Oracle Linux 8 : python-lxml (ELSA-2026-67943)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-67943 advisory. - Security fix for CVE-2026-49825: missing xlink:href in known HTML link attributes Resolves: RHEL-251508 - Security fix for CVE-2021-43818 Resolves: rhbz20325...

Oracle Linux 9 : openssl (ELSA-2026-500327)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500327 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...

Oracle Linux 9 : kernel (ELSA-2026-68570)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68570 advisory. - selinux: check connect-related permissions on TCP Fast Open CKI Backport Bot RHEL-258014 CVE-2026-72243 - wifi: mac80211: limit injected antenna ind...

kernel security, bug fix, and enhancement update

5.14.0-687.49.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : perl-Net-DNS (ELSA-2026-68786)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68786 advisory. - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : perl-Net-DNS (ELSA-2026-68787)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-68787 advisory. - Fix unbounded recursion in TSIG record processing CVE-2026-81928 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : kernel (ELSA-2026-68531)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68531 advisory. - net: qrtr: fix 32-bit integer overflow in qrtrendpointpost Izabela Bakollari RHEL-244096 CVE-2026-72298 - ipv6: sit: reload inner IPv6 header after...

Oracle Linux 8 : tomcat (ELSA-2026-68677)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68677 advisory. - Resolves: RHEL-192806 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219561 Security constraint bypass via improper URL encodi...

Oracle Linux 10 : sudo (ELSA-2026-68692)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68692 advisory. - Fix CVE-2026-82474: execveat2 intercept/logsubcmds bypass Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : kernel (ELSA-2026-68507)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68507 advisory. - wifi: ath9k: hifusb: don't dereference hifdev after re-arming firmware request Izabela Bakollari RHEL-241004 CVE-2026-68363 - wifi: iwlwifi: mld:...

Oracle Linux 10 : tomcat9 (ELSA-2026-68651)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68651 advisory. - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-68676)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68676 advisory. 10.0.112-1.0.1 - Add support for Oracle Linux 10.0.112-1 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252315 Tenable has extract...

Oracle Linux 9 : tomcat (ELSA-2026-68660)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68660 advisory. - Resolves: RHEL-192825 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192659 Improper Input Validation vulnerability due to...

kernel security update

4.18.0-553.164.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 8 : libsoup (ELSA-2026-68266)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68266 advisory. 2.62.3-15 - Backport patch for CVE-2026-15711 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : postgresql:16 (ELSA-2026-67491)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67491 advisory. - Fix CVE-2026-73515 - Fix CVE-2026-73515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : postgresql:18 (ELSA-2026-67848)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67848 advisory. - Fix backport regression in STFromFlatGeobufToTable CVE-2026-73515 patch - Backported a patch to fix a security vulnerability CVE-2026-73515 Tenable...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-68233)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68233 advisory. 9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252274 Tenable has extracted t...

Oracle Linux 8 : ELSA-2026-65147-0: / microcode_ctl (ELSA-2026-651470)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651470 advisory. - Security advisories: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html CVE-2025-31936...

Oracle Linux 8 : .NET / 8.0 (ELSA-2026-68316)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68316 advisory. 8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252244 Tenable has extracted the...