Oracle Linux 9 : librabbitmq (ELSA-2026-82094)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82094 advisory. 0.11.0-7.1 - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service rhel-8.10.z to denial of service rhel-8.10.z Resolves:...

Oracle Linux 8 : emacs (ELSA-2026-80506)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80506 advisory. - Fix TRAMP user name shell injection vulnerability CVE-2026-79992 - Fix integer overflow in PBM image loader CVE-2026-77219 Tenable has extracted the...

Oracle Linux 9 : thunderbird (ELSA-2026-80694)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80694 advisory. 140.17.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.17.0 - Add OpenELA debranding 140.17.0-1 - Update to 140.17.0 ESR Tenab...

Oracle Linux 8 : perl-DBI (ELSA-2026-77576)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-77576 advisory. 1.641-4 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting...

kernel security update

5.14.0-687.57.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-80514)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80514 advisory. - Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-265517 Tenable has extracted the preceding...

Oracle Linux 10 : thunderbird (ELSA-2026-80674)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80674 advisory. 140.17.0-1.0.1 - Add Oracle prefs 140.17.0-1 - Update to 140.17.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : kernel (ELSA-2026-77498)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77498 advisory. - svcrdma: Reject inline replies that overflow the pull-up buffer Roberto Bergantinos Corpas RHEL-187743 CVE-2026-89530 - packet: use consistent...

Oracle Linux 8 : compat-openssl10 (ELSA-2026-80510)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80510 advisory. 1:1.0.2o-4.4 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Tenable has extracted the preceding description block directl...

kernel security, bug fix, and enhancement update

5.14.0-687.56.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 10 : python3.12 (ELSA-2026-77020)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77020 advisory. - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fi...

Oracle Linux 8 : nodejs:24 (ELSA-2026-74085)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74085 advisory. - Update to version 24.21.0 Fix: CVE-2026-85152 CVE-2026-84961 CVE-2026-19534 Resolves: RHEL-255252 RHEL-255291 RHEL-255313 RHEL-249188 - deps: update...

Oracle Linux 8 : bind (ELSA-2026-79162)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-79162 advisory. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent crash on wildcard responses containing both NSEC and NSEC3...

Oracle Linux 10 : dogtag-pki (ELSA-2026-77648)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-77648 advisory. 11.9.0-6.0.1 - Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version. 11.9.0-8 - Update jackson bundled to 2.21.6 - Resolves:...

Oracle Linux 8 : firefox (ELSA-2026-76850)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-76850 advisory. 140.17.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.17.0 -...

Oracle Linux 8 : tftp (ELSA-2026-78952)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-78952 advisory. 5.2-28 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260620 Tenable has extracted the preceding description block direct...

Oracle Linux 10 : kernel (ELSA-2026-75576)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75576 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257773 CVE-2026-72099 - net: mana: Fix TOCTOU double-fetch of hwcmsgid from DM...

Oracle Linux 9 : python3.14 (ELSA-2026-77021)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77021 advisory. - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix...

Oracle Linux 10 : dovecot (ELSA-2026-79371)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-79371 advisory. - fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock RHEL-251984 - fix CVE-2026-42007: fix...

Oracle Linux 10 : sssd (ELSA-2026-77534)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-77534 advisory. - Resolves: RHEL-257112 - CVE-2026-87853 sssd: IDP prefix-match bypass in evalaccesstokenbuf - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP...