glibc security update

2.34-231.0.1.10 - Forward-port Oracle patches for ol9-u7 Reviewed-by: TBD Oracle history: November-14-2025 Cupertino Miranda - 2.34-231.0.1.2 - Forward-port Oracle patches for ol9-u7 Reviewed-by: Jose E. Marchesi September-24-2025 Cupertino Miranda - 2.34-231.0.1 - Forward-port Oracle patches for...

Oracle Linux 9 : kernel (ELSA-2026-2722)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2722 advisory. - smc: Fix use-after-free in pnetfindbasendev. Mete Durlu RHEL-126890 CVE-2025-40064 - ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettran...

Oracle Linux 9 : nodejs:24 (ELSA-2026-2781)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2781 advisory. nodejs 1:24.13.0-1 - Update to version 24.13.0 nodejs-nodemon 3.0.3-3 - Keep BR on just npm 3.0.3-2 - Fix BR for nodejs-npm nodejs-packaging 2021.06-6 ...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2026-2708)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2708 advisory. delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update to Delve 1.25.2 Sync from CentOS Stream 9 - Related:...

Oracle Linux 10 : kernel (ELSA-2026-2721)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2721 advisory. - nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec CKI Backport Bot RHEL-144335 CVE-2026-22998 - smc: Fix use-after-free in...

Oracle Linux 10 : gnupg2 (ELSA-2026-2719)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2719 advisory. 2.4.5-4 - Fix CVE-2026-24882 tpm2daemon buffer overflow Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : golang (ELSA-2026-2706)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2706 advisory. 1.25.7-1 - Rebase to latest rhel-10-main 170a5b7e084 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : golang (ELSA-2026-2709)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2709 advisory. 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146476 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : gimp (ELSA-2026-2707)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2707 advisory. 2:3.0.4-1.3 - fix CVE-2025-15059 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 8 : gcc-toolset-14-binutils (ELSA-2026-2627)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2627 advisory. 2.41-3.1 - Fix a potential illegal memory access when linking a corrupt input file. RHEL-130636 Thu Feb 20 2025 Nick Clifton - Backport fixes for PR 32082 and P...

Oracle Linux 7 : openssl (ELSA-2026-1720)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-1720 advisory. 1:1.0.2k-26.0.1 - Fixes CVE-2025-9230 Fix incorrect check of unwrapped key size Orabug: 38916245 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : nodejs:22 (ELSA-2026-2421)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2421 advisory. nodejs 1:22.22.0-1 - Update to 22.22.0 Resolves: RHEL-118152 nodejs-nodemon 3.0.1-1 - Exclude ix86 arches from building. Related: RHEL-35991...

Oracle Linux 8 : php:7.4 (ELSA-2026-2470)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2470 advisory. - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with...

Oracle Linux 8 : nodejs:20 (ELSA-2026-2422)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2422 advisory. nodejs 1:20.20.0-1 - Update to version 20.20.0 Resolves: RHEL-130972 nodejs-nodemon 3.0.1-1 - Rebase to 3.0.1 - Resolves: CVE-2022-25883 Tenable has...

Oracle Linux 8 : nodejs:24 (ELSA-2026-2420)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2420 advisory. nodejs 1:24.13.0-1 - Update to 24.13.0 Resolves: RHEL-135257 1:24.4.1-1 - Initial import of nodejs:24 nodejs-nodemon 3.0.3-1 - Initial import into...

Oracle Linux 10 : pcs (ELSA-2026-2438)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2438 advisory. 0.12.1-1.el101.2 - Fixed CVE-2025-13465 by updating pcs-web-ui to 0.1.23.1 Resolves: RHEL-144292 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : libsoup (ELSA-2026-0925)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0925 advisory. - Fix CVE-2025-14523 Orabug: 38873507 - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug: 38664275 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049...

Oracle Linux 7 : glib2 (ELSA-2026-1608)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-1608 advisory. - Fixes CVE-2025-13601 gescapeuristring overflow Orabug: 38909821 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2026-0931)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0931 advisory. - Fixes CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 - Fixes CVE-2025-53057 CVE-2025-53066 - Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698...

Oracle Linux 8 : python3.12 (ELSA-2026-2419)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2419 advisory. 3.12.12-2 - Security fix for CVE-2025-13836 Resolves: RHEL-140993 Tenable has extracted the preceding description block directly from the Oracle Linux security...