kernel security update

4.18.0-553.150.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

thunderbird security update

140.13.0-1.0.1 - Add Oracle prefs 140.13.0-1 - Update to 140.13.0 ESR...

Oracle Linux 10 : p11-kit (ELSA-2026-49668)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49668 advisory. 0.26.4-1 - Rebase to 0.26.4 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 8 : javapackages-tools:201801 (ELSA-2026-41948)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41948 advisory. - Resolves: CVE-2019-10086, CVE-2025-48734 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : nodejs:22 (ELSA-2026-47059)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47059 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-193842 RHEL-193874 RHEL-208661 - Update to...

Oracle Linux 10 : nodejs22 (ELSA-2026-35842)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-35842 advisory. - CVE-2026-42338 ip-address HTML escaping fix. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : python-tornado (ELSA-2026-24342)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-24342 advisory. - Backport fix for CVE-2026-31958 Orabug: 39521310 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : nodejs:24 (ELSA-2026-47057)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47057 advisory. - Fix CVE-2026-59873, CVE-2026-59874 node-tar in npm's bundled tar - Fix CVE-2026-13149 brace-expansion in npm's bundled brace-expansion Tenable has...

Oracle Linux 10 / 9 : java-25-openjdk (ELSA-2026-42899)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42899 advisory. 25.0.4.0.7-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.0.7-1.0 - Update to jdk-25.0.4+7 GA - Update release notes to 25.0.4+7 -...

Oracle Linux 8 : kernel (ELSA-2026-47011)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47011 advisory. 4.18.0-553.148.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to t...

Oracle Linux 9 : nodejs:22 (ELSA-2026-47058)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47058 advisory. - Fix CVE-2026-59873, CVE-2026-59874 node-tar by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 brace-expansion in npm's bundled...

Oracle Linux 8 : nodejs:24 (ELSA-2026-47060)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47060 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 Tenable has...

K000162704: Oracle Java vulnerability CVE-2026-62574

Security Advisory Description Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Install. Supported versions that are affected are Oracle Java SE: 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for...

Oracle Linux 8 : libgcrypt (ELSA-2026-47117)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47117 advisory. 1.8.5-8 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext Tenable has extracted the preceding description block directly...

Oracle Linux 8 : python-pillow (ELSA-2026-48021)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48021 advisory. 5.1.1-23 - Security fix for CVE-2026-54058, CVE-2026-59197 Resolves: RHEL-211857, RHEL-211848 Tenable has extracted the preceding description block...

Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2026-47731)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47731 advisory. - Fix buffer overflow in DTLS certificate subject DN handling CVE-2026-59692 Resolves: RHEL-193570 Tenable has extracted the preceding description blo...

Oracle Linux 7 : gimp (ELSA-2026-26168)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26168 advisory. - Fixes CVE-2026-4150, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887 Orabug: 39564202 - Fixes CVE-2025-14422 Orabug: 38904303 - Fixes CVE-2025-10922...

Oracle Linux 8 : sssd (ELSA-2026-46990)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46990 advisory. - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege...

PT-2026-67528

Name of the Vulnerable Software and Affected Versions cryptography versions 44.0.0 through 49.9.9 Description The pkcs7 decrypt der, pkcs7 decrypt pem, and pkcs7 decrypt smime functions report the outcome of decrypting a RecipientInfo's encryptedKey in distinguishable ways, including timing...

Oracle Linux 9 : firefox (ELSA-2026-47104)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47104 advisory. 140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...