Tenable Core 2026 Quarterly Release Notes

Tip: You can subscribe to receive alerts for Tenable documentation updates.

These release notes summarize updates made to Tenable Core in 2026. Downloading and applying the most recent version of the offline ISO image initiates these updates on your Tenable Core machine.

Tip: Tenable recommends applying all offline updates, in order, to your offline Tenable Core machine. Do not skip offline updates.

To update using the Tenable Core offline ISO image, see the documentation for your application:

For more information about product updates, see the release notes for your application.

These release notes are listed in reverse chronological order.

Q3 2026

  • Tenable Core KVM images have additional cloud-init datasources enabled. It is now possible to provide custom userdata to Tenable Core instances running in OpenStack, Vultr, CloudSigma, ScaleWay, and other services that use these datasources.

  • Tenable offerings are now available in AWS Marketplace - New Zealand region.

Security Updates

Type Reference
ELSA-2026-38504 container-tools:ol8 security update

CVE-2026-33811, CVE-2026-39835, CVE-2026-57231
ELSA-2026-39179 kernel security update

CVE-2026-46086, CVE-2026-46116
ELSA-2026-42090 glib2 security update

CVE-2026-58016
ELSA-2026-42552 kernel security, bug fix, and enhancement update

CVE-2026-46117, CVE-2026-53071
ELSA-2026-42733 glibc security update

CVE-2026-5435, CVE-2026-5928, CVE-2026-6238
ELSA-2026-42895 java-21-openjdk security update

CVE-2026-41254, CVE-2026-46917, CVE-2026-46968, CVE-2026-47010, CVE-2026-47021, CVE-2026-47027, CVE-2026-47059, CVE-2026-47063, CVE-2026-60147
ELSA-2026-43420 acl security update

CVE-2026-54369, CVE-2026-54370
ELSA-2026-45115 kernel security update

CVE-2025-40026, CVE-2026-52993, CVE-2026-53059
ELSA-2026-46990 sssd security, bug fix, and enhancement update

CVE-2026-14474, CVE-2026-14476
ELSA-2026-47011 kernel security update

CVE-2026-53006
ELSA-2026-47117 libgcrypt security update

CVE-2026-41989
ELSA-2026-47184 libtiff security update

CVE-2026-12912
ELSA-2026-47755 openssh security update

CVE-2026-55653, CVE-2026-55655
ELSA-2026-48703 vim security update

CVE-2026-55693, CVE-2026-57455, CVE-2026-57456, CVE-2026-59858
ELSA-2026-49214 kernel security update

CVE-2026-31692, CVE-2026-43116, CVE-2026-46150, CVE-2026-64530
ELSA-2026-49857 kernel security, bug fix, and enhancement update

CVE-2026-52923
ELSA-2026-50978 kernel security, bug fix, and enhancement update

CVE-2025-54518
ELSA-2026-52765 kernel security update

CVE-2026-64496
ELSA-2026-53848 isns-utils security update

CVE-2026-55995
ELSA-2026-54246 kernel security update

CVE-2026-45991, CVE-2026-53009
ELSA-2026-54290 python-idna security update

CVE-2026-45409
ELSA-2026-54575 dracut security update

CVE-2026-15816
ELSA-2026-54654 bind security update

CVE-2026-10723, CVE-2026-11622, CVE-2026-11721, CVE-2026-13204, CVE-2026-13321
ELSA-2026-55560 pcp security update

CVE-2026-16524, CVE-2026-16526, CVE-2026-16527, CVE-2026-16529
ELSA-2026-55764 kernel security, bug fix, and enhancement update

CVE-2025-39902, CVE-2026-17523, CVE-2026-43206, CVE-2026-53016, CVE-2026-53136, CVE-2026-53329, CVE-2026-53374, CVE-2026-63879, CVE-2026-63884, CVE-2026-64219
ELSA-2026-55784 unbound security update

CVE-2026-44690
ELSA-2026-55787 java-21-openjdk security update

CVE-2026-60589, CVE-2026-61308, CVE-2026-70907
ELSA-2026-55804 nghttp2 security update

CVE-2026-58055
ELSA-2026-56130 sg3_utils security, bug fix, and enhancement update

CVE-2026-16313
ELSA-2026-56131 pam security update

CVE-2026-54411
ELSA-2026-56133 attr security update

CVE-2026-54371
ELSA-2026-56219 python3 security update

CVE-2026-11940
ELSA-2026-57253 kernel security, bug fix, and enhancement update

CVE-2024-56602, CVE-2026-46120, CVE-2026-52991, CVE-2026-53189, CVE-2026-63887, CVE-2026-63888, CVE-2026-64048, CVE-2026-64379, CVE-2026-68388
ELSA-2026-57462 curl security, bug fix, and enhancement update

CVE-2026-8286
ELSA-2026-58555 NetworkManager security update

CVE-2026-10805
ELSA-2026-58562 python-urwid security update

CVE-2026-9323
ELSA-2026-58938 sqlite security update

CVE-2026-11822, CVE-2026-11824
ELSA-2026-59241 python-pyasn1 security update

CVE-2026-59886
ELSA-2026-59821 kernel security, bug fix, and enhancement update

CVE-2026-52924, CVE-2026-63886, CVE-2026-63913, CVE-2026-64189, CVE-2026-64191, CVE-2026-64276, CVE-2026-64277, CVE-2026-64320
ELSA-2026-61248-0 libxml2 security update

