Oracle Linux 8 : thunderbird (ELSA-2026-33445)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-33445 advisory. 140.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.12.0 - Add OpenELA debranding 140.12.0-1 - Update to 140.12.0 ESR...

Oracle Linux 8 : git-lfs (ELSA-2026-30853)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30853 advisory. - Backport CVE-2026-39821 fix vendored golang.org/x/net IDNA Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : firefox (ELSA-2026-19370)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19370 advisory. 140.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 9 : git-lfs (ELSA-2026-30854)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30854 advisory. - Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode incorrectly accepting all-ASCII xn-- labels Tenable has extracted the preceding description bloc...

Oracle Linux 9 : firefox (ELSA-2026-21378)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21378 advisory. 140.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 7 : python (ELSA-2026-19589)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19589 advisory. - Fix for CVE-2026-4786 Orabug: 39418723 - Fix for CVE-2026-4519 Orabug: 39243798 - Fix for CVE-2025-15366 and CVE-2025-15367 Orabug: 39114639 Tenable has...

Oracle Linux 7 : libsoup (ELSA-2026-24722)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-24722 advisory. - Backport fix for CVE-2026-5119 Orabug: 39527088 - Fixes CVE-2026-0719 CVE-2026-1761 Orabug: 38958074 - Fix CVE-2025-14523 Orabug: 38873507 - Backport patch f...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50352)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50352 advisory. 5.15.0-321.202.5.3 - net: skbuff: fix missing zerocopy reference in pskbcarve helpers Minh Nguyen Orabug: 39639981 CVE-2026-52943 Credit Statement: The...

Oracle Linux 9 : nginx:1.24 (ELSA-2026-28212)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28212 advisory. - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Cod...

Oracle Linux 9 : perl-IO-Compress (ELSA-2026-30859)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30859 advisory. - Fix CVE-2026-48962: remove use of eval in File::GlobMapper Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50351)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50351 advisory. 6.12.0-203.76.7.6 - net: skbuff: fix missing zerocopy reference in pskbcarve helpers Minh Nguyen Orabug: 39639984 CVE-2026-52943 Credit Statement: The...

Oracle Linux 8 : perl-IO-Compress (ELSA-2026-30858)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30858 advisory. 2.081-2 - Remove use of eval in File::GlobMapper for safer string interpolation - Resolves: RHEL-180411 Tenable has extracted the preceding description block...

Oracle Linux 8 : perl-Archive-Tar (ELSA-2026-30852)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30852 advisory. - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Fixes CVE-2018-12015 directory traversal bug 1588761 Tenable has extracted...

Oracle Linux 9 : perl-Archive-Tar (ELSA-2026-30856)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30856 advisory. - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 9 : rsync (ELSA-2026-19368)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19368 advisory. - Fix integer overflow in compressed-token decoding CVE-2026-43618 - Resolves: RHEL-174932 - Fix TOCTOU symlink race in daemon no-chroot mode...

Oracle Linux 9 : openssl (ELSA-2026-22312)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22312 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...

Oracle Linux 9 : firefox (ELSA-2026-20574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20574 advisory. 140.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 7 : libxml2 (ELSA-2026-22420)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22420 advisory. - Backport fix for CVE-2025-9714 Orabug: 39476695 - Fix CVE-2025-32415: Fix heap buffer overflow Orabug: 38310750 - Fix CVE-2025-7425: heap-use-after-free in...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-50353)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50353 advisory. 5.4.17-2136.356.4.3 - net: skbuff: fix missing zerocopy reference in pskbcarve helpers Minh Nguyen Orabug: 39639989 CVE-2026-52943 Credit Statement: The...

Oracle Linux 8 : python3.12-urllib3 (ELSA-2026-32992)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-32992 advisory. 1.26.19-3 - Security fixes for CVE-2026-44431 and CVE-2026-44432 Resolves: RHEL-185125, RHEL-184900 Tenable has extracted the preceding description...