Oracle Linux 10 : mingw-glib2 (ELSA-2026-18344)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18344 advisory. 2.87.0-1 - Update to 2.87.0 - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in gescapeuristring Tenable has extracted the preceding descriptio...

Oracle Linux 10 : glibc (ELSA-2026-19061)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19061 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

Oracle Linux 10 : postgresql16 (ELSA-2026-19010)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19010 advisory. 16.13-1.0.1 - Replace upstream reference Orabug: 37044148 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 10 : sudo (ELSA-2026-19067)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19067 advisory. - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-164620 - CVE-2026-35535 sudo...

Oracle Linux 10 : buildah (ELSA-2026-19032)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19032 advisory. - Rebuild for new golang to address CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 9 : libxml2 (ELSA-2026-39317)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39317 advisory. 2.9.13-14.2 - Fix CVE-2025-6170 RHEL-182016 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : libreoffice (ELSA-2026-36832)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36832 advisory. - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : libsolv (ELSA-2026-39315)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39315 advisory. 0.7.24-6 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178982 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : python-pillow (ELSA-2026-39127)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39127 advisory. 5.1.1-22 - Security fix for CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380 Resolves: RHEL-192830, RHEL-192770, RHEL-192684, RHEL-19273...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-19049)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19049 advisory. - rebuilt to fix CVE-2026-27137, CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 9 : PackageKit (ELSA-2026-19354)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19354 advisory. 1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : python3.12 (ELSA-2026-19064)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19064 advisory. - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 -...

Oracle Linux 9 : kernel (ELSA-2026-36645)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36645 advisory. - eventpoll: fix epremove struct eventpoll / struct file UAF Ian Kent RHEL-180773 CVE-2026-46242 - eventpoll: defer struct eventpoll free to RCU grace...

kernel security, bug fix, and enhancement update

5.14.0-687.25.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 8 : kernel (ELSA-2026-39083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39083 advisory. - locking/rtmutex: Skip removewaiter when waiter is not enqueued Phil Auld RHEL-193334 CVE-2026-53166 - rtmutex: Use waiter::task instead of current i...

Oracle Linux 10 : python-jwcrypto (ELSA-2026-19042)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19042 advisory. 1.5.6-5 - Fix CVE-2026-39373: Memory exhaustion via crafted compressed JWE tokens Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 10 : iputils (ELSA-2026-18162)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-18162 advisory. 20240905-5 - Fix CVE-2025-48964 iputils: iputils integer overflow RHEL-115832 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : crun (ELSA-2026-19020)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19020 advisory. 1.27-2 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : qemu-kvm (ELSA-2026-18479)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18479 advisory. 10.1.0-16 - kvm-linux-aio-Put-all-parameters-into-qemulaiocb.patch RHEL-158224 - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch RHEL-158224...

Oracle Linux 7 : host-metering (ELSA-2026-16101)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-16101 advisory. 1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233 Tenable has extracted the preceding description block directly fro...