Oracle Linux 8 : fence-agents (ELSA-2026-49927)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49927 advisory. 4.2.1-129.28 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178594 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500121)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500121 advisory. - xfs: resample the data fork mapping after cycling ILOCK Darrick J. Wong Orabug: 39776792 CVE-2026-64600 - net/sched: fix pedit partial COW...

Oracle Linux 8 : frr (ELSA-2026-49511)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49511 advisory. - Fix EVPN and ENCAP/VNC packet parsing validation CVE-2026-37460 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : nodejs:24 (ELSA-2026-47060)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47060 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 Tenable has...

Oracle Linux 8 : sssd (ELSA-2026-46990)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46990 advisory. - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege...

Oracle Linux 8 : firefox (ELSA-2026-47105)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-47105 advisory. 140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.13.0 -...

Oracle Linux 8 : libXfont2 (ELSA-2026-47103)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47103 advisory. 2.0.3-2.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191877 Resolves:...

Oracle Linux 8 : compat-libtiff3 (ELSA-2026-47183)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-47183 advisory. 3.9.4-16 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding RHEL-189375 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : acl (ELSA-2026-43420)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-43420 advisory. 2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186111 -...

Oracle Linux 8 : kernel (ELSA-2026-42552)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42552 advisory. - RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss Gaurav Goklani RHEL-180153 CVE-2026-46117 Tenable has extracted the preceding...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-41900)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41900 advisory. 10.0.110-1.0.1 - Add support for Oracle Linux 10.0.110-1 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192459 Tenable has extract...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-41899)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41899 advisory. 9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192469 Tenable has extracted t...

Oracle Linux 8 : kernel (ELSA-2026-39179)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39179 advisory. - xfrm: defensively unhash xfrmstate lists in xfrmstatedelete Sabrina Dubroca RHEL-180170 CVE-2026-46116 Tenable has extracted the preceding descripti...

Oracle Linux 8 : container-tools:ol8 (ELSA-2026-38504)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38504 advisory. - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39829, CVE-2026-39830, CVE-2026-39832 cockpit-podman - rebuild for CVE-2025-68121 - update to th...

Oracle Linux 8 : kernel (ELSA-2026-39083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39083 advisory. - locking/rtmutex: Skip removewaiter when waiter is not enqueued Phil Auld RHEL-193334 CVE-2026-53166 - rtmutex: Use waiter::task instead of current i...

go-toolset:ol8 security, bug fix, and enhancement update

delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 golang 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var - Backported from OL9u7 - Resolves: OLDIS-53586 1.26.5-1 - Update to Go 1.26.5 fips-1 ...

Oracle Linux 8 : grafana (ELSA-2026-35830)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35830 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : unbound (ELSA-2026-37282)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37282 advisory. - Fix CVE-2026-40622 RHEL-184832 - Fix CVE-2026-44390 RHEL-186680 - Fix CVE-2026-41292 RHEL-187346 Tenable has extracted the preceding description blo...

Oracle Linux 8 : 389-ds:1.4 (ELSA-2026-36201)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36201 advisory. - Resolves: RHEL-182162 - EMBARGOED CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-8.10.z -...

Oracle Linux 8 : container-tools:ol8 (ELSA-2026-35833)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-35833 advisory. - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39829, CVE-2026-39830, CVE-2026-39832 - rebuild for CVE-2025-68121 - rebuild for CVE-2025-61729 ...