vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace The ebpf solutions around for mitigating cve-2026-31431 require lsm=bpf at boot time, which is usually not set by default. For OracleLinux this was enabled by default in UEKr7u3 and in UEKr8u1 after December 2025. To check whether or not you can use ebpf-lsm...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801...

Oracle Linux 10 : bubblewrap (ELSA-2026-85308)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85308 advisory. - Fix CVE-2026-87766: harden sandbox mount paths Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : pcs (ELSA-2026-84798)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84798 advisory. 0.10.18-2.0.1.el810.10 - Replaced HAM-logo 0.10.18-2.el810.10 - Fixed CVE-2026-82397, CVE-2024-14029 by patching bundled Tornado Resolves: RHEL-271884...

Oracle Linux 10 : kernel (ELSA-2026-76738)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76738 advisory. - netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state CKI Backport Bot RHEL-271653 CVE-2026-93288 - tcp: fix stale per-CPU...

Oracle Linux 10 : openssh (ELSA-2026-85847)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85847 advisory. - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsi...

Oracle Linux 10 : hostapd (ELSA-2026-85276)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85276 advisory. 2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194049 Tenable has extracted the preceding description block directly fr...

Oracle Linux 10 : kernel (ELSA-2026-77690)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77690 advisory. - udp: fix potential use-after-free in tunnel segmentation Antoine Tenart RHEL-268127 CVE-2026-74705 - nfsd: defer vfree of compound ops to fix...

Oracle Linux 9 : bubblewrap (ELSA-2026-85309)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85309 advisory. - Fix CVE-2026-87766 path traversal through symlinked mount targets Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-84583)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84583 advisory. 2.54.1-1 - Update to 2.54.1 - Add patch to update ANGLE even further Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-84574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84574 advisory. 1.20.11-34.5 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves:...

Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2026-85193)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85193 advisory. 24.1.9-4.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-9352...

Oracle Linux 10 : emacs (ELSA-2026-84591)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84591 advisory. - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 - tramp: restrict user name to prevent shell injection CVE-2026-79992...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-85191)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85191 advisory. 24.1.9-4.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520,...

Oracle Linux 9 : environment-modules (ELSA-2026-84594)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-84594 advisory. 5.3.0-2.1 - fix command injection in bash Tab completion CVE-2026-85013 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500399)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500399 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167669 CVE-2026-98432 Tenable has extracted the preceding...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500394)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500394 advisory. - mm/pagewalk: fix stale walk-action escaping walkpmdrange Hyunwoo Kim Orabug: 40157478 CVE-2026-89754 - exec: Cleanup POSIX timers right after...

Oracle Linux 10 : kernel (ELSA-2026-83207)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83207 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271473 CVE-2026-80985 - net/smc: bound the peer rkey counts in...