CVE-2026-11979
ELSA-2026-61766-0 glib2 security update

CVE-2026-15588, CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015
ELSA-2026-62144-0 wget security, bug fix, and enhancement update

CVE-2026-58469, CVE-2026-58471, CVE-2026-58472
ELSA-2026-62218-0 libssh security update

CVE-2026-59843, CVE-2026-59844, CVE-2026-59845, CVE-2026-59846, CVE-2026-59847, CVE-2026-59848, CVE-2026-59850
ELSA-2026-63014-0 kernel security, bug fix, and enhancement update

CVE-2024-57849, CVE-2025-71132, CVE-2026-45970, CVE-2026-53185, CVE-2026-53391, CVE-2026-53392, CVE-2026-53397, CVE-2026-53399, CVE-2026-63800, CVE-2026-64018, CVE-2026-64268, CVE-2026-64298, CVE-2026-68480, CVE-2026-74581
ELSA-2026-63163-0 container-tools:ol8 security update

CVE-2026-33818, CVE-2026-42499, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862
ELSA-2026-64772-0 xmlrpc-c security update

CVE-2026-15928
ELSA-2026-64809-0 expat security update

CVE-2026-50219, CVE-2026-56132
ELSA-2026-65147-0 microcode_ctl security, bug fix, and enhancement update

CVE-2025-31936, CVE-2025-35973
ELSA-2026-65998-0 gzip security update

CVE-2026-41991, CVE-2026-41992
ELSA-2026-66000-0 kernel security update

CVE-2026-43493, CVE-2026-53002, CVE-2026-64007, CVE-2026-64563, CVE-2026-68343, CVE-2026-72129, CVE-2026-74480
ELSA-2026-66325-0 kernel security, bug fix, and enhancement update

CVE-2025-68745, CVE-2026-46149, CVE-2026-52917, CVE-2026-52942, CVE-2026-52986, CVE-2026-53091, CVE-2026-53246, CVE-2026-63801, CVE-2026-63971, CVE-2026-64015, CVE-2026-64113, CVE-2026-68117, CVE-2026-68300, CVE-2026-68315, CVE-2026-68376
ELSA-2026-66348-0 vim security update

CVE-2026-28420, CVE-2026-52859, CVE-2026-55892, CVE-2026-59857, CVE-2026-73072, CVE-2026-73076, CVE-2026-73078
ELSA-2026-66451-0 glib2 security update

CVE-2026-16118
ELSA-2026-67162-0 perl security update

CVE-2026-13221
ELSA-2026-67266-0 libkcapi security update

CVE-2026-71225, CVE-2026-71226, CVE-2026-71227
ELSA-2026-67468-0 kernel security update

CVE-2024-53161, CVE-2025-71127, CVE-2026-43133, CVE-2026-52947, CVE-2026-53182, CVE-2026-63802, CVE-2026-63889, CVE-2026-64117, CVE-2026-68363, CVE-2026-72098, CVE-2026-74556
ELSA-2026-67908 libevent security update

CVE-2026-63382, CVE-2026-63383, CVE-2026-63384, CVE-2026-63385, CVE-2026-63387, CVE-2026-63388
ELSA-2026-68266 libsoup security update

CVE-2026-15711
ELSA-2026-68531 kernel security update

CVE-2026-23103, CVE-2026-31663, CVE-2026-43233, CVE-2026-43339, CVE-2026-46266, CVE-2026-46306, CVE-2026-52920, CVE-2026-53075, CVE-2026-53131, CVE-2026-53176, CVE-2026-53192, CVE-2026-53223, CVE-2026-53228, CVE-2026-53239, CVE-2026-53268, CVE-2026-53275, CVE-2026-63917, CVE-2026-63919, CVE-2026-63921, CVE-2026-64002, CVE-2026-68143, CVE-2026-68426
ELSA-2026-69095 libtiff security update

CVE-2026-52490
ELSA-2026-69120 unbound security update

CVE-2026-50252
ELSA-2026-69266 openssh security, bug fix, and enhancement update

CVE-2026-59995, CVE-2026-59999, CVE-2026-73282
ELSA-2026-69655 libxml2 security, bug fix, and enhancement update

CVE-2026-6653
ELSA-2026-69964 coreutils security update

CVE-2025-5278
ELSA-2026-70390 tar security, bug fix, and enhancement update

CVE-2025-45582, CVE-2026-18477, CVE-2026-18508, CVE-2026-5704
ELSA-2026-70402 kernel security, bug fix, and enhancement update

CVE-2023-54120, CVE-2023-54214, CVE-2025-39964, CVE-2025-71082, CVE-2026-43334, CVE-2026-45894, CVE-2026-46043, CVE-2026-46133, CVE-2026-52918, CVE-2026-53053, CVE-2026-53062, CVE-2026-53254, CVE-2026-53256, CVE-2026-63823, CVE-2026-63947, CVE-2026-63975, CVE-2026-64534, CVE-2026-64582, CVE-2026-68188, CVE-2026-68293
ELSA-2026-70754 unbound security update

