Oracle Linux 9 : ELSA-2026-62406-0: / grafana (ELSA-2026-624060)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-624060 advisory. 10.2.6-23.3 - Rebuild against updated golang - Resolves RHEL-251872 - Resolves RHEL-251758 - Resolves RHEL-242365 - Resolves RHEL-242251 - Resolves...

Oracle Linux 8 : ELSA-2026-62420-0: / gegl04 (ELSA-2026-624200)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-624200 advisory. 0.4.4-7.1 - Fix CVE-2026-18300 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 : perl-GD (ELSA-2026-49758)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49758 advisory. 2.49-3.0.1 - Security update for CVE-2026-11526 Orabug: 39825996 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : nginx (ELSA-2026-59362)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59362 advisory. - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217969 -...

Oracle Linux 8 : ELSA-2026-62334-0: / php:7.4 (ELSA-2026-623340)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-623340 advisory. - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 php-pear...

Oracle Linux 9 : ELSA-2026-61259-0: / php (ELSA-2026-612590)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612590 advisory. - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 Tenable has...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500249)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500249 advisory. - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 - KVM: x86/mmu: Stop needlessly making...

Oracle Linux 10 : ELSA-2026-63332-0: / buildah (ELSA-2026-633320)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-633320 advisory. - rebuild for CVE-2026-33810 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500248 advisory. - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 - KVM: x86: Cancel delayed I/O APIC E...

Oracle Linux 10 : ELSA-2026-63119-0: / grafana-pcp (ELSA-2026-631190)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-631190 advisory. 5.3.0-8.1 - Rebuilt for updated golang - Resolves RHEL-241480, RHEL-251115, RHEL-242257, RHEL-242154, RHEL-241751 5.3.0-8 - Resolves RHEL-188287:...

Oracle Linux 10 : ELSA-2026-61378-0: / freerdp (ELSA-2026-613780)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613780 advisory. - Backport several CVE fixes CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297,...

kernel security update

6.12.0-211.51.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500247)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500247 advisory. - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974845 CVE-2026-80590 - x86/bugs: Make Safe-RET robust against...

Oracle Linux 9 : ELSA-2026-61903-0: / php:8.2 (ELSA-2026-619030)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-619030 advisory. php 8.2.33-1 - rebase to 8.2.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040...

Oracle Linux 10 : ELSA-2026-61586-0: / tar (ELSA-2026-615860)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-615860 advisory. - Backport upstream patches for CVE-2026-18477, fixes a bug where incremental restore with cyclic renames between backups may create a temporary...

Oracle Linux 10 : ELSA-2026-62577-0: / go-fdo-client (ELSA-2026-625770)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-625770 advisory. 1.0.0-7 - Rebuild go-fdo-client against updated golang 1.0.0-6 - Rebuild go-fdo-client against updated golang 1.0.0-5 - Rebuild against updated gola...

Oracle Linux 8 : ELSA-2026-62571-0: / freerdp (ELSA-2026-625710)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625710 advisory. 2:2.11.7-12 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225093, RHEL-227724,...

Oracle Linux 10 : ELSA-2026-62578-0: / go-fdo-server (ELSA-2026-625780)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625780 advisory. 1.0.1-4 - Rebuild go-fdo-server against updated golang 1.0.1-3 - Rebuild against updated golang Tenable has extracted the preceding description bloc...

Oracle Linux 8 : ELSA-2026-62219-0: / nodejs:22 (ELSA-2026-622190)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622190 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-235693 RHEL-235688 RHEL-235662 nodejs-nodemon - Rebase...

Oracle Linux 10 : ELSA-2026-63022-0: / grafana (ELSA-2026-630220)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-630220 advisory. 10.2.6-28.5 - Rebuild against updated golang - Resolves RHEL-241197 - Resolves RHEL-241426 - Resolves RHEL-241690 - Resolves RHEL-241975 - Resolves...