Back Linuxsecurity

Oracle9 ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • April 30, 2026

[1.2.6-2.0.1] - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch [1.2.6-2] - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170502

PackageKit-1.2.6-2.0.1.el9_7.x86_64.rpm PackageKit-command-not-found-1.2.6-2.0.1.el9_7.x86_64.rpm PackageKit-glib-1.2.6-2.0.1.el9_7.i686.rpm PackageKit-glib-1.2.6-2.0.1.el9_7.x86_64.rpm PackageKit-glib-devel-1.2.6-2.0.1.el9_7.i686.rpm PackageKit-glib-devel-1.2.6-2.0.1.el9_7.x86_64.rpm PackageKit-gstreamer-plugin-1.2.6-2.0.1.el9_7.x86_64.rpm PackageKit-gtk3-module-1.2.6-2.0.1.el9_7.x86_64.rpm

PackageKit-1.2.6-2.0.1.el9_7.aarch64.rpm PackageKit-command-not-found-1.2.6-2.0.1.el9_7.aarch64.rpm PackageKit-glib-1.2.6-2.0.1.el9_7.aarch64.rpm PackageKit-glib-devel-1.2.6-2.0.1.el9_7.aarch64.rpm PackageKit-gstreamer-plugin-1.2.6-2.0.1.el9_7.aarch64.rpm PackageKit-gtk3-module-1.2.6-2.0.1.el9_7.aarch64.rpm

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in Recent Oracle9 Security Updates Oracle9 has released security updates addressing several vulnerabilities, including CVE-2026-4786 and CVE-2026-6100, which were published on April 13, 2026. The updates also include fixes for CVE-2026-4519, published on March 20, 2026, and CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, and CVE-2026-1299, which were published earlier in 2026. Additionally, a backport fix for CVE-2026-41651 was released on April 22, 2026, with a proof of concept made public shortly after on April 24, 2026. The vulnerabilities affect various components of Oracle9, including Python packages and PackageKit, which are used in Red Hat Enterprise Linux environments. Organizations using Oracle9 should prioritize applying these updates to mitigate potential exploitation. The scope of impact includes both individual users and enterprise systems relying on these packages. Current status indicates that patches are available, but the urgency remains high due to the recent PoC release for CVE-2026-41651. 2 sources 71

Extracted Entities

CVEs (1)

CVE-2026-41651