Oracle Linux 9 : firefox (ELSA-2026-69462)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69462 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 9 : postgresql:15 (ELSA-2026-69914)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69914 advisory. pgaudit 1.7.0-1 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: 2128410 pgrepack 1.4.8-2 - Add new buil...

Oracle Linux 8 : libxml2 (ELSA-2026-69655)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69655 advisory. 2.9.7-21.8 - Lower xpath recursion limits RHEL-249282 2.9.7-21.8 - Fix CVE-2026-6653 RHEL-215616 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : libtiff (ELSA-2026-69095)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69095 advisory. 4.0.9-39 - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation RHEL-248298 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : postgresql16 (ELSA-2026-70186)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70186 advisory. 16.15-1.0.1 - Replace upstream reference Orabug: 37044148 16.15-1 - Update to 16.15 Tenable has extracted the preceding description block directly fr...

Oracle Linux 10 : firefox (ELSA-2026-69461)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-69461 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

Oracle Linux 8 : unbound (ELSA-2026-69120)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69120 advisory. - Backport additional fix from 1.26.0 CVE-2026-50252 - Correct new warning in previous change CVE-2026-44690 Tenable has extracted the preceding description...

Oracle Linux 9 : openssh (ELSA-2026-69130)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69130 advisory. - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 -...

Oracle Linux 8 : openssh (ELSA-2026-69266)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69266 advisory. - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for...

Oracle Linux 8 : tar (ELSA-2026-70390)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-70390 advisory. - Backport upstream fix for CVE-2026-5704 file injection hidden from -t - Fix --one-top-level with absolute path broken by the CVE-2025-45582 fix Also...

Oracle Linux 10 : podman (ELSA-2026-70201)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70201 advisory. - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - rebuild for CVE-2026-33810 Tenable has extracted the preceding...

Oracle Linux 10 : ELSA-2026-67166-0: / postgresql18-postgis (ELSA-2026-671660)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671660 advisory. 3.5.3-1.1 - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : 389-ds-base (ELSA-2026-55758)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55758 advisory. - Security update for CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 Orabug: 39892253 - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 396970...

Oracle Linux 10 : rsyslog (ELSA-2026-69541)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69541 advisory. 8.2510.0-5.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246633 Tenable has extracted the preceding description...

Oracle Linux 9 : gstreamer1-plugins-base (ELSA-2026-69100)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69100 advisory. - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves:...

Oracle Linux 9 : openexr (ELSA-2026-69608)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69608 advisory. 3.1.1-3.4 - fix CVE-2026-68515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 7 : firefox (ELSA-2026-54248)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-54248 advisory. - Update to 140.13.0 ESR Orabug: 39947841CVE-2026-15718CVE-2026-15719 CVE-2026-16349CVE-2026-16350CVE-2026-16351CVE-2026-16352CVE-2026-16353...

Oracle Linux 9 : sudo (ELSA-2026-69123)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69123 advisory. 1.9.17p2-3.1 - CVE-2026-82474 sudo: execveat2 intercept/logsubcmds bypass Resolves: RHEL-255647 Tenable has extracted the preceding description block directly...

firefox security update

140.13.0-1.0.1 - Update to 140.13.0 ESR Orabug: 39947841CVE-2026-15718CVE-2026-15719 CVE-2026-16349CVE-2026-16350CVE-2026-16351CVE-2026-16352CVE-2026-16353 CVE-2026-16354CVE-2026-16355CVE-2026-16356CVE-2026-16357CVE-2026-16358 CVE-2026-16359CVE-2026-16360CVE-2026-16361CVE-2026-16362CVE-2026-16363...

Oracle Linux 9 : curl (ELSA-2026-69126)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69126 advisory. - add sasl service name to connection reuse checks CVE-2026-8458 Tenable has extracted the preceding description block directly from the Oracle Linux...