Oracle Linux 8 : grafana-pcp (ELSA-2026-35831)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-35831 advisory. - Resolves RHEL-183733: CVE-2026-39821 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50373)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50373 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta Orabug: 39668793 CVE-2026-46331 - net: skbuff: fix missing zerocop...

Oracle Linux 8 : container-tools:ol8 (ELSA-2026-33722)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33722 advisory. - rebuild for CVE-2025-68121 - rebuild for CVE-2025-68121 - rebuild for CVE-2025-68121 - Rebuild for CVE-2026-32281 - update to 1.14.6 to fix...

Oracle Linux 9 : mariadb:11.8 (ELSA-2026-33481)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33481 advisory. galera 26.4.27-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete lp1184034 test case without using patches. 26.4.27-1 - Rebased to...

Oracle Linux 9 : glibc (ELSA-2026-50370)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50370 advisory. - CVE-2026-5450: Fix buffer overflow in scanf RHEL-172710 - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules RHEL-162901 Tenable has...

Oracle Linux 9 : mariadb:10.11 (ELSA-2026-33482)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33482 advisory. galera 26.4.20-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches...

Oracle Linux 8 : php:7.4 (ELSA-2026-34354)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-34354 advisory. - Fix XSS within status endpoint CVE-2026-6735 - Fix Stale SOAPGLOBALrefmap pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header...

Oracle Linux 8 : ruby:2.5 (ELSA-2026-33514)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33514 advisory. - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 rubygem-abrt - Fix unexpected code execution in...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-33576)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33576 advisory. - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in...

USN-8493-2: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsystem; - Network drivers; -...

Oracle Linux 9 : rrdtool (ELSA-2026-34156)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-34156 advisory. 1.7.2-22 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 Tenable has extracted the preceding description block...

Oracle Linux 9 : ruby:4.0 (ELSA-2026-20596)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20596 advisory. - Fix ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information...

Oracle Linux 9 : php (ELSA-2026-33449)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33449 advisory. - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in phpmbcheckencoding via mberegsearchinit CVE-2026-7259 - Fix Stale...

Oracle Linux 9 : giflib (ELSA-2026-33501)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33501 advisory. 5.2.1-10.2 - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension RHEL-157133 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 8 : rrdtool (ELSA-2026-34155)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-34155 advisory. 1.7.0-17 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173259 Tenable has extracted the preceding description block...

Oracle Linux 9 : nginx (ELSA-2026-28973)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28973 advisory. - Resolves: RHEL-178684 - nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution...

Oracle Linux 9 : python3.11 (ELSA-2026-18957)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18957 advisory. 3.11.13-10.0.1 - Remove upstream URL reference Orabug: 36073032 3.11.13-10 - Depend on sqlite-libs with deserialize API Resolves: RHEL-178519 Tenable has...

Oracle Linux 7 : glib2 (ELSA-2026-19566)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19566 advisory. - Fixes CVE-2025-14078 gvariant parser buffer underflow Orabug: 39418716 - Fixes CVE-2025-13601 gescapeuristring overflow Orabug: 38909821 Tenable has extracte...

Oracle Linux 7 : firefox (ELSA-2026-26551)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-26551 advisory. - Update to 140.10.2 ESR Orabug: 39534787CVE-2026-8090CVE-2026-8092 CVE-2026-8094 - Update to 140.10.1 ESR Orabug: 39481850CVE-2026-7320CVE-2026-7321...

Oracle Linux 8 : giflib (ELSA-2026-33503)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33503 advisory. 5.1.4-5 - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension RHEL-157097 Tenable has extracted the preceding description block directly from the Oracle...