python3 security update

3.6.8-77.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-77 - Security fix for CVE-2026-15308 Resolves: RHEL-193772...

Oracle Linux 10 : python-jwcrypto (ELSA-2026-19042)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19042 advisory. 1.5.6-5 - Fix CVE-2026-39373: Memory exhaustion via crafted compressed JWE tokens Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 10 : python3.14 (ELSA-2026-19019)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19019 advisory. - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Security fixes for CVE-2026-2297...

Oracle Linux 10 : iputils (ELSA-2026-18162)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-18162 advisory. 20240905-5 - Fix CVE-2025-48964 iputils: iputils integer overflow RHEL-115832 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : grafana-pcp (ELSA-2026-19026)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19026 advisory. 5.3.0-4 - Resolves RHEL-158485: CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 7 : host-metering (ELSA-2026-16101)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-16101 advisory. 1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : git-lfs (ELSA-2026-39319)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-39319 advisory. 3.7.1-4.2 - Rebuild with new Golang - Resolves: RHEL-187329 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : gstreamer1-plugins-bad-free, / gstreamer1-plugins-base, / gstreamer1-plugins-good, / and / gstreamer1-plugins-ugly-free (ELSA-2026-19024)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19024 advisory. - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Add patch for CVE-2026-2921 Resolves: RHEL-156122...

Oracle Linux 10 : postgresql18 (ELSA-2026-19009)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19009 advisory. - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005:...

Oracle Linux 10 : golang (ELSA-2026-19022)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19022 advisory. 1.26.2-2.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.2-2 - Do not ignore any tests in check 1.26.2-1 - Update to Go 1.26.2 fips-2...

Oracle Linux 10 : libssh (ELSA-2026-18160)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18160 advisory. 0.12.0-2 - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 0.12.0-1 - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825,...

Oracle Linux 10 : freerdp (ELSA-2026-19033)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19033 advisory. - Update CLEARVBARENTRY size after alloc CVE-2026-33984 - Fail progressiverfxquantsub on invalid values CVE-2026-33983 Resolves: RHEL-162947,...

kernel update

4.18.0-553.143.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : vim (ELSA-2026-38511)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38511 advisory. - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete ...

Oracle Linux 9 : podman (ELSA-2026-38878)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38878 advisory. - rebuild for CVE-2026-39822 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 9 : nginx (ELSA-2026-36331)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36331 advisory. - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055...

go-toolset:ol8 security, bug fix, and enhancement update

delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 golang 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var - Backported from OL9u7 - Resolves: OLDIS-53586 1.26.5-1 - Update to Go 1.26.5 fips-1 ...

Oracle Linux 9 : buildah (ELSA-2026-38493)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38493 advisory. - rebuild for CVE-2026-39822 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : freerdp (ELSA-2026-38501)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38501 advisory. 2:2.11.7-10 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186983 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2026-38488)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-38488 advisory. 21.1.3-20.3 - CVE fix for: CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191516 Tenable has extracted the preceding description block...