Oracle Linux 9 : openssh (ELSA-2026-73955)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73955 advisory. 9.9p1-12.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug:...

Oracle Linux 8 : thunderbird (ELSA-2026-73971)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-73971 advisory. 140.16.0-1 - Add Oracle prefs file 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolve...

Oracle Linux 10 : gvfs (ELSA-2026-73998)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73998 advisory. - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252305, RHEL-257341 Tenable has extracted the preceding description block...

Oracle Linux 9 : gdb (ELSA-2026-73426)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73426 advisory. 16.3-3.1.0.1 - Merge Oracle patches for ol9-u8. Reviewed-by: Jose E. Marchesi Oracle history: March-06-2026 Claudiu Zissulescu - 16.3-3.0.1 - Merge Oracle...

Oracle Linux 10 : gdb (ELSA-2026-73427)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73427 advisory. 16.3-3.1.0.1 Merge Oracle patches for ol10-u2 Reviewed-by: Jose E. Marchesi Oracle history: March-4-2026 Claudiu Zissulescu - 16.3-3.0.1 Merge Oracle patches...

Oracle Linux 8 : rsync (ELSA-2026-74095)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74095 advisory. 3.1.3-28 - Resolves: RHEL-256903 - Fix latest CVEs in rsync in RHEL8 - Fixing a regression introduced with the security patches Tenable has extracted...

Oracle Linux 9 : nodejs:24 (ELSA-2026-73838)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73838 advisory. - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 10 : freerdp (ELSA-2026-73979)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73979 advisory. - Abort after PROTOCOLFAILEDNEGO CVE-2026-91949 Resolves: RHEL-264913 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : gawk (ELSA-2026-73512)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73512 advisory. 5.1.0-6.1 - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467...

Oracle Linux 10 : dogtag-pki (ELSA-2026-73765)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73765 advisory. - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list Tenable has extracted the preceding description block direct...

Oracle Linux 9 : ruby (ELSA-2026-72286)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72286 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing T...

Oracle Linux 9 : pki-core (ELSA-2026-73766)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73766 advisory. - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list Tenable has extracted the preceding description block directly...

Oracle Linux 10 : gawk (ELSA-2026-73429)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73429 advisory. 5.3.0-6.1 - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467...

Oracle Linux 10 : corosync (ELSA-2026-67872)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67872 advisory. 3.1.10-1.2 - Resolves: RHEL-251541 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665 Tenable has extracted the preceding description bloc...

Oracle Linux 9 : kernel (ELSA-2026-72623)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72623 advisory. - arm64: tlb: Flush walk cache when unsharing PMD tables Rafael Aquini RHEL-259312 CVE-2026-63875 - perf: Reject exited events as group leaders Anubha...

Oracle Linux 8 : kernel (ELSA-2026-71329)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71329 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 9 : kernel (ELSA-2026-71700)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71700 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237295 CVE-2026-68121 - smb: smbdirect: introduce...

Oracle Linux 9 : resteasy (ELSA-2026-72424)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72424 advisory. 3.0.26-20 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 Tenable has extracted the preceding description block...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-72485)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72485 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252039 - Fix DoS via crafted IMAP responses in net-imap...

Oracle Linux 7 : freerdp (ELSA-2026-68707)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68707 advisory. - Backport fix for CVE-2026-55192 Orabug: 40040632 - Backport fix for CVE-2026-55194 Orabug: 40040632 - Backport fix for CVE-2026-64624 Orabug: 399648...