CVE-2026-81634, CVE-2026-81642, CVE-2026-82717
ELSA-2026-71213 kernel security, bug fix, and enhancement update

CVE-2026-43370, CVE-2026-63831, CVE-2026-64564, CVE-2026-72261, CVE-2026-80844, CVE-2026-81000, CVE-2026-89846
ELSA-2026-71329 kernel security update

CVE-2026-31566, CVE-2026-52912, CVE-2026-68121, CVE-2026-80714, CVE-2026-89480
ELSA-2026-71641 libxml2 security update

CVE-2026-74860, CVE-2026-86138, CVE-2026-86140, CVE-2026-86143, CVE-2026-86144
ELSA-2026-72448 expat security update

CVE-2026-66046, CVE-2026-93990
ELSA-2026-72468 kernel security update

CVE-2025-40323, CVE-2026-45942, CVE-2026-46199, CVE-2026-46204, CVE-2026-46230, CVE-2026-63875, CVE-2026-64034, CVE-2026-64556, CVE-2026-68155, CVE-2026-68156, CVE-2026-68159, CVE-2026-68273, CVE-2026-74753
ELSA-2026-73511 gawk security update

CVE-2026-40467, CVE-2026-40468
ELSA-2026-74095 rsync security, bug fix, and enhancement update

CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53789, CVE-2026-53790, CVE-2026-53793, CVE-2026-53795, CVE-2026-53802, CVE-2026-53803, CVE-2026-70452, CVE-2026-70453, CVE-2026-70456, CVE-2026-70458, CVE-2026-70460, CVE-2026-70461, CVE-2026-70463, CVE-2026-70464
ELSA-2026-74133 kernel security, bug fix, and enhancement update

CVE-2026-64102, CVE-2026-68299, CVE-2026-72099, CVE-2026-72329
ELSA-2026-75580 sudo security update

CVE-2026-96512
ELSA-2026-75674 mariadb-connector-c security update

CVE-2026-44172
ELSA-2026-75747 kernel security, bug fix, and enhancement update

CVE-2022-50756, CVE-2023-54048, CVE-2025-39994, CVE-2025-40242, CVE-2026-23105, CVE-2026-45856, CVE-2026-45861, CVE-2026-46319, CVE-2026-52972, CVE-2026-53049, CVE-2026-53230, CVE-2026-53270, CVE-2026-63794, CVE-2026-63829, CVE-2026-63992, CVE-2026-63994, CVE-2026-68432, CVE-2026-72052, CVE-2026-72255, CVE-2026-74516, CVE-2026-74569, CVE-2026-74669, CVE-2026-74744, CVE-2026-74746, CVE-2026-80921, CVE-2026-89481, CVE-2026-89972, CVE-2026-90227, CVE-2026-97417
ELSA-2026-76045 libpcap security update

CVE-2026-0799
ELSA-2026-77359 vim security update

CVE-2026-73073
ELSA-2026-77498 kernel security update

CVE-2026-64115, CVE-2026-74582, CVE-2026-89530
ELSA-2026-79162 bind security update

CVE-2026-19666, CVE-2026-19667, CVE-2026-80274
ELSA-2026-80510 compat-openssl10 security update

CVE-2026-84782
ELSA-2026-80687 flatpak security update

CVE-2026-90616, CVE-2026-96275, CVE-2026-96280, CVE-2026-96808
ELSA-2026-500239 microcode_ctl security update

CVE-2025-31356, CVE-2026-20705, CVE-2026-20707, CVE-2026-20708, CVE-2026-20712, CVE-2026-20713, CVE-2026-20715, CVE-2026-20734, CVE-2026-20760, CVE-2026-20775, CVE-2026-20885, CVE-2026-20898, CVE-2026-20901, CVE-2026-20917

Updates

Type
ELBA-2026-47114 microcode_ctl bug fix and enhancement update
ELBA-2026-47115 coreutils bug fix and enhancement update
ELBA-2026-47121 linux-firmware bug fix and enhancement update
ELBA-2026-47175 grubby bug fix and enhancement update
ELBA-2026-48830 libxmlb bug fix and enhancement update
ELBA-2026-48843 fwupd bug fix and enhancement update
ELBA-2026-51069 tzdata bug fix and enhancement update
ELBA-2026-55438 libxmlb bug fix and enhancement update
ELBA-2026-56132 firewalld bug fix and enhancement update
ELBA-2026-56134 nftables bug fix and enhancement update
ELBA-2026-59504 tuned bug fix and enhancement update
ELBA-2026-59530 container-tools:ol8 bug fix and enhancement update
ELBA-2026-60147-0 sos bug fix and enhancement update
ELBA-2026-63120-0 systemd bug fix and enhancement update
ELBA-2026-65138-0 ksh bug fix and enhancement update
ELBA-2026-65145-0 polkit bug fix and enhancement update
ELBA-2026-65148-0 smartmontools bug fix and enhancement update
ELBA-2026-70265 bind bug fix and enhancement update
ELBA-2026-73436 nspr and nss bug fix and enhancement update
ELBA-2026-73438 cockpit bug fix and enhancement update
ELBA-2026-73445 mdadm bug fix and enhancement update
ELBA-2026-73448 gobject-introspection bug fix and enhancement update
ELBA-2026-77613 tzdata bug fix and enhancement update
ELBA-2026-500115 glibc bug fix update
ELBA-2026-500148 systemd bug fix update
ELBA-2026-500286 pcp bug fix update
ELBA-2026-500331 grub2 bug fix update
ELBA-2026-500343 iscsi-initiator-utils bug fix update

Q2 2026

  • Storage requirements for backups taken on Tenable Core are now the size of the data being backed up, rather than two times the size. Note that the archives produced after the update appear incomplete if manually examined using `tar` unless the `--ignore-zeros` flag is included in tar commands. Archives taken after the update must be restored on systems that also have the update. Attempting to restore on a system that hasn't been updated results in the error: "Cannot restore this backup. Unsupported version: 1.3."

