Oracle Linux 7 : bind (ELSA-2019-1294)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1294 advisory. - Remove again broken test CVE-2018-5743 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 7 : firefox (ELSA-2019-1265)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1265 advisory. 60.7.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 60.7.0-1 - Updated to 60.7.0 ESR 60.6.3-1 - Updated to...

Oracle Linux 7 : libvirt (ELSA-2019-1264)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1264 advisory. - admin: reject clients unless their UID matches the current UID CVE-2019-10132 - locking: restrict sockets to mode 0600 CVE-2019-10132 Tenable has extracted th...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4643)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4643 advisory. - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721848 CVE-2019-11091 - x86/speculation/mds: Make mdsmitigation mutable...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4644)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4644 advisory. - Input: wacom - move the USB now hid Wacom driver in drivers/hid Benjamin Tissoires Orabug: 25512494 CVE-2016-3139 - net: qmiwwan: fix divide by 0...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4642)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4642 advisory. - X.509: Handle midnight alternative notation in GeneralizedTime David Howells Orabug: 29460344 CVE-2015-5327 - X.509: Support leap seconds David...

Oracle Linux 7 : ruby (ELSA-2019-1235)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1235 advisory. - Introduce method as precondition to fix CVE-2019-8321. rubygems-2.3.0-refactor-checking-reallyverbose.patch Tenable has extracted the preceding...

Oracle Linux 7 : libvirt (ELSA-2019-1177)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1177 advisory. - qemu: Don't cache microcode version CVE-2018-12127, CVE-2018-12126, CVE-2018-12130 - cpux86: Do not cache microcode version CVE-2018-12126,...

Oracle Linux 7 : wget (ELSA-2019-1228)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1228 advisory. 1.14-18.1 - Fix CVE-2019-5953 1696733 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 7 : kernel (ELSA-2019-1168)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1168 advisory. - x86 x86/speculation/mds: Add SMT warning message Waiman Long 1692597 1692598 1692599 1690335 1690348 1690358 CVE-2018-12126 CVE-2018-12127...

Oracle Linux 7 : python-jinja2 (ELSA-2019-1022)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1022 advisory. 2.7.2-3 - Fix for CVE-2016-10745 Resolves: rhbz1701308 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4629)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4629 advisory. - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721935 CVE-2019-11091 - x86/speculation: Support 'mitigations='...

Oracle Linux 7 : ghostscript (ELSA-2019-1017)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1017 advisory. - Resolves: 1673398 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 Tenable has extracted the preceding description block...

Oracle Linux 7 : flatpak (ELSA-2019-1024)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1024 advisory. 1.0.2-5 - Fix IOCSTI sandbox bypass 1700651 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4636)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4636 advisory. - x86/speculation/mds: Make cpumatches cpuinit Patrick Colp Orabug: 29751729 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091 -...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4628)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4628 advisory. - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721848 CVE-2019-11091 - x86/speculation/mds: Make mdsmitigation mutable...

Oracle Linux 7 : freeradius (ELSA-2019-1131)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1131 advisory. 3.0.13-10 - Fixes two EAP-PWD security issues Resolves: bz1699413 authentication bypass with an invalid curve attack Tenable has extracted the precedin...

Oracle Linux 7 : kernel (ELSA-2019-0818)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0818 advisory. - kvm kvm: fix kvmioctlcreatedevice reference counting Paolo Bonzini 1671922 1671923 CVE-2019-6974 - kvm KVM: nVMX: unconditionally cancel preemption...

Oracle Linux 7 : ovmf (ELSA-2019-0809)

From Red Hat Security Advisory 2019:0809 : An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Linux 7 : java-1.7.0-openjdk (ELSA-2019-0791)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0791 advisory. 1:1.7.0.221-2.6.18.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.221-2.6.18.0 - Bump to 2.6.18 and OpenJDK 7u221-b02. - Resolves: rhbz1693468 Tenable h...