Oracle Linux 10 : buildah (ELSA-2026-36199)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36199 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the...

Oracle Linux 10 : buildah (ELSA-2026-29195)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-29195 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the...

Oracle Linux 10 : kernel (ELSA-2026-44270)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-44270 advisory. 6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

Oracle Linux 10 : openssl (ELSA-2026-22314)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22314 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-44438)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-44438 advisory. 1:1.1.1k-5.4 - Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify Tenable has extracted the preceding description block directly from the Oracle...

kernel security update

6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : c-ares (ELSA-2026-42096)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-42096 advisory. 1.34.6-2 - Fix double-free in processtimeouts CVE-2026-33630 Resolves: RHEL-192867 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : python3.14 (ELSA-2026-41949)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41949 advisory. 3.14.5-1.1 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 9 : glibc (ELSA-2026-42952)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42952 advisory. - CVE-2026-5435 Out-of-bounds write via TSIG record processing RHEL-180336, RHEL-185614 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : acl (ELSA-2026-43420)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-43420 advisory. 2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186111 -...

Oracle Linux 10 : mysql8.4 (ELSA-2026-20693)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20693 advisory. 8.4.9-1 - Rebase to 8.4.9 8.4.8-2 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files Tenable has extracted the preceding...

Oracle Linux 10 : nginx (ELSA-2026-29874)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-29874 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

Oracle Linux 10 : libpq (ELSA-2026-44391)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-44391 advisory. 16.14-1 - Rebase to upstream release 16.14 - Resolves: RHEL-192240 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 10 : dogtag-pki (ELSA-2026-43400)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-43400 advisory. 11.9.0-4.0.1 - Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version. 11.9.0-4 - Update jackson bundled to 2.21.4 -...

Oracle Linux 9 : sssd (ELSA-2026-42122)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42122 advisory. - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege...

Oracle Linux 10 : podman (ELSA-2026-24470)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-24470 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

Oracle Linux 8 : nodejs:22 (ELSA-2026-41947)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41947 advisory. - Update to version 22.23.1 Resolves: RHEL-176170 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619...

Oracle Linux 8 : maven:3.8 (ELSA-2026-40841)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40841 advisory. - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165339 Tenable has extracted the preceding description block directly from the...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-21286)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21286 advisory. 8.0.128-1.0.1 - Add support for Oracle Linux 8.0.128-1 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 8.0.127-1 - Update to...

Oracle Linux 9 : libpq (ELSA-2026-44308)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-44308 advisory. - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 Tenable has extracted the preceding...