Oracle Linux 7 : augeas (ELSA-2017-2788)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2788 advisory. 1.4.0-2.el74.1 - Fix CVE-2017-7555, improper handling of escaped strings RHBZ1481545 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3620)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3620 advisory. kernel-uek 4.1.12-103.3.8.1 - Bluetooth: Properly check L2CAP config option output buffer length Ben Seri Orabug: 26796363 CVE-2017-1000251 Tenable has...

Oracle Linux 7 : emacs (ELSA-2017-2771)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2771 advisory. 1:24.3-20 - fix unsafe enriched mode translations 1490452 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : postgresql (ELSA-2017-2728)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2728 advisory. 9.2.23-1 - update to 9.2.23 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-23.html 9.2.22-1 - update to 9.2.22 per release not...

Oracle Linux 7 : kernel (ELSA-2017-2679-1)

Description of changes: 3.10.0-693.2.2.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petre nko at oracle.com - Update...

Oracle Linux 6 / 7 : bluez (ELSA-2017-2685)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2685 advisory. 4.66-2 - sdpd heap fixes Resolves: 1490008 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : kernel (ELSA-2017-2679)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2679 advisory. - 3.10.0-693.2.2.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel...

Oracle Linux 7 : 389-ds-base (ELSA-2017-2569)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2569 advisory. 1.3.6.19-1 - Bump version to 1.3.6.19-1 - Remove old mozldap and db4 requirements - Resolves: Bug 1483865 - Crash while binding to a server during replication...

Oracle Linux 6 / 7 : thunderbird (ELSA-2017-2534)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2534 advisory. 52.3.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.3.0-1 - Update to 52.3.0 52.2.1-1 - Update ...

Oracle Linux 7 : xmlsec1 (ELSA-2017-2492)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2492 advisory. - CVE-2017-1000061 - CVE-2017-1000061 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3606)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3606 advisory. - l2tp: fix racy SOCKZAPPED flag check in l2tpip,6bind Guillaume Nault Orabug: 26586047 CVE-2016-10200 - xfs: fix two memory leaks in xfsattrlist.c...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3605)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3605 advisory. - dentry name snapshots Al Viro Orabug: 26630936 CVE-2017-7533 - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings David...

Oracle Linux 7 : mercurial (ELSA-2017-2489)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2489 advisory. 2.6.2-8 - Fix CVE-2017-1000115 and CVE-2017-1000116 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : groovy (ELSA-2017-2486)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2486 advisory. 1.8.9-8 - Fix Information disclosure vulnerability - Resolves: CVE-2016-6814 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 7 : kernel (ELSA-2017-2473-1)

Description of changes: 3.10.0-693.1.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update x509.genkey bug 24817676 3.10.0-693.1.1 - fs dentry name snapshots Miklos Szeredi...

Oracle Linux 7 : git (ELSA-2017-2484)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2484 advisory. 1.8.3.1-12 - prevent command injection via malicious ssh URLs Resolves: CVE-2017-1000117 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : subversion (ELSA-2017-2480)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2480 advisory. 1.7.14-11 - add security fix for CVE-2017-9800 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : httpd (ELSA-2017-2479)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2479 advisory. - Resolves: 1463194 - CVE-2017-3167 httpd: apgetbasicauthpw authentication bypass - Resolves: 1463197 - CVE-2017-3169 httpd: modssl NULL pointer...

Oracle Linux 6 / 7 : firefox (ELSA-2017-2456)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2456 advisory. 52.3.0-3.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a...

Oracle Linux 7 : libsoup (ELSA-2017-2459)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2459 advisory. 2.56.0-4 - Fix chunked decoding buffer overrun CVE-2017-2885 rh 1479322 Tenable has extracted the preceding description block directly from the Oracle Linux...