vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

Oracle Linux 9 : pki-core (ELSA-2026-73766)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73766 advisory. - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list Tenable has extracted the preceding description block directly...

Oracle Linux 8 : kernel (ELSA-2026-71329)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71329 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 9 : kernel (ELSA-2026-72623)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72623 advisory. - arm64: tlb: Flush walk cache when unsharing PMD tables Rafael Aquini RHEL-259312 CVE-2026-63875 - perf: Reject exited events as group leaders Anubha...

Oracle Linux 10 : corosync (ELSA-2026-67872)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67872 advisory. 3.1.10-1.2 - Resolves: RHEL-251541 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665 Tenable has extracted the preceding description bloc...

Oracle Linux 7 : ELSA-2026-65773-0: / glib2 (ELSA-2026-657730)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-657730 advisory. - Backport fix for CVE-2026-15588 Orabug: 39995948 - Backport fix for CVE-2026-58010 Orabug: 39995948 - Backport fix for CVE-2026-58011 Orabug:...

Oracle Linux 9 : expat (ELSA-2026-72663)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72663 advisory. - Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input...

Oracle Linux 9 : kernel (ELSA-2026-71700)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71700 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237295 CVE-2026-68121 - smb: smbdirect: introduce...

Oracle Linux 8 : firefox (ELSA-2026-71652)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-71652 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.16.0-1...

Oracle Linux 10 : thunderbird (ELSA-2026-73130)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-73130 advisory. 140.16.0-1.0.1 - Add Oracle prefs 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolve...

Oracle Linux 7 : freerdp (ELSA-2026-68707)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68707 advisory. - Backport fix for CVE-2026-55192 Orabug: 40040632 - Backport fix for CVE-2026-55194 Orabug: 40040632 - Backport fix for CVE-2026-64624 Orabug: 399648...

Oracle Linux 10 : openssh (ELSA-2026-69129)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69129 advisory. - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 -...

Oracle Linux 7 : ELSA-2026-62231-0: / libXfont2 (ELSA-2026-622310)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622310 advisory. - Backport fix for CVE-2026-44950 Orabug: 39960840 - Backport fix for CVE-2026-59679 Orabug: 39960840 Tenable has extracted the preceding description...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-72485)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72485 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252039 - Fix DoS via crafted IMAP responses in net-imap...

Oracle Linux 8 : ELSA-2026-67148-0: / osbuild-composer (ELSA-2026-671480)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671480 advisory. 101.5-3.0.1 - go.mod: update github.com/labstack/echo/v4 to v4.15.3 Resolves: RHEL-213908 - go.mod: update go.opentelemetry.io/otel to v1.44.0...

Oracle Linux 8 : libxml2 (ELSA-2026-71641)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71641 advisory. - Fix CVE-2026-86144 RHEL-256306 - Fix CVE-2026-86140 RHEL-256021 - Fix CVE-2026-74860 RHEL-255956 - Fix CVE-2026-86143 RHEL-256895 Tenable has...

Oracle Linux 9 : kernel (ELSA-2026-71232)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71232 advisory. - net: tun: bound receive headroom CKI Backport Bot RHEL-264401 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft CKI Backport Bot...

Oracle Linux 10 : openexr (ELSA-2026-69609)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69609 advisory. 3.1.10-8.4 - fix CVE-2026-68515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 10 : libxml2 (ELSA-2026-71586)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71586 advisory. - Fix CVE-2026-86144 RHEL-256302 - Fix CVE-2026-86140 RHEL-256024 - Fix CVE-2026-74860 RHEL-255957 - Fix CVE-2026-86142 RHEL-256368 - Fix...

Oracle Linux 9 : kernel (ELSA-2026-70459)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70459 advisory. - crypto: afalg - Fix incorrect boolean values in afalgctx CKI Backport Bot RHEL-264235 CVE-2025-39964 - crypto: afalg - Disallow concurrent writes in...