kernel security, bug fix, and enhancement update

6.12.0-211.37.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

PT-2026-63523

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description An issue exists in the Centralized Thirdparty Jars component of Oracle Platform Security for Java. A low privileged attacker...

Oracle Linux 10 : cifs-utils (ELSA-2026-32990)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-32990 advisory. 7.6-2 - resolves: RHEL-192935 - fix krb5 mount regression 7.6-1 - Update to version 7.6 - resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spne...

Oracle Linux 10 : nginx (ELSA-2026-19159)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19159 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

Oracle Linux 7 : python3 (ELSA-2026-35838)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35838 advisory. - Security update CVE-2026-4786 Orabug: 39695277 - Security update CVE-2026-4519 Orabug: 39246828 - Security update CVE-2025-15366, CVE-2025-15367, CVE-2026-12...

httpd:2.4 security, bug fix, and enhancement update

httpd 2.4.37-65.0.1.8 - Replace index.html with Oracle's index page oracleindex.html 2.4.37-65.8 - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 - Resolves: RHEL-175074 - httpd:2.4/httpd: NULL pointe...

Oracle Linux 10 : unbound (ELSA-2026-23231)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-23231 advisory. - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit te...

Oracle Linux 10 : git-lfs (ELSA-2026-19133)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19133 advisory. - Fix CVE-2026-39821 in vendored golang.org/x/net idna package Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : perl-IO-Compress (ELSA-2026-30843)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30843 advisory. 2.061-2.0.1 - Fix for CVE-2026-48962 Orabug: 39658885 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : golang (ELSA-2026-22120)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22120 advisory. 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1...

PT-2026-63526

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description An issue exists in the Centralized Thirdparty Jars component of Oracle Platform Security for Java. A low privileged attacker...

PT-2026-63525

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description An issue exists in the Centralized Thirdparty Jars component of Oracle Platform Security for Java. A low privileged attacker...

PT-2026-63519

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description An issue exists in the Centralized Thirdparty Jars component of Oracle Platform Security for Java. A low privileged attacker...

Oracle MySQL Cluster 8.4.x < 8.4.11 (July 2026 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are...

Oracle Linux 10 : podman (ELSA-2026-24386)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-24386 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

Oracle MySQL Cluster 8.0.x < 8.0.48 (July 2026 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are...

Oracle Linux 10 : git-lfs (ELSA-2026-30855)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30855 advisory. - Fix CVE-2026-39821 in vendored golang.org/x/net idna package Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : libxml2 (ELSA-2026-28234)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28234 advisory. - Fix CVE-2025-6170 RHEL-182007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 10 : yggdrasil (ELSA-2026-19126)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19126 advisory. 0.4.9.2-1 - Update yggdrasil to 0.4.9.2 0.4.9.1-1 - Update yggdrasil to 0.4.9.1 0.4.9-5 - Bump release for rebuild 0.4.9-4 - Bump release for rebuild...

Oracle Linux 9 : jackson-annotations, / jackson-core, / jackson-databind, / jackson-jaxrs-providers, / and / jackson-modules-base (ELSA-2026-40895)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-40895 advisory. jackson-annotations 2.21-1 - Update to version 2.21 - Resolves: RHEL-188300 jackson-core 2.21.4-1 - Update to version 2.21.4 - Resolves: RHEL-188300...