Oracle Linux 9 : cockpit-files (ELSA-2026-84595)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-84595 advisory. - CVE-2026-91202 - Don't de-reference a symlink when creating a directory RHEL-263134 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : openssh (ELSA-2026-85958)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85958 advisory. - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276221 - CVE-2026-59997: Fix internal-sftp server argument parsin...

Oracle Linux 9 : ca-certificates (ELSA-2026-500450)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500450 advisory. 2025.2.80v9.0.305-91.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist Tenable has extracted the preceding...

Oracle Linux 9 : golang (ELSA-2026-86196)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86196 advisory. 1.26.10-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.10-1 - Update to Go 1.26.10 fips-1 - Resolves: RHEL-287192 Tenable has...

Oracle Linux 9 : jackson-core, / jackson-databind, / jackson-jaxrs-providers, / and / jackson-modules-base (ELSA-2026-80504)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80504 advisory. jackson-core 2.21.6-1 - Rebase to version 2.21.6 - Resolves: RHEL-259227 jackson-databind 2.21.6-1 - Rebase to version 2.21.6 - Resolves: RHEL-259227...

Oracle Linux 9 : nodejs:22 (ELSA-2026-76750)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76750 advisory. - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2...

Oracle Linux 9 : bubblewrap (ELSA-2026-85309)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85309 advisory. - Fix CVE-2026-87766 path traversal through symlinked mount targets Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 9 : environment-modules (ELSA-2026-84594)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-84594 advisory. 5.3.0-2.1 - fix command injection in bash Tab completion CVE-2026-85013 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-84574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84574 advisory. 1.20.11-34.5 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves:...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-84583)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84583 advisory. 2.54.1-1 - Update to 2.54.1 - Add patch to update ANGLE even further Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2026-85193)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85193 advisory. 24.1.9-4.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-9352...

Oracle Linux 9 : jackson-databind (ELSA-2026-85231)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85231 advisory. 2.21.6-1.1 - Resolves: RHEL-276419 - Fix CVE-2026-91777 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : kernel (ELSA-2026-83156)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83156 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271472 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500395)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500395 advisory. - exec: Cleanup POSIX timers right after dethread Hyunwoo Kim Orabug: 40157515 CVE-2026-98260 - eventpoll: fix epremove struct eventpoll / struct file UAF...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500398)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500398 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167661 CVE-2026-98432 - ipv4: validate checksumstart before...

Oracle Linux 9 : libsoup (ELSA-2026-83384)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83384 advisory. - CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102558 libsoup: libsoup: Heap buffer...

Oracle Linux 9 : rpcbind (ELSA-2026-83562)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-83562 advisory. - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows...

Oracle Linux 9 : kernel (ELSA-2026-81552)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81552 advisory. - nvmet-auth: Synchronize timeout work during SQ teardown CKI Backport Bot RHEL-276348 CVE-2026-89970 - drm/amdkfd: Add TLB flush after MES queue...

Oracle Linux 9 : pcre2 (ELSA-2026-81532)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81532 advisory. 10.40-7.0.1 - Add post script to resolve Regex version mismatch Orabug: 34742224 10.40-7 - Backport multiple CVE fixes - CVE-2026-86145, CVE-2026-8915...

Oracle Linux 9 : kernel (ELSA-2026-77689)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77689 advisory. - nfsd: defer vfree of compound ops to fix rpcstatus UAF Roberto Bergantinos Corpas RHEL-264950 CVE-2026-89690 - svcrdma: Reject inline replies that...