Oracle Linux 10 : nodejs22 (ELSA-2026-48033)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48033 advisory. - Fix CVE-2026-13149 npm/brace-expansion - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 node-tar - CVE-2026-42338 ip-address HTML escaping fix...

Oracle Linux 9 : frr10 (ELSA-2026-49607)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49607 advisory. - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500121)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500121 advisory. - xfs: resample the data fork mapping after cycling ILOCK Darrick J. Wong Orabug: 39776792 CVE-2026-64600 - net/sched: fix pedit partial COW...

Oracle Linux 8 : frr (ELSA-2026-49511)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49511 advisory. - Fix EVPN and ENCAP/VNC packet parsing validation CVE-2026-37460 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : thunderbird (ELSA-2026-49621)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49621 advisory. 140.13.0-1.0.1 - Add Oracle prefs 140.13.0-1 - Update to 140.13.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : kernel (ELSA-2026-23329)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-23329 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-49508)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49508 advisory. 1.26.7-2.2 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling CVE-2026-5056 Resolves: RHEL-222333 Tenable has extracted th...

Oracle Linux 10 : php (ELSA-2026-48170)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-48170 advisory. 8.3.32-1 - rebase to 8.3.32 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : frr (ELSA-2026-49527)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49527 advisory. 8.5.3-15.1 - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing 8.5.3-15 - Resolves: RHEL-176258 - AVC when reading user...

Oracle Linux 7 : rsync (ELSA-2026-25172)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-25172 advisory. - Backport fix for CVE-2026-41035 Orabug: 39542074 - Fix CVE-2024-12087 Orabug: 38771262 Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : php:8.2 (ELSA-2026-47749)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47749 advisory. libzip php 8.2.32-1 - rebase to 8.2.32 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the preceding description block...

Oracle Linux 9 : libreswan (ELSA-2026-46397)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-46397 advisory. - Backport fix for CVE-2026-14957 RHEL-212107 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : perl-Archive-Tar (ELSA-2026-49523)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49523 advisory. - Fix CVE-2026-9538: cap per-entry declared size during archive reading to prevent memory DoS Tenable has extracted the preceding description block directly...

Oracle Linux 8 : php:7.4 (ELSA-2026-47750)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47750 advisory. libzip php 7.4.33-5 - Fix Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php-pear php-pecl-apcu php-pecl-rrd...

kernel security update

4.18.0-553.150.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : perl-DBI (ELSA-2026-49612)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49612 advisory. - Fix unsafe string eval in DBI::Profile CVE-2026-14380 - Set a hard limit of 99999 on '?' placeholders CVE-2026-14739 Tenable has extracted the...

Oracle Linux 8 : libreswan (ELSA-2026-46396)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-46396 advisory. - Backport fix for CVE-2026-14957 RHEL-212498 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : perl-Archive-Tar (ELSA-2026-49524)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49524 advisory. - Fix CVE-2026-9538: cap per-entry declared size during tar read to defend against attacker-controlled size-field memory DoS Tenable has extracted the precedin...

Oracle Linux 10 : perl-DBI (ELSA-2026-49514)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49514 advisory. - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders Tenable has extracted th...

Oracle Linux 9 : perl-Archive-Tar (ELSA-2026-49525)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49525 advisory. - Fix CVE-2026-9538: add cap for tar entry size during read to prevent memory allocation DoS Tenable has extracted the preceding description block directly fro...