vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace The ebpf solutions around for mitigating cve-2026-31431 require lsm=bpf at boot time, which is usually not set by default. For OracleLinux this was enabled by default in UEKr7u3 and in UEKr8u1 after December 2025. To check whether or not you can use ebpf-lsm...

Oracle Linux 10 : php8.4 (ELSA-2026-87071)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87071 advisory. 8.4.27-1 - rebase to 8.4.27 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 9 : php:8.2 (ELSA-2026-87072)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87072 advisory. php 8.2.35-1 - rebase to 8.2.35 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040...

Oracle Linux 8 : php:8.2 (ELSA-2026-87073)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87073 advisory. libzip 1.7.3-1 - update to 1.7.3 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure...

Oracle Linux 9 : php (ELSA-2026-87151)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87151 advisory. - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801...

Oracle Linux 10 : php (ELSA-2026-87070)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87070 advisory. 8.3.36-1 - rebase to 8.3.36 8.3.35-1 - rebase to 8.3.35 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : openssl (ELSA-2026-500440)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500440 advisory. - Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264479 - Patch asn1d2ireadbio to read headers without...

Oracle Linux 10 : ca-certificates (ELSA-2026-500451)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500451 advisory. 2025.2.80v9.0.305-102.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist Tenable has extracted the preceding...

Oracle Linux 9 : cockpit-files (ELSA-2026-84595)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-84595 advisory. - CVE-2026-91202 - Don't de-reference a symlink when creating a directory RHEL-263134 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : postgresql:18 (ELSA-2026-85814)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-85814 advisory. - Fixes CVE-2026-103484 out-of-bounds write during IVFFlat index build, which could lead to arbitrary code execution - Fix backport regression in...

Oracle Linux 10 : openssl (ELSA-2026-500441)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500441 advisory. - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264466 - Patch asn1d2ireadbio to read headers without...

Oracle Linux 8 : ca-certificates (ELSA-2026-500449)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500449 advisory. 2025.2.80v9.0.304-80.2.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist Tenable has extracted the preceding...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-86169)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86169 advisory. 8.0.132-1.0.1 - Add support for Oracle Linux 8.0.132-1 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 Tenable has extracted t...

Oracle Linux 10 : cockpit-machines (ELSA-2026-86971)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-86971 advisory. - CVE-2026-92768 RHEL-263124 - CVE-2026-92747 RHEL-263120 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 9 : golang (ELSA-2026-86196)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86196 advisory. 1.26.10-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.10-1 - Update to Go 1.26.10 fips-1 - Resolves: RHEL-287192 Tenable has...

Oracle Linux 8 : .NET / 8.0 (ELSA-2026-86594)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86594 advisory. 8.0.132-2.0.1 - Add support for Oracle Linux 8.0.132-2 - Fix apphost hash duplication under compiler optimizations on ppc64le - Resolves: RHEL-277790...

Oracle Linux 10 : .NET / 10.0 (ELSA-2026-86195)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86195 advisory. 10.0.113-1.0.1 - Add support for Oracle Linux 10.0.113-1 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 Tenable has...