  • The Available Updates section of the Update Management page now shows ELSA and CVE information associated with the available updates.

  • The Available Updates section of the Update Management page now includes columns for package vendor and download size.

  • Fixed SELinux contexts on Sensor Proxy log files to allow log rotation to work correctly.

Security Updates

Type Reference
ELSA-2026-14087 libsoup security update

CVE-2026-5119
ELSA-2026-15953 glib2 security update

CVE-2025-14087, CVE-2025-14512
ELSA-2026-16055 libtiff security update

CVE-2026-4775
ELSA-2026-16195 kernel security update

CVE-2026-43284
ELSA-2026-16252 jq security update

CVE-2026-39979, CVE-2026-40164
ELSA-2026-16799 krb5 security update

CVE-2026-40355, CVE-2026-40356
ELSA-2026-17481 rsync security update

CVE-2026-41035
ELSA-2026-19666 kernel security update

CVE-2026-46300, CVE-2026-46333
ELSA-2026-20587 glibc security update

CVE-2026-4046
ELSA-2026-20611 gnutls security update

CVE-2026-3833, CVE-2026-33845, CVE-2026-33846, CVE-2026-42009, CVE-2026-42010, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, CVE-2026-42014, CVE-2026-42015, CVE-2026-5260
ELSA-2026-21700 cockpit security update

CVE-2026-4802
ELSA-2026-21706 kernel security update

CVE-2025-39981, CVE-2025-68183, CVE-2025-68347, CVE-2025-71116, CVE-2026-23243, CVE-2026-23270, CVE-2026-23455, CVE-2026-31408, CVE-2026-31532, CVE-2026-31684, CVE-2026-31685, CVE-2026-31709, CVE-2026-43020, CVE-2026-43027, CVE-2026-43051, CVE-2026-43158, CVE-2026-43163, CVE-2026-43190
ELSA-2026-21756 flatpak security update

CVE-2026-34078, CVE-2026-34079
ELSA-2026-22315 compat-openssl10 security update

CVE-2026-28390
ELSA-2026-22721 expat security update

CVE-2026-45186
ELSA-2026-22730 vim security update

CVE-2026-35177
ELSA-2026-23258 kernel security update

CVE-2026-46243
ELSA-2026-24339 bind security update

CVE-2026-3039, CVE-2026-5946
ELSA-2026-24365 unbound security update

CVE-2026-42944, CVE-2026-42959
ELSA-2026-25121 kernel security update

CVE-2023-53781, CVE-2025-21858, CVE-2025-68366, CVE-2026-22984, CVE-2026-22990, CVE-2026-23392, CVE-2026-31581, CVE-2026-31613, CVE-2026-43037, CVE-2026-43038, CVE-2026-43125, CVE-2026-45852, CVE-2026-46181
ELSA-2026-26275 openssl security update

CVE-2024-4741, CVE-2026-45447
ELSA-2026-26354 libxml2 security update

CVE-2024-34459
ELSA-2026-26355 libxslt security update

CVE-2025-10911
ELSA-2026-26408 rsync security update

CVE-2026-29518, CVE-2026-43618
ELSA-2026-26427 kernel security update

CVE-2026-31669, CVE-2026-31786, CVE-2026-31787, CVE-2026-43110, CVE-2026-43329, CVE-2026-46056, CVE-2026-46125, CVE-2026-46152
ELSA-2026-26534 dracut security update

CVE-2026-6893
ELSA-2026-27353 kernel security, bug fix, and enhancement update

CVE-2026-31419, CVE-2026-31488, CVE-2026-43056, CVE-2026-43279, CVE-2026-46090, CVE-2026-46135, CVE-2026-46145, CVE-2026-46331
ELSA-2026-27811 kernel security update

CVE-2026-46054
ELSA-2026-28553 vim security update

CVE-2026-41411
ELSA-2026-29898 libpng security update

CVE-2026-33416
ELSA-2026-33126 glibc security update

CVE-2026-5450
ELSA-2026-33722 container-tools:ol8 security, bug fix, and enhancement update

CVE-2026-25679, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-34986
ELSA-2026-33743 kernel security, bug fix, and enhancement update

CVE-2026-23216, CVE-2026-45984, CVE-2026-46189
ELSA-2026-35833 container-tools:ol8 security update

CVE-2026-34986, CVE-2026-39829, CVE-2026-39830, CVE-2026-39832, CVE-2026-42508
ELSA-2026-36215 compat-openssl10 security update

