Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4196)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4196 advisory. - posix-timer: Properly check sigevent-sigevnotify Thomas Gleixner Orabug: 28481412 CVE-2017-18344 - x86/mm/kmmio: Make the tracer robust against...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4189)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4189 advisory. - tcp: add tcpoootrycoalesce helper Eric Dumazet Orabug: 28453849 CVE-2018-5390 - tcp: call tcpdrop from tcpdataqueueofo Eric Dumazet Orabug: 28453849...

Oracle Linux 7 : yum-utils (ELSA-2018-2285)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2285 advisory. 1.1.31-46.0.1 - needs-restarting not checking kernel-uek for reboot message Orabug 27189714 - add bug27596617.patch to remove upstream URL reference 1.1.31-46 -...

Oracle Linux 7 : java-1.7.0-openjdk (ELSA-2018-2286)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2286 advisory. - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream. Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2018-2242)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2242 advisory. 1:1.8.0.181-7.b13 - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz1594249...

Oracle Linux 7 : openslp (ELSA-2018-2240)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2240 advisory. 1:2.0.0-7 - Fix possible heap memory corruption, CVE-2017-17833 Resolves: 1575698 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : gnupg2 (ELSA-2018-2181)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2181 advisory. 2.0.22-5 - fix CVE-2018-12020 - missing sanitization of original filename Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4164)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4164 advisory. - dm: fix race between dmgetfromkobject and dmdestroy Hou Tao CVE-2017-18203 - drm: udl: Properly check framebuffer mmap offsets Greg Kroah-Hartman...

Oracle Linux 7 : firefox (ELSA-2018-2113)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2113 advisory. - Added fix for mozbz1348168/CVE-2017-5428 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : pki-core (ELSA-2018-1979)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1979 advisory. - Bugzilla Bug 1589307 - CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access rhel-7.5.z ftweedal, c...

Oracle Linux 7 : qemu-kvm (ELSA-2018-2001)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2001 advisory. 1.5.3-156.el75.3 - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch bz1584363 - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch...

Oracle Linux 7 : kernel (ELSA-2018-1965)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1965 advisory. - x86 always enable eager FPU by default on non-AMD processors Paolo Bonzini 1589051 1589048 CVE-2018-3665 - x86 bugs: Switch the selection of mitigati...

kernel security and bug fix update

3.10.0-862.6.3.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-862.6.3 - x86 always enable eager FPU by default on non-AMD processors Paolo...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4134)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4134 advisory. - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28156176 CVE-2018-3665 - KVM: Fix stack-out-of-bounds read in writemmio Wanpeng Li Orabug:...

Oracle Linux 7 : kernel (ELSA-2018-1852)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1852 advisory. 3.10.0-862.3.3.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4131)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4131 advisory. - netlink: add a start callback for starting a netlink dump Tom Herbert Orabug: 27169581 CVE-2017-16939 Tenable has extracted the preceding description bloc...

Oracle Linux 7 : plexus-archiver (ELSA-2018-1836)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1836 advisory. 0:2.4.2-5 - Fix arbitrary file write vulnerability - Resolves: CVE-2018-1002200 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4126)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4126 advisory. - x86/bugs: Rename SSBDNO to SSBNO Konrad Rzeszutek Wilk Orabug: 28063992 CVE-2018-3639 - KVM: SVM: Implement VIRTSPECCTRL support for SSBD Tom...

Oracle Linux 7 : xmlrpc (ELSA-2018-1780)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1780 advisory. 1:3.1.3-9 - Disallow deserialization of tags by default - Resolves: CVE-2016-5003 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : thunderbird (ELSA-2018-1725)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-1725 advisory. 52.8.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.8.0-1 - Update to 52.8.0 Tenable has extracted...