Oracle Linux 10 : ELSA-2026-67156-0: / perl (ELSA-2026-671560)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671560 advisory. - Fixes: CVE-2026-13221 - regcompstudy: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir Tenable has extract...

kernel security, bug fix, and enhancement update

5.14.0-687.47.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : ELSA-2026-67155-0: / perl (ELSA-2026-671550)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671550 advisory. - Fixes: CVE-2026-13221 - Don't create a trie that would overflow Thu Jul 10 2025 Jitka Plesnikova Tenable has extracted the preceding description block...

Oracle Linux 9 : ELSA-2026-67146-0: / python-tornado (ELSA-2026-671460)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671460 advisory. 6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : ELSA-2026-67147-0: / python-tornado (ELSA-2026-671470)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671470 advisory. 6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266 Tenable has extracted the preceding description block directly from the Oracle Linux security...

kernel security update

4.18.0-553.162.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 8 : ELSA-2026-67269-0: / perl-YAML-Syck (ELSA-2026-672690)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-672690 advisory. - Fix four libsyck memory-safety CVEs: CVE-2026-13713, CVE-2026-57075, CVE-2026-57076, CVE-2026-57077 Tenable has extracted the preceding description block...

Oracle Linux 8 : ELSA-2026-67161-0: / git-lfs (ELSA-2026-671610)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671610 advisory. 3.4.1-13 - Rebuild with new Golang - Resolves: RHEL-241521, RHEL-242322, RHEL-241889 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : ELSA-2026-67129-0: / firefox (ELSA-2026-671290)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671290 advisory. 140.15.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

Oracle Linux 10 : ELSA-2026-67154-0: / openssl (ELSA-2026-671540)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671540 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...

Oracle Linux 9 : ELSA-2026-67165-0: / openssl (ELSA-2026-671650)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671650 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...

Oracle Linux 10 : ELSA-2026-66355-0: / kernel (ELSA-2026-663550)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663550 advisory. 6.12.0-211.54.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

Oracle Linux 9 : ELSA-2026-67285-0: / rust (ELSA-2026-672850)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-672850 advisory. 1.92.0-2 - Apply libgit2 fix for CVE-2026-53587 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : ELSA-2026-67145-0: / gstreamer1-plugins-base (ELSA-2026-671450)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671450 advisory. - Add patch for CVE-2026-85150 Resolves: RHEL-253741 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 9 : ELSA-2026-65153-0: / osbuild-composer (ELSA-2026-651530)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651530 advisory. 175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858,...

Oracle Linux 10 : ELSA-2026-65895-0: / osbuild-composer (ELSA-2026-658950)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-658950 advisory. 176-1.0.2 - Rebuild for CVE-2026-33810, CVE-2026-33818, CVE-2026-39820, CVE-2026-42499,CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-5685...

Oracle Linux 9 : ELSA-2026-65886-0: / image-builder (ELSA-2026-658860)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-658860 advisory. 72.0.0-1.0.2 - Rebuild to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499,...

Oracle Linux 9 : ELSA-2026-66203-0: / python3.12-lxml (ELSA-2026-662030)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-662030 advisory. 4.9.3-2.1 - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488 Tenable has extracted the preceding description block...

Oracle Linux 10 : ELSA-2026-66349-0: / freerdp (ELSA-2026-663490)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663490 advisory. 2:3.10.3-12.11 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247346 Tenable has extracted the preceding description block...

Oracle Linux 9 : ELSA-2026-66366-0: / vim (ELSA-2026-663660)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663660 advisory. - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...