CVE-2026-45447
ELSA-2026-36349 kernel security, bug fix, and enhancement update

CVE-2025-10263, CVE-2026-43198, CVE-2026-43450, CVE-2026-46209, CVE-2026-46227, CVE-2026-46259
ELSA-2026-36366 kernel security update

CVE-2026-43112
ELSA-2026-36728 libtasn1 security update

CVE-2025-13151
ELSA-2026-36730 libsolv security update

CVE-2026-48864
ELSA-2026-36732 python-urllib3 security update

CVE-2026-44431
ELSA-2026-36733 cups security update

CVE-2026-34980
ELSA-2026-36734 libxml2 security update

CVE-2025-6170
ELSA-2026-37282 unbound security update

CVE-2026-40622, CVE-2026-41292, CVE-2026-42534, CVE-2026-44390
ELSA-2026-38503 openssl security update

CVE-2026-28390
ELSA-2026-38510 vim security update

CVE-2026-46483, CVE-2026-47162, CVE-2026-47167, CVE-2026-52858
ELSA-2026-39083 kernel update

CVE-2025-71066, CVE-2025-71089, CVE-2026-31411, CVE-2026-43499, CVE-2026-46113, CVE-2026-53166, CVE-2026-53266, CVE-2026-53359
ELSA-2026-39320 python3 security update

CVE-2026-15308

Updates

Type
ELBA-2026-13663 glibc bug fix and enhancement update
ELBA-2026-20538 tzdata bug fix and enhancement update
ELBA-2026-20559 volume_key bug fix and enhancement update
ELBA-2026-20928 unbound bug fix and enhancement update
ELBA-2026-20931 firewalld bug fix and enhancement update
ELBA-2026-22798 grub2 bug fix and enhancement update
ELBA-2026-24588 sos bug fix and enhancement update
ELBA-2026-26353 systemd bug fix and enhancement update
ELBA-2026-36725 nfs-utils bug fix and enhancement update
ELBA-2026-36731 libusbx bug fix and enhancement update
ELBA-2026-50256 lvm2 bug fix update
ELBA-2026-50265 mdadm bug fix update
ELBA-2026-50269 satellite-5-client:1.0 bug fix update
ELBA-2026-50274 systemd bug fix update
ELBA-2026-50276 cloud-init bug fix update
ELBA-2026-50296 sos bug fix update
ELBA-2026-50316 pcp bug fix update
ELBA-2026-50320 sysstat bug fix update
ELBA-2026-50329 iscsi-initiator-utils bug fix update

July 10, 2026

Tenable is proud to announce the availability of our enhanced Update Management feature for Tenable Core. Tenable Core users can now easily see which Tenable Core patches address which CVEs. This feature takes the current Update Management interface output and expands the information in the Available Updates section provided to allow you to see which software updates address which CVEs

For more information, see Update on Demand.

June 24, 2026

Tenable is proud to announce a change we have made to the backup process for Tenable Core.   It is now possible to take a backup with free space at least equal to 1x the size of the backed up data rather than 2x the size of the backed up data. Backups created after this update must be restored on systems running the same update or later; attempting to restore on an older system returns the error: "Cannot restore this backup. Unsupported version: 1.3."

For more information on backup and restore actions and requirements, see Application Data Backup and Restore in the Tenable Core documentation.

Q1 2026

  • The remote storage user interface no longer displays the contents of current private key.

  • Fixed an issue where attempting to mount a severely corrupted offline ISO may hang the offline-ISO mounting script.

Oracle 8 Security Updates:

ELSA-2026-13577 Important kernel security update

ELSA-2026-13383 Important openssh security update

ELSA-2026-13285 Important libcap security update

ELSA-2026-11521 Important sudo security update

ELSA-2026-11509 Important vim security update

ELSA-2026-11349 Moderate libxml2 security update

ELSA-2026-11077 Important python3 security update

ELSA-2026-10741 Important gdk-pixbuf2 security update

ELSA-2026-9689 Important java-21-openjdk security update

ELSA-2026-8534 Important libarchive security update

ELSA-2026-8352 Important bind security update

ELSA-2026-7667 Important nghttp2 security update

ELSA-2026-6915 Important vim security update

ELSA-2026-6571 Moderate kernel security update

ELSA-2026-6473 Important python3 security update

ELSA-2026-6461 Important openssh security update

ELSA-2026-6436 Moderate rsync security update

ELSA-2026-6037 Moderate kernel security update

ELSA-2026-5588 Moderate python3 security update

ELSA-2026-5585 Moderate gnutls security update

ELSA-2026-4772 Moderate glibc security update

ELSA-2026-4728 Important libpng security update

ELSA-2026-4672 Important container-tools:rhel8 security update

ELSA-2026-4648 Moderate grub2 security update

ELSA-2026-4442 Moderate vim security update

ELSA-2026-4146 Important python-pyasn1 security update

ELSA-2026-3963 Important kernel security update

ELSA-2026-3938 Moderate nfs-utils security update

ELSA-2026-3428 Important container-tools:ol8 security update

ELSA-2026-3083 Important kernel security update

ELSA-2026-3042 Moderate openssl security update

ELSA-2026-2389 Important brotli security update

ELSA-2026-2264 Important kernel security update

ELSA-2026-2215 Important libsoup security update

ELSA-2026-2128 Moderate python3 security update

ELSA-2026-1852 Moderate util-linux security update

ELSA-2026-1254 Important python-urllib3 security update

ELSA-2026-1142 Important kernel security update

ELSA-2026-0991 Moderate glib2 security update

ELSA-2026-0928 Important java-21-openjdk security update

 

