vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace The ebpf solutions around for mitigating cve-2026-31431 require lsm=bpf at boot time, which is usually not set by default. For OracleLinux this was enabled by default in UEKr7u3 and in UEKr8u1 after December 2025. To check whether or not you can use ebpf-lsm...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800...

Oracle Linux 10 : hostapd (ELSA-2026-85276)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85276 advisory. 2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194049 Tenable has extracted the preceding description block directly fr...

Oracle Linux 10 : bubblewrap (ELSA-2026-85308)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85308 advisory. - Fix CVE-2026-87766: harden sandbox mount paths Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 9 : bubblewrap (ELSA-2026-85309)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85309 advisory. - Fix CVE-2026-87766 path traversal through symlinked mount targets Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 10 : kernel (ELSA-2026-76738)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76738 advisory. - netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state CKI Backport Bot RHEL-271653 CVE-2026-93288 - tcp: fix stale per-CPU...

Oracle Linux 10 : kernel (ELSA-2026-77690)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77690 advisory. - udp: fix potential use-after-free in tunnel segmentation Antoine Tenart RHEL-268127 CVE-2026-74705 - nfsd: defer vfree of compound ops to fix...

Oracle Linux 10 : openssh (ELSA-2026-85847)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85847 advisory. - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsi...

Oracle Linux 9 : environment-modules (ELSA-2026-84594)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-84594 advisory. 5.3.0-2.1 - fix command injection in bash Tab completion CVE-2026-85013 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : emacs (ELSA-2026-84591)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84591 advisory. - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 - tramp: restrict user name to prevent shell injection CVE-2026-79992...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-84574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84574 advisory. 1.20.11-34.5 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves:...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-85191)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85191 advisory. 24.1.9-4.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520,...

Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2026-85193)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85193 advisory. 24.1.9-4.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-9352...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-84583)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84583 advisory. 2.54.1-1 - Update to 2.54.1 - Add patch to update ANGLE even further Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500399)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500399 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167669 CVE-2026-98432 Tenable has extracted the preceding...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500394)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500394 advisory. - mm/pagewalk: fix stale walk-action escaping walkpmdrange Hyunwoo Kim Orabug: 40157478 CVE-2026-89754 - exec: Cleanup POSIX timers right after...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500397)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500397 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167664 CVE-2026-98432 - ipv4: validate checksumstart before...

Oracle Linux 8 : kernel (ELSA-2026-83157)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83157 advisory. - md/raid5-ppl: fix use-after-free in ppldoflush CKI Backport Bot RHEL-278122 CVE-2026-93262 - svcrdma: Reject Write/Reply chunks with segcount 0 Olga...