12010 matches found
Oracle Linux 10 : nginx (ELSA-2026-36364)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36364 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...
Oracle Linux 10 : sssd (ELSA-2026-41937)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41937 advisory. - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole Tenable has extracted the precedi...
Oracle Linux 10 : podman (ELSA-2026-38495)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38495 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...
Oracle Linux 10 : python3.12 (ELSA-2026-39183)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39183 advisory. 3.12.13-2.0.1.el102.1 - Remove upstream URL reference 3.12.13-2.1 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 Tenable has extracted the preceding...
Oracle Linux 10 : tomcat (ELSA-2026-36788)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36788 advisory. - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Paddi...
Oracle Linux 9 : dovecot (ELSA-2026-41905)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41905 advisory. 1:2.3.16-18.1 - fix CVE-2026-42006: IMAP parser listcountlimit bypass via open parentheses RHEL-188468 Tenable has extracted the preceding description block...
Oracle Linux 8 : glib2 (ELSA-2026-42090)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-42090 advisory. - Add patch for CVE-2026-58016 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 Tenable has extracted the preceding description...
Oracle Linux 10 : .NET / 8.0 (ELSA-2026-41893)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41893 advisory. 8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 8.0.128-2 - Reduce tim...
Oracle Linux 9 : plexus-utils (ELSA-2026-38796)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-38796 advisory. 3.3.0-14 - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165350 Tenable has extracted the preceding description block directly...
Oracle Linux 10 : plexus-utils (ELSA-2026-38514)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38514 advisory. 3.5.1-9 - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165336 Tenable has extracted the preceding description block directly...
Oracle Linux 10 : fence-agents (ELSA-2026-19138)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19138 advisory. - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 Tenab...
Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-19125)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19125 advisory. - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolve...
Oracle Linux 10 : postgresql18 (ELSA-2026-27742)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-27742 advisory. 18.4-1.0.1 - Replace upstream reference 18.4-1 - Update to 18.4 - Fix CVE-2026-6478 Tenable has extracted the preceding description block directly fr...
Oracle Linux 10 : libtiff (ELSA-2026-41892)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41892 advisory. - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 RHEL-189374 - make sure documentation is updated during build fo...
.NET 9.0 security, bug fix, and enhancement update
9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 9.0.118-2 - Reduce time to detect hanging builds - Resolves: RHEL-191644...
.NET 10.0 security, bug fix, and enhancement update
10.0.110-1.0.1 - Add support for Oracle Linux 10.0.110-1 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 10.0.109-2 - Reduce time to detect hanging builds - Resolves: RHEL-191640...
.NET 10.0 security, bug fix, and enhancement update
10.0.110-1.0.1 - Add support for Oracle Linux 10.0.110-1 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 10.0.109-2 - Reduce time to detect hanging builds - Resolves: RHEL-191641...
.NET 9.0 security, bug fix, and enhancement update
9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 9.0.118-2 - Reduce time to detect hanging builds - Resolves: RHEL-191646...
kernel security update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...