Oracle 8 Updates

ELBA-2026-50248 cloud-init bug fix update

ELBA-2026-50242 mdadm bug fix update

ELBA-2026-50235 kexec-tools bug fix update

ELBA-2026-50185 util-linux bug fix update

ELBA-2026-50166 systemd bug fix update

ELBA-2026-50158 kexec-tools bug fix update

ELBA-2026-50146 pcp bug fix update

ELBA-2026-50139 lvm2 bug fix update

ELBA-2026-50138 bcache-tools bug fix update

ELBA-2026-50137 mdadm bug fix update

ELBA-2026-50135 smartmontools bug fix update

ELBA-2026-50130 glibc bug fix update

ELBA-2026-50111 cloud-init bug fix update

ELBA-2026-50093 smartmontools bug fix update

ELBA-2026-13662 dbus bug fix and enhancement update

ELBA-2026-13659 device-mapper-multipath bug fix and enhancement update

ELBA-2026-13658 krb5 bug fix and enhancement update

ELBA-2026-13655 ksh bug fix and enhancement update

ELBA-2026-9743 systemd bug fix and enhancement update

ELBA-2026-8104 nvme-cli bug fix and enhancement update

ELBA-2026-8101 microcode_ctl bug fix and enhancement update

ELBA-2026-8100 sed bug fix and enhancement update

ELBA-2026-8099 linux-firmware bug fix and enhancement update

ELBA-2026-8095 nss bug fix and enhancement update

ELBA-2026-5586 coreutils bug fix and enhancement update

ELBA-2026-5583 curl bug fix and enhancement update

ELBA-2026-4904 cups bug fix and enhancement update

ELBA-2026-4902 tzdata bug fix and enhancement update

ELBA-2026-4829 sos bug fix and enhancement update

ELBA-2026-3661 systemd bug fix and enhancement update

ELBA-2026-3659 curl bug fix and enhancement update

ELBA-2026-3546 selinux-policy update

ELBA-2026-2424 virt:ol and virt-devel:ol bug fix and enhancement update

ELBA-2026-2416 sssd bug fix and enhancement update

ELBA-2026-2415 libselinux bug fix and enhancement update

ELBA-2026-2414 linux-firmware bug fix and enhancement update

ELBA-2026-2413 microcode_ctl bug fix and enhancement update

ELBA-2026-2411 kexec-tools bug fix and enhancement update

ELBA-2026-0886 lvm2 bug fix and enhancement update

ELBA-2026-0885 cockpit bug fix and enhancement update

ELBA-2026-0884 systemd bug fix and enhancement update

ELBA-2026-0883 os-prober bug fix and enhancement update

ELBA-2026-0860 open-vm-tools bug fix and enhancement update

ELBA-2026-0859 cloud-init bug fix and enhancement update

 

Type Reference
Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2026-0928)

CVE-2025-64720
CVE-2025-65018
CVE-2026-21925
CVE-2026-21933
CVE-2026-21945
Oracle Linux 8 : glib2 (ELSA-2026-0991)

CVE-2025-13601
Oracle Linux 8 : gdk-pixbuf2 (ELSA-2026-10741)

CVE-2026-5201
Oracle Linux 8 : python3 (ELSA-2026-11077)

CVE-2026-4786
CVE-2026-6100
Oracle Linux 8 : libxml2 (ELSA-2026-11349)

CVE-2025-9714
Oracle Linux 8 : kernel (ELSA-2026-1142)

CVE-2023-53673
CVE-2025-40154
CVE-2025-40248
CVE-2025-40277
Oracle Linux 8 : vim (ELSA-2026-11509)

CVE-2026-34982
Oracle Linux 8 : sudo (ELSA-2026-11521)

CVE-2026-35535
Oracle Linux 8 : python-urllib3 (ELSA-2026-1254)

CVE-2025-66418
CVE-2025-66471
CVE-2026-21441
Oracle Linux 8 : libcap (ELSA-2026-13285)

CVE-2026-4878
Oracle Linux 8 : openssh (ELSA-2026-13383)

CVE-2026-35385
CVE-2026-35386
CVE-2026-35387
CVE-2026-35388
CVE-2026-35414
Oracle Linux 8 : kernel (ELSA-2026-13577)

CVE-2024-41073
CVE-2025-40252
CVE-2025-68724
CVE-2026-23401
CVE-2026-31402
CVE-2026-31431

Oracle Linux 8 : util-linux (ELSA-2026-1852)

CVE-2025-14104

Oracle Linux 8 : python3 (ELSA-2026-2128)

CVE-2025-15366
CVE-2025-15367
CVE-2026-0865
CVE-2026-1299
Oracle Linux 8 : libsoup (ELSA-2026-2215)

CVE-2026-0719
CVE-2026-1761
Oracle Linux 8 : kernel (ELSA-2026-2264)

