The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-9686 advisory.

    [1:17.0.19.0.10-1.0.1]
    - Add Oracle vendor bug URL [Orabug: 34340155]

    [1:17.0.19.0.10-1]
    - Update to jdk-17.0.19+10 (GA)
    - Add to .gitignore openjdk-17.0.19+10.tar.xz
    - Set updatever to 19
    - Set buildver to 10
    - Set rpmrelease to 1
    - Update sources to openjdk-17.0.19+10.tar.xz
    - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
    - Set tzdata requires and build requires to 2026a
    - Set bundled freetype library version to 2.14.2
    - Set bundled giflib library version to 6.1.2
    - Set bundled harfbuzz library version to 12.3.2
    - Set bundled libpng library version to 1.6.57
    - Set bundled zlib library version to 1.3.2
    - Set fipsver to e1780dd5d39
    - Set fipsver to 62c0f885e30
    - Sync NEWS from openjdk-portable-rhel-8
    - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
    - Resolves: RHEL-133224
    - Resolves: RHEL-146657
    - Resolves: RHEL-148336
    - Resolves: RHEL-148850
    - Resolves: RHEL-161226
    - Resolves: RHEL-161342
    - Resolves: RHEL-157099
    - Resolves: RHEL-157153
    - Resolves: RHEL-157160

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2026-9686)

high Nessus Plugin ID 310156

Version 1.2

Version 1.1

Version 1.2 Apr 27, 2026, 5:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604271725
Version 1.1 Apr 25, 2026, 1:42 AM New Plugin Feed: 202604250142