Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-47180)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47180 advisory. 1.26.7-2.5 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats CVE-2026-59691 Resolves: RHEL-193550 Tenable has extracted the...

Oracle Linux 10 : pipewire (ELSA-2026-47083)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47083 advisory. - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 10 : libXfont2 (ELSA-2026-47079)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47079 advisory. 2.0.6-5.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191882 Resolves:...

Oracle Linux 8 : dovecot (ELSA-2026-46532)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-46532 advisory. 1:2.3.16-8 - fix CVE-2026-42006: fix IMAP parser listcountlimit to correctly limit open braces instead of close braces RHEL-188480 Tenable has extracted the...

kernel security, bug fix, and enhancement update

5.14.0-687.30.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 10 : rest (ELSA-2026-47085)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47085 advisory. 0.9.1-11.1 - Add patch for CVE-2026-16615 Weak random number generation in PKCE implementation Resolves: RHEL-213749 Tenable has extracted the preceding...

Oracle Linux 9 : yelp (ELSA-2026-47178)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47178 advisory. 2:40.3-3.1 - Fix CVE-2026-13601 RHEL-190224 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

kernel security update

6.12.0-211.39.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : libXfont2 (ELSA-2026-47103)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47103 advisory. 2.0.3-2.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191877 Resolves:...

Oracle Linux 8 : compat-libtiff3 (ELSA-2026-47183)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-47183 advisory. 3.9.4-16 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding RHEL-189375 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : yelp (ELSA-2026-47177)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47177 advisory. 2:3.28.1-3.2 - Fix CVE-2026-13601 RHEL-190226 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : libreswan (ELSA-2026-46398)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46398 advisory. 5.3.2-1.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 5.3.2-1 - Update to libreswan-5.3.2 5.3.1-1 - Update to libreswan-5.3.1 Tenabl...

Oracle Linux 10 : go-fdo-server (ELSA-2026-46395)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46395 advisory. 1.0.1-3 - Rebuild against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 10 : go-fdo-client (ELSA-2026-46394)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-46394 advisory. 1.0.0-5 - Rebuild against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : openssl (ELSA-2026-25237)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25237 advisory. - Patch asn1d2ireadbio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,...

libreswan security update

5.3.2-1.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 5.3.2-1 - Update to libreswan-5.3.2 5.3.1-1 - Update to libreswan-5.3.1...

Oracle Linux 10 : buildah (ELSA-2026-36199)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36199 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the...

Oracle Linux 10 : openssl (ELSA-2026-22314)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22314 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...

Oracle Linux 10 : kernel (ELSA-2026-44270)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-44270 advisory. 6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-44438)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-44438 advisory. 1:1.1.1k-5.4 - Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify Tenable has extracted the preceding description block directly from the Oracle...