CVE-2022-50673
CVE-2025-38403
CVE-2025-40135
CVE-2025-40158
CVE-2025-40170
CVE-2025-40269
CVE-2025-68349
CVE-2026-22998

Oracle Linux 8 : brotli (ELSA-2026-2389)

CVE-2025-6176

Oracle Linux 8 : openssl (ELSA-2026-3042)

CVE-2025-69419
Oracle Linux 8 : kernel (ELSA-2026-3083)

CVE-2025-38129
CVE-2025-38248
CVE-2025-40064
CVE-2025-68800
CVE-2026-23074
Oracle Linux 8 : container-tools:ol8 (ELSA-2026-3428)

CVE-2024-24785
CVE-2025-61729
CVE-2025-65637
Oracle Linux 8 : nfs-utils (ELSA-2026-3938)

CVE-2025-12801
Oracle Linux 8 : kernel (ELSA-2026-3963)

CVE-2025-71085
CVE-2026-23001
Oracle Linux 8 : python-pyasn1 (ELSA-2026-4146)

CVE-2026-23490
Oracle Linux 8 : vim (ELSA-2026-4442)

CVE-2026-25749
Oracle Linux 8 : grub2 (ELSA-2026-4648)

CVE-2025-61662
Oracle Linux 8 : container-tools:rhel8 (ELSA-2026-4672)

CVE-2025-61726
CVE-2025-61728
CVE-2025-68121
Oracle Linux 8 : libpng (ELSA-2026-4728)

CVE-2026-22695
CVE-2026-22801
CVE-2026-25646
Oracle Linux 8 : glibc (ELSA-2026-4772)

CVE-2025-15281
CVE-2026-0915
Oracle Linux 8 : gnutls (ELSA-2026-5585)

CVE-2025-14831
CVE-2025-9820
Oracle Linux 8 : python3 (ELSA-2026-5588)

CVE-2025-0938
Oracle Linux 8 : kernel (ELSA-2026-6037)

CVE-2025-38180
CVE-2026-23204
CVE-2026-23209
Oracle Linux 8 : rsync (ELSA-2026-6436)

CVE-2025-10158
Oracle Linux 8 : openssh (ELSA-2026-6461)

CVE-2026-3497
Oracle Linux 8 : python3 (ELSA-2026-6473)

CVE-2026-4519
Oracle Linux 8 : kernel (ELSA-2026-6571)

CVE-2024-26984
CVE-2025-71238
CVE-2026-23193
CVE-2026-23231
Oracle Linux 8 : vim (ELSA-2026-6915)

CVE-2026-28417
CVE-2026-28421
CVE-2026-33412
Oracle Linux 8 : nghttp2 (ELSA-2026-7667)

CVE-2026-27135
Oracle Linux 8 : bind (ELSA-2026-8352)

CVE-2026-1519
Oracle Linux 8 : libarchive (ELSA-2026-8534)

CVE-2026-4424
CVE-2026-5121
Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2026-9689)

CVE-2026-22007
CVE-2026-22013
CVE-2026-22016
CVE-2026-22018
CVE-2026-22021
CVE-2026-23865
CVE-2026-34268
CVE-2026-34282

Q4 2025

  • Changes to automatic backup preferences are now applied immediately. Previously, they had no effect until a reboot or a systemctl daemon-reload was run.

  • Fixed a bug where the updates page of the webui failed to show that updates were running if they were running before the page was loaded.

Oracle 8 Security Updates:

ELSA-2025-25743 Moderate linux-firmware security update

ELSA-2025-23543 Important container-tools:rhel8 security update

ELSA-2025-23481 Moderate openssh security update

ELSA-2025-23383 Moderate curl security update

ELSA-2025-23382 Moderate binutils security update

ELSA-2025-23086 Moderate luksmeta security update

ELSA-2025-22801 Moderate kernel security update

ELSA-2025-22388 Moderate kernel security update

ELSA-2025-22063 Moderate cups security update

ELSA-2025-21977 Moderate libssh security update

ELSA-2025-21776 Important expat security update

ELSA-2025-21232 Important container-tools:rhel8 security update

ELSA-2025-20034-0 Important libtiff security update

ELSA-2025-19931 Moderate kernel security update

ELSA-2025-19835 Important bind security update

ELSA-2025-19714 Important libsoup security update

ELSA-2025-19610 Important sssd security update

ELSA-2025-19447 Moderate kernel security update

ELSA-2025-19276 Important libtiff security update

ELSA-2025-19102 Moderate kernel security update

ELSA-2025-18824 Moderate java-21-openjdk security update

ELSA-2025-18297 Moderate kernel security update

ELSA-2026-0753 Important container-tools:rhel8 security update

ELSA-2026-0750 Important net-snmp security update

ELSA-2026-0728 Important gnupg2 security update

ELSA-2026-0596 Moderate cups security update

ELSA-2026-0444 Important kernel security update

ELSA-2026-0421 Important libsoup security update

ELSA-2026-0337 Moderate openssl security update

ELSA-2026-0241 Important libpng security update

 

