Oracle Linux 9 : ELSA-2026-66366-0: / vim (ELSA-2026-663660)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663660 advisory. - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...

Oracle Linux 9 : ELSA-2026-66180-0: / kernel (ELSA-2026-661800)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-661800 advisory. - tcp: call skdataready after listener migration Felix Maurer RHEL-232236 CVE-2026-46015 - flowdissector: do not dissect PPPoE PFC frames Felix Maure...

Oracle Linux 8 : ELSA-2026-66348-0: / vim (ELSA-2026-663480)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663480 advisory. - RHEL-253666 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215662 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...

Oracle Linux 8 : osbuild-composer (ELSA-2026-48790)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48790 advisory. - CVE-2026-32280 - CVE-2026-32282 - CVE-2026-32283 - CVE-2026-33186 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : ELSA-2026-66542-0: / nginx (ELSA-2026-665420)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-665420 advisory. - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer...

kernel security update

6.12.0-211.54.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : glibc (ELSA-2026-500297)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500297 advisory. - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing RHEL-180652, RHEL-185612 - CVE-2026-5928: Fix ungetwc operating on byte stream...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2026-42895)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42895 advisory. 1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625...

Oracle Linux 8 : ELSA-2026-66451-0: / glib2 (ELSA-2026-664510)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664510 advisory. 2.56.4-178 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : ELSA-2026-66403-0: / coreutils (ELSA-2026-664030)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664030 advisory. 8.32-41.0.1.el98.1 - clean up empty file if cp is failed Orabug 15973168 8.32-41.1 - unexpand: fix CVE-2026-56392 and related crashes RHEL-216788 - fix...

Oracle Linux 10 : ELSA-2026-66460-0: / gstreamer1-plugins-base (ELSA-2026-664600)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664600 advisory. 1.26.7-2.2 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253746 Tenable has extracted the preceding description block directly fr...

Oracle Linux 10 : ELSA-2026-65899-0: / postgresql16-postgis (ELSA-2026-658990)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-658990 advisory. 3.5.3-4.1 - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : ELSA-2026-66325-0: / kernel (ELSA-2026-663250)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663250 advisory. - tipc: fix slab-use-after-free Read in tipcaeaddecryptdone Xin Long RHEL-228877 CVE-2026-63801 - tipc: clear sock-sk on the failed-insert path in...

Oracle Linux 8 : ELSA-2026-64794-0: / httpd:2.4 (ELSA-2026-647940)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647940 advisory. - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 - Resolves:...

Oracle Linux 9 : ELSA-2026-65993-0: / qt5-qtbase (ELSA-2026-659930)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-659930 advisory. 5.15.9-11.1 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247216 Tenable has extracted the preceding description block...

kernel security, bug fix, and enhancement update

6.12.0-211.53.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : ELSA-2026-64823-0: / redis:6 (ELSA-2026-648230)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648230 advisory. 6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373 Tenable has...

Oracle Linux 8 : ELSA-2026-65832-0: / mrtg (ELSA-2026-658320)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-658320 advisory. 2.17.7-1.1 - Fix CVE-2026-72694: symlink-following chown in PID file handling Resolves: RHEL-236037 Tenable has extracted the preceding description block...

Oracle Linux 9 : ELSA-2026-66179-0: / perl-DBI (ELSA-2026-661790)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-661790 advisory. 1.643-9.5 - Use Module::Load for safer package loading in DBI::Profile CVE-2026-19546 Related: RHEL-236831 Tenable has extracted the preceding description blo...

Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2026-54752)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54752 advisory. - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 Tenable has...