 advisory. - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : thunderbird (ELSA-2026-49922)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49922 advisory. 140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...

Oracle Linux 9 : ELSA-2026-50147-0: / libgcrypt (ELSA-2026-501470)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501470 advisory. 1.10.0-13 - Bump version to fix wrong build target. 1.10.0.12 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext Tenable...

Oracle Linux 10 : nodejs24 (ELSA-2026-48034)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48034 advisory. - Fix CVE-2026-13149 brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...