Oracle 8 Updates

ELBA-2026-50003 pcp bug fix update

ELBA-2026-0369 openscap bug fix and enhancement update

ELBA-2026-0138 sos bug fix and enhancement update

ELBA-2025-28064 systemd bug fix update

ELBA-2025-28046 pcp bug fix update

ELBA-2025-28004 systemd bug fix update

ELBA-2025-25765 pcp bug fix update

ELBA-2025-25748 kexec-tools bug fix update

ELBA-2025-25728 sos bug fix update

ELBA-2025-23464 tzdata bug fix and enhancement update

ELBA-2025-23387 dracut bug fix and enhancement update

ELBA-2025-23385 util-linux bug fix and enhancement update

ELBA-2025-23384 sudo bug fix and enhancement update

ELBA-2025-23381 net-snmp bug fix and enhancement update

ELBA-2025-23380 coreutils bug fix and enhancement update

ELBA-2025-23379 shadow-utils bug fix and enhancement update

ELBA-2025-23378 pam bug fix and enhancement update

ELBA-2025-23377 iscsi-initiator-utils bug fix and enhancement update

ELBA-2025-23376 findutils bug fix and enhancement update

ELBA-2025-23363 rest bug fix and enhancement update

ELBA-2025-22795 glibc bug fix and enhancement update

ELBA-2025-20720 systemd bug fix update

ELBA-2025-20717 kexec-tools bug fix update

ELBA-2025-19576 plymouth bug fix and enhancement update

ELBA-2025-19575 libdmx bug fix and enhancement update

ELBA-2025-19571 ksh bug fix and enhancement update

ELBA-2025-19559 initscripts bug fix and enhancement update

ELBA-2025-19557 glib2 bug fix and enhancement update

ELBA-2025-19556 systemd bug fix and enhancement update

ELBA-2025-19555 microcode_ctl bug fix and enhancement update

ELBA-2025-19554 mdadm bug fix and enhancement update

ELBA-2025-19558 linux-firmware bug fix and enhancement update

ELBA-2025-19289 ca-certificates bug fix and enhancement update

ELBA-2025-17417 linux-firmware bug fix and enhancement update

 

Type Reference
Oracle Linux 8 : kernel (ELSA-2025-18297)

CVE-2023-53373
CVE-2025-39757
Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2025-18824)

CVE-2025-53057
CVE-2025-53066
CVE-2025-61748
Oracle Linux 8 : kernel (ELSA-2025-19102)

CVE-2022-50386
CVE-2023-53297
CVE-2023-53386
CVE-2025-39817
CVE-2025-39841
CVE-2025-39849
Oracle Linux 8 : libtiff (ELSA-2025-19276)

CVE-2025-9900
Oracle Linux 8 : kernel (ELSA-2025-19447)

CVE-2023-53226
CVE-2023-53257
CVE-2025-39864

Oracle Linux 8 : sssd (ELSA-2025-19610)

CVE-2025-11561

Oracle Linux 8 : libsoup (ELSA-2025-19714)

CVE-2025-11021
CVE-2025-4945
Oracle Linux 8 : bind (ELSA-2025-19835)

CVE-2025-40778
Oracle Linux 8 : kernel (ELSA-2025-19931)

CVE-2022-50367
CVE-2023-53178
CVE-2025-40300

Oracle Linux 8 : ELSA-2025-20034-0: / libtiff (ELSA-2025-200340)

CVE-2025-8176

Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-21232)

CVE-2025-31133
CVE-2025-52565
CVE-2025-52881
Oracle Linux 8 : expat (ELSA-2025-21776)

CVE-2025-59375
Oracle Linux 8 : libssh (ELSA-2025-21977)

CVE-2025-5372
Oracle Linux 8 : cups (ELSA-2025-22063)

CVE-2025-58364
Oracle Linux 8 : kernel (ELSA-2025-22388)

CVE-2023-53513
CVE-2025-38724
CVE-2025-39825
CVE-2025-39883
CVE-2025-39955
Oracle Linux 8 : kernel (ELSA-2025-22801)

CVE-2022-50543
CVE-2023-53401
CVE-2023-53539
Oracle Linux 8 : luksmeta (ELSA-2025-23086)

CVE-2025-11568
Oracle Linux 8 : binutils (ELSA-2025-23382)

CVE-2025-11083
Oracle Linux 8 : curl (ELSA-2025-23383)

CVE-2025-9086
Oracle Linux 8 : openssh (ELSA-2025-23481)

CVE-2025-61984
CVE-2025-61985
Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-23543)

CVE-2025-52881
Oracle Linux 8 : linux-firmware (ELSA-2025-25743)

CVE-2025-62626
Oracle Linux 8 : libpng (ELSA-2026-0241)

CVE-2025-64720
CVE-2025-65018
CVE-2025-66293
Oracle Linux 8 : openssl (ELSA-2026-0337)

CVE-2025-9230
Oracle Linux 8 : libsoup (ELSA-2026-0421)

CVE-2025-14523
Oracle Linux 8 : kernel (ELSA-2026-0444)

CVE-2025-39993
CVE-2025-40240
CVE-2025-68285
Oracle Linux 8 : cups (ELSA-2026-0596)

CVE-2025-58436
CVE-2025-61915
Oracle Linux 8 : gnupg2 (ELSA-2026-0728)

CVE-2025-68973
Oracle Linux 8 : net-snmp (ELSA-2026-0750)

CVE-2025-68615
Oracle Linux 8 : container-tools:rhel8 (ELSA-2026-0753)

CVE-2025-47913