Oracle Linux 7 : log4j (ELSA-2017-2423)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2423 advisory. 0:1.2.17-16 - Fix socket receiver deserialization vulnerability - Resolves: CVE-2017-5645 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : golang (ELSA-2017-1859)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1859 advisory. - fix CVE-2017-8932 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 7 : python (ELSA-2017-1868)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1868 advisory. - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359164 - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.getdata...

Oracle Linux 7 : tomcat (ELSA-2017-2247)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2247 advisory. - Resolves: rhbz1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism - Resolves: rhbz1441481 CVE-2017-5647 tomcat: Incorre...

Oracle Linux 7 : qemu-kvm (ELSA-2017-1856)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1856 advisory. - Resolves: bz1451614 CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server rhel-7.4 - Resolves: bz1430060 CVE-2016-9603 qemu-kv...

Oracle Linux 7 : authconfig (ELSA-2017-2285)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2285 advisory. - fix typo in the patch for CVE-2017-7488 1441604 - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server 144160...

Oracle Linux 7 : git (ELSA-2017-2004)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2004 advisory. - dissalow repo names beginning with dash Resolves: CVE-2017-8386 - do not put unsanitized branch names in Resolves: CVE-2014-9938 Tenable has extracte...

Oracle Linux 7 : gnutls (ELSA-2017-2292)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2292 advisory. - Address crash in OCSP status request extension, by eliminating the unneeded parsing CVE-2017-7507, 1455828 Tenable has extracted the preceding...

Oracle Linux 7 : openldap (ELSA-2017-1852)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1852 advisory. - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c 1458210 Tenable has extracted the preceding description block directl...

Oracle Linux 7 : tcpdump (ELSA-2017-1871)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-1871 advisory. 14:4.9.0-5 - Resolves: 1441597; use bigger capture buffer than in upstream 14:4.9.0-4 - Drop downstream patch drop root privileges - Add libcap-ng as a...

Oracle Linux 7 : tigervnc / and / fltk (ELSA-2017-2000)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2000 advisory. - Delete underlying ssecurity in SSecurityVeNCrypt CCVE-2017-7392 Resolves: bz1439127 Prevent double free by crafted fences CVE-2017-7393 Resolves:...

Oracle Linux 7 : libreoffice (ELSA-2017-1975)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1975 advisory. - Resolves: rhbz1445635 CVE-2017-7870 Heap-buffer-overflow in tools::Polygon::Insert - Resolves: rhbz1435535 CVE-2017-3157 Arbitrary file disclosure in Calc and...

Oracle Linux 7 : kernel (ELSA-2017-1842)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1842 advisory. - The doumount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAPSYSADMIN capability for doremountsb calls that chang...

Oracle Linux 7 : pidgin (ELSA-2017-1854)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1854 advisory. - Add patch for CVE-2017-2640 Resolves: 1431022 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : libtasn1 (ELSA-2017-1860)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1860 advisory. 4.10-1 - Updated to the 4.x branch 1360639 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : mariadb (ELSA-2017-2192)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2192 advisory. - Rebase to 5.5.56 That release also fixes the following security issues: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243...

Oracle Linux 7 : postgresql (ELSA-2017-1983)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1983 advisory. 9.2.21-1 - update to 9.2.21 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-21.html...

Oracle Linux 7 : gdm / and / gnome-session (ELSA-2017-2128)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2128 advisory. gdm 3.22.3-11 - Add japanese translation Resolves: 1449632 3.22.3-10 - Add patches to try to maintain some semblance of compatibility when live upgrading betwee...

Oracle Linux 7 : ghostscript (ELSA-2017-2180)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2180 advisory. - Security fix for CVE-2017-8291 updated to address SIGSEGV - Added security fix for CVE-2017-8291 bug 1446063 - Added security fix for CVE-2017-7207 bug 143435...

Oracle Linux 7 : glibc (ELSA-2017-1916)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1916 advisory. - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime 1374658 - Fix CVE-2015-8778: Integer overflow in hcreate...