kernel security update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

dracut security update

107-9.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS logic on UEK with special FIPS Orabug: 38138800 Orabug: 38709306 - Include correct modprobe into squashfs root Orabug: 38559936 - Ship Oracle...

.NET 8.0 security, bug fix, and enhancement update

8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235468...

Oracle Linux 10 : python-idna (ELSA-2026-54481)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54481 advisory. - Fix CVE-2026-45409: quadratic time complexity in IDNA validation Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 9 : kernel (ELSA-2026-53329)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53329 advisory. - mm/slab: do not limit zeroing to origsize when only red zoning is enabled Rafael Aquini RHEL-223404 CVE-2026-64368 - net: openvswitch: reject...

Oracle Linux 10 : kernel (ELSA-2026-53330)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53330 advisory. - mm/slab: do not limit zeroing to origsize when only red zoning is enabled Rafael Aquini RHEL-223405 CVE-2026-64368 - net: openvswitch: reject...

kernel security, bug fix, and enhancement update

5.14.0-687.38.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

kernel security, bug fix, and enhancement update

6.12.0-211.46.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 9 : postgresql (ELSA-2026-52395)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-52395 advisory. - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 SSL/GSS init causes denial of...

Oracle Linux 10 : kernel (ELSA-2026-34911)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-34911 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Oracle Linux 10 : kernel (ELSA-2026-51295)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-51295 advisory. 6.12.0-211.44.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

Oracle Linux 10 : nodejs-nodemon (ELSA-2026-52841)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-52841 advisory. 3.1.14-3 - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 10 : kernel (ELSA-2026-33685)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33685 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Oracle Linux 9 : php:8.3 (ELSA-2026-48197)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-48197 advisory. php 8.3.32-1 - rebase to 8.3.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis...

Oracle Linux 9 : kernel (ELSA-2026-51035)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-51035 advisory. - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup Waiman Long RHEL-193526 CVE-2026-52977 - futex: Require sysfutexrequeue to have...

kernel security, bug fix, and enhancement update

6.12.0-211.44.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : kernel (ELSA-2026-50978)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50978 advisory. - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Dennis Chen RHEL-188786 CVE-2025-54518 Tenable has extracted the preceding...

kernel security, bug fix, and enhancement update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : gimp (ELSA-2026-50817)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50817 advisory. - fix CVE-2026-42169 - fix CVE-2026-66758 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500136)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500136 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832992 CVE-2026-68480 - xfs: resample the data fork...