gdb security update

16.3-3.1.0.1 - Merge Oracle patches for ol9-u8. Reviewed-by: Jose E. Marchesi Oracle history: March-06-2026 Claudiu Zissulescu - 16.3-3.0.1 - Merge Oracle patches for ol9-u8. Reviewed-by: Jose E. Marchesi August-05-2025 Claudiu Zissulescu - 16.3-2.0.1 - Merge Oracle patches for ol9-u7. Reviewed-b...

Oracle Linux 9 : firefox (ELSA-2026-69462)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69462 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 10 : firefox (ELSA-2026-69461)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-69461 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.5 - Revert 'x86/alternatives: Add altinstr.flags' Harshit Mogalapalli Orabug: 39859219 5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU...

gpsd security update

3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459...

PackageKit security update

1.1.10-2.0.3 - Backport fix for CVE-2026-41651 Orabug: 39467887...

compat-poppler022 security update

0.22.5-4.0.1 - Fix for CVE-2026-10118 Orabug: 39635559...

glibc security update

2.28-251.0.4.38 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi Oracle history: May-26-2026 Cupertino Miranda - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by: David Faust May-7-2026 Cupertino Miranda - 2.28-251.0.4.34 - Forward port of Oracle patches Reviewed-by: Jos...

Oracle Linux 7 : freerdp (ELSA-2026-20546)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20546 advisory. - Fixed CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985 Orabug: 39440279 - Fix...

nginx security update

1.20.1-28.0.1.el98.2 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 - Update upstream references Orabug: 36579090 2:1.20.1-28.2 - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 2:1.20.1-28.1 -...

Oracle Linux 7 : openssh (ELSA-2026-22468)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22468 advisory. 7.4p1-23.0.5 - Fix privilege escalation via scp legacy protocol when not in preserving file mode CVE-2026-35385Orabug: 39480251 Tenable has extracted the...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2026-9682)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-9682 advisory. - Update to 8u492-b09 GA Orabug: 39247147CVE-2026-22007CVE-2026-22013 CVE-2026-22016CVE-2026-22018CVE-2026-22021CVE-2026-23865CVE-2026-34268 - Fixes...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50286)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50286 advisory. - net: skbuff: propagate shared-frag marker through frag-transfer helpers Hyunwoo Kim Orabug: 39420559 CVE-2026-46300 Tenable has extracted the preceding...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50287)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50287 advisory. - net: skbuff: propagate shared-frag marker through frag-transfer helpers Hyunwoo Kim Orabug: 39420565 CVE-2026-46300 Tenable has extracted the preceding...

nginx security update

2:1.26.3-2.0.1.el101.2 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-8 - Fix release number 2:1.26.3-7 - Resolves: RHEL-176217 - nginx: NGINX: Arbitrary Code 2:1.26.3-6 - Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially...

giflib security update

4.1.6-9.0.3 - Security update for CVE-2026-23868 Orabug: 39230174...

python3 security update

3.6.8-21.0.11 - Security update CVE-2026-4519 Orabug: 39246828...

python security update

2.6.6-68.0.5 - Fix CVE-2025-15366 and CVE-2025-15367 Orabug: 39141391 2.6.6-68.0.4 - Fix CVE-2025-12084 Orabug: 38902317...

oci-utils security update

-- 0.14.0-19 - Fix secondary vnic default metric to be a lower priority value Orabug: 38154477...

openssh security update

9.9p1-13.0.1 - Upstream references found with /usr/bin/ssh Orabug: 37824421 9.9p1-13 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155811...