vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace The ebpf solutions around for mitigating cve-2026-31431 require lsm=bpf at boot time, which is usually not set by default. For OracleLinux this was enabled by default in UEKr7u3 and in UEKr8u1 after December 2025. To check whether or not you can use ebpf-lsm...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-91580)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91580 advisory. 2.54.2-0.1 - Update to 2.54.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 9 : libXi (ELSA-2026-91056)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91056 advisory. 1.7.10-8.1 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270061 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-91636)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91636 advisory. 2.54.2-1 - Update to 2.54.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 10 : ignition (ELSA-2026-91720)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91720 advisory. 2.26.0-3.0.1.4 - Drop RHCK specific module inclusion Orabug: 39718726 - Remove sgdisk requirement and create symbolic link to sgdisk Orabug: 37470782 2.26.0-4...

Oracle Linux 9 : ignition (ELSA-2026-91719)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91719 advisory. 2.26.0-1.2 - Rebuild with updated golang 2.26.0-1.1 - Rebuild with updated golang - Resolves: RHEL-175424, RHEL-177307 Tenable has extracted the preceding...

Oracle Linux 7 : php (ELSA-2026-88693)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-88693 advisory. 5.4.16-48.0.1 - Backport fix for CVE-2026-109619 Orabug: 40200805 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : libXtst (ELSA-2026-91223)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91223 advisory. 1.2.3-16.1 - CVE-2026-94286 libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser read in RECORD reply parser Resolves: RHEL-271689...

Oracle Linux 9 : cjose (ELSA-2026-92145)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92145 advisory. 0.6.1-17.2 - CVE-2026-53939 cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption Encryption Key for AES-CBC-HMAC JWE...

Oracle Linux 10 : bind (ELSA-2026-92419)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92419 advisory. - Prevent arbitrary code execution via GSS-TSIG UDP message replay CVE-2026-94300 - Fix Denial of service via assertion failure in RPZ query processi...

Oracle Linux 8 : expat (ELSA-2026-92323)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92323 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...

Oracle Linux 10 : libXi (ELSA-2026-91004)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91004 advisory. 1.8.1-7.1 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270054 Tenable has extracted the preceding description block directly fr...

Oracle Linux 10 : thunderbird (ELSA-2026-90895)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90895 advisory. 153.5.0-1.0.1 - Add Oracle prefs 153.5.0-1 - Update to 153.5.0 ESR 140.14.0-2 - Update to 140.14.0 ESR 140.13.0-1 - Update to 140.13.0 ESR 140.12.0-1 - Update...

Oracle Linux 10 : kernel (ELSA-2026-85321)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85321 advisory. - ipv4: validate checksumstart before completing checksum CKI Backport Bot RHEL-280590 CVE-2026-99999 - signal: Prevent exec race Phil Auld RHEL-2820...

Oracle Linux 9 : kernel (ELSA-2026-86033)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86033 advisory. - ipv4: validate checksumstart before completing checksum CKI Backport Bot RHEL-284987 CVE-2026-99999 - smb: client: reject a tree connect response...

Oracle Linux 10 : yggdrasil (ELSA-2026-91138)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91138 advisory. 0.4.9.2-4 - Rebuild yggdrasil against updated golang 0.4.9.2-3 - Rebuild yggdrasil against updated golang 0.4.9.2-2 - Rebuild yggdrasil against updat...

Oracle Linux 8 : container-tools:ol8 (ELSA-2026-89760)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89760 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 - rebuild with updated ...

Oracle Linux 8 : libXi (ELSA-2026-91268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91268 advisory. 1.7.10-2 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049 Tenable has extracted the preceding description block directly from...

Oracle Linux 10 : libX11 (ELSA-2026-91366)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91366 advisory. 1.8.10-1.1 - CVE-2026-88806 libX11: libX11: Heap-based buffer overflow via malicious X server X server Resolves: https://issues.redhat.com/browse/RHEL-267123...