Oracle Linux 10 : libpng (ELSA-2026-14790)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-14790 advisory. 2:1.6.40-8.3 - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon RHEL-161208 Tenable has extracted the preceding description block...

Oracle Linux 9 : git-lfs (ELSA-2026-14200)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-14200 advisory. 3.6.1-8.1 - Rebuild with new Golang - Resolves: RHEL-167659, RHEL-170836, RHEL-166651 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : perl-XML-Parser (ELSA-2026-8578)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-8578 advisory. 2.41-10.0.3 - Security update for CVE-2006-10002 and CVE-2006-10003 Orabug: 39220442 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : kernel (ELSA-2026-13565)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-13565 advisory. - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption Vladislav Dronov RHEL-172201 CVE-2026-31431 - crypto: authencesn -...

Oracle Linux 10 : python-tornado (ELSA-2026-13641)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-13641 advisory. 6.5.5-1.1 - Update to 6.5.5 Resolves: RHEL-160934 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : openssh (ELSA-2026-13380)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-13380 advisory. - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164738 - CVE-2026-35388: Add...

Oracle Linux 10 : yggdrasil-worker-package-manager (ELSA-2026-11412)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-11412 advisory. 0.2.3-5 - Bump release for rebuild Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 10 : thunderbird (ELSA-2026-12285)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-12285 advisory. 140.10.0-1.0.1 - Add Oracle prefs 140.10.0-1 - Update to 140.10.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50254)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50254 advisory. - crypto: algifaead - Revert to operating out-of-place Herbert Xu Orabug: 39292190 CVE-2026-31431 Tenable has extracted the preceding description block...

Oracle Linux 8 : fence-agents (ELSA-2026-12176)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-12176 advisory. - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: replace with dependency to fix CVE-2026-32597 Tenable has...

Oracle Linux 10 / 9 : dtrace (ELSA-2026-50249)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50249 advisory. - Prevent out-of-buonds memory access during object symbol table construction CVE-2026-35233. Orabug: 39121881 - Prevent divide-by-zero FPE trap ...

Oracle Linux 8 : sudo (ELSA-2026-11521)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-11521 advisory. - CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166060 RHEL 8.10.0.Z ERRATUM Tenable has extracted the preceding...

Oracle Linux 9 : libtiff (ELSA-2026-12271)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-12271 advisory. 4.4.0-15.3 - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile RHEL-159330 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : grafana (ELSA-2026-11711)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-11711 advisory. - Resolves RHEL-166655: CVE-2026-32282 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 10 : libtiff (ELSA-2026-12265)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-12265 advisory. 4.6.0-6.3 - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile RHEL-159309 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-11352)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-11352 advisory. 24.1.5-6 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves:...

Oracle Linux 8 : python3.12 (ELSA-2026-10950)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-10950 advisory. - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168130, RHEL-167892 Tenab...

Oracle Linux 9 : qemu-kvm (ELSA-2026-50241)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50241 advisory. - Document CVEs Mark Kanda CVE-2025-54566 CVE-2025-54567 CVE-2025-8860 CVE-2026-0665 CVE-2026-3886 - hw/usb/hcd-ohci: check for MPS=0 to avoid infinit...

Oracle Linux 9 : python3.9 (ELSA-2026-10949)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-10949 advisory. - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-168157, RHEL-167915 - Security fix for CVE-2026-4519 Resolves: RHEL-158052 Tenable...

Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2026-9683)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-9683 advisory. 1:1.8.0.492.b09-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.492.b09-1 - Update to 8u492-b09 GA - Update release notes for 8u492-b09....