Oracle Linux 9 : mrtg (ELSA-2026-57600)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-57600 advisory. 2.17.7-12.0.1.el98.1 - Create mrtg lock file before running restorecon on it Orabug: 39096845 2.17.7-12.1 - Fix CVE-2026-72694: symlink-following chown of pid...

Oracle Linux 10 : python-urwid (ELSA-2026-58561)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58561 advisory. 2.5.3-5 - Use secure random session identifiers Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : NetworkManager (ELSA-2026-58572)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58572 advisory. 1.54.3-5.0.1 - Introduce always-ignore-carrier setting Orabug: 39663315 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracl...

Oracle Linux 9 : qemu-kvm (ELSA-2026-500220)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500220 advisory. - tests/9p: add 3 xattr FID limit test cases local fs driver Christian Schoenebeck Orabug: 39636027 CVE-2026-8348 - tests/9p: add 3 xattr FID limit...

Oracle Linux 9 : cups-filters (ELSA-2026-58560)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58560 advisory. 1.28.7-27.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not followin...

Oracle Linux 8 : cups-filters (ELSA-2026-57451)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57451 advisory. 1.20.0-36.0.1.el810.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not...

Oracle Linux 10 : kbd (ELSA-2026-57597)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57597 advisory. 2.6.4-8 - Fix openvt -u process matching to be more conservative CVE-2026-72693 Resolves: RHEL-235987 Tenable has extracted the preceding description block...

Oracle Linux 8 : kernel (ELSA-2026-55764)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55764 advisory. - udf: fix partition descriptor append bookkeeping Ravi Singh RHEL-179571 CVE-2026-45991 - ice: fix double-free of txbuf skb Michal Schmidt RHEL-19219...

Oracle Linux 9 : kernel (ELSA-2026-57252)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57252 advisory. - smb: client: validate DFS referral PathConsumed CKI Backport Bot RHEL-237668 CVE-2026-68343 - posix-cpu-timers: Prevent UAF caused by non-leader exe...

Oracle Linux 8 : perl-Date-Manip (ELSA-2026-57562)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-57562 advisory. - Fix CVE-2026-60075: prevent ReDoS via crafted strings with long interior whitespace runs in date/time parsing Tenable has extracted the preceding description...

Oracle Linux 8 : curl (ELSA-2026-57462)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57462 advisory. - fix TLS/STARTTLS connection reuse vulnerability CVE-2026-8286 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : php:8.2 (ELSA-2026-57574)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57574 advisory. libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu...

Oracle Linux 9 : php:8.3 (ELSA-2026-57539)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57539 advisory. php 8.3.33-1 - rebase to 8.3.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2026-55787)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55787 advisory. 1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625...

Oracle Linux 9 : kbd (ELSA-2026-57610)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57610 advisory. 2.4.0-12 - Fix CVE-2026-72693: openvt -u process matching made more conservative Resolves: RHEL-235988 Tenable has extracted the preceding description block...

Oracle Linux 9 : perl-Date-Manip (ELSA-2026-56970)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-56970 advisory. 6.85-3.1 - Fix CVE-2026-60075: prevent ReDoS via long whitespace runs in date/time parsing Related: RHEL-239797 Tenable has extracted the preceding description...

Oracle Linux 10 : kernel (ELSA-2026-57251)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57251 advisory. - udf: fix partition descriptor append bookkeeping CKI Backport Bot RHEL-179570 CVE-2026-45991 - crypto: pcrypt - Fix handling of MAYBACKLOG requests...

kernel security, bug fix, and enhancement update

4.18.0-553.157.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : mysql:8.4 (ELSA-2026-56973)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56973 advisory. mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069...

Oracle Linux 10 : yggdrasil (ELSA-2026-57126)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57126 advisory. 0.4.9.2-2 - Rebuild yggdrasil against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...