Oracle Linux 8 : sqlite (ELSA-2026-58938)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58938 advisory. 3.26.0-21 - Fixes CVE-2026-11822 and CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : nginx:1.24 (ELSA-2026-59216)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59216 advisory. - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-21930...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59972)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59972 advisory. 1.26.7-2.8 - Fix use-after-free vulnerability in RTP SBC depayloader CVE-2026-18299 Resolves: RHEL-246613 Tenable has extracted the preceding description bloc...

kernel security, bug fix, and enhancement update

4.18.0-553.158.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 10 : ELSA-2026-60004-0: / httpd (ELSA-2026-600040)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-600040 advisory. - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration...

Oracle Linux 10 : attr (ELSA-2026-59380)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59380 advisory. 2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128 Tenable has extracted...

Oracle Linux 10 : pam (ELSA-2026-59379)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59379 advisory. 1.6.1-9.1 - pamuserdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191704 Tenable has extracted the preceding description block...

kernel security, bug fix, and enhancement update

5.14.0-687.42.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2026-59487)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59487 advisory. 1.16.1-6.0.1.el810.1 - Update origin URL Orabug: 36209826 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576 Tenable has extracted the preceding...

Oracle Linux 9 : nginx:1.26 (ELSA-2026-59496)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59496 advisory. - Fixes CVE-2026-56434 and CVE-2026-60005 - nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-176218 - nginx:1.26/nginx: NGIN...

Oracle Linux 9 : mod_http2 (ELSA-2026-59387)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-59387 advisory. 2.0.26-6.2 - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in modhttp2 Tenable has extracted the preceding description block...

Oracle Linux 7 : 389-ds-base (ELSA-2026-36205)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36205 advisory. - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-149...

Oracle Linux 9 : python3.12 (ELSA-2026-59009)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59009 advisory. 3.12.14-1.0.1 - Remove upstream URL reference 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227215 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves...

Oracle Linux 10 : firefox (ELSA-2026-58899)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-58899 advisory. 140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

Oracle Linux 9 : python-urwid (ELSA-2026-58952)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58952 advisory. - Fix CVE-2026-9323: use cryptographically secure session identifiers in web display module Tenable has extracted the preceding description block directly from...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59133)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59133 advisory. - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : python-urwid (ELSA-2026-58562)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58562 advisory. - Use secure random session identifiers in web display CVE-2026-9323 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : grafana (ELSA-2026-58982)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58982 advisory. - Resolves RHEL-183803: CVE-2026-39821 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 10 : sqlite (ELSA-2026-58927)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58927 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : firefox (ELSA-2026-58897)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58897 advisory. 140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...