Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4532)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4532 advisory. - ext4: validate that metadata blocks do not overlap superblock Theodore Ts'o Orabug: 28220451 CVE-2018-1094 - ext4: always initialize the crc32c...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4531)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4531 advisory. - x86/bugs: Fix the AMD SSBD usage of the SPECCTRL MSR Tom Lendacky Orabug: 28870524 CVE-2018-3639 - x86/bugs: Add AMD's SPECCTRL MSR usage Konrad...

Oracle Linux 7 : thunderbird (ELSA-2019-0270)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0270 advisory. 60.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.5.0-1 - Update to 60.5.0 Tenable has extracted...

Oracle Linux 6 : thunderbird (ELSA-2019-0269)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0269 advisory. 60.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.5.0-1 - Update to 60.5.0 Tenable has extracted...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4528)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4528 advisory. - userfaultfd: check VMMAYWRITE was set after verifying the uffd is registered Andrea Arcangeli Orabug: 29163750 CVE-2018-18397 - userfaultfd:...

Oracle Linux 7 : spice (ELSA-2019-0231)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0231 advisory. 0.14.0-6.0.2.1 - Add ARM support 0.14.0-6.1 - Fix off-by-one error during guest-to-host memory address conversion Resolves: CVE-2019-3813 Tenable has extracted...

Oracle Linux 6 : spice-server (ELSA-2019-0232)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0232 advisory. - Fix off-by-one error during guest-to-host memory address conversion Resolves: CVE-2019-3813 - Prevent potential buffer/integer overflows with invalid...

Oracle Linux 7 : ghostscript (ELSA-2019-0229)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0229 advisory. - Related: 1667442 - CVE-2019-6116 - added missing parts of patch - Resolves: 1667442 - CVE-2019-6116 ghostscript: subroutines within pseudo-operators...

Oracle Linux 7 : firefox (ELSA-2019-0219)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0219 advisory. 60.5.0-2.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 60.5.0-2 - Updated to 60.5.0 ESR build2 60.5.0-1 - Updated...

Oracle Linux 7 : bind (ELSA-2019-0194)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0194 advisory. 32:9.9.4-73 - Fixes debug level comments 1647539 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 6 : firefox (ELSA-2019-0218)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0218 advisory. 60.5.0-2.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 60.5.0-2 - Updated to 60.5.0 ESR build2...

Oracle Linux 7 : kernel (ELSA-2019-0163)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0163 advisory. - fs userfaultfd: check VMMAYWRITE was set after verifying the uffd is registered Andrea Arcangeli 1640518 1640519 CVE-2018-18397 - mm userfaultfd: all...

kernel security, bug fix, and enhancement update

3.10.0-957.5.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-957.5.1 - fs revert 'fs sunrpc: Ensure we always close the socket after a...

Oracle Linux 6 : thunderbird (ELSA-2019-0159)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0159 advisory. 60.4.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.4.0-1 - Update to 60.4.0 60.3.0-1 - Update to...

Oracle Linux 7 : thunderbird (ELSA-2019-0160)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0160 advisory. 60.4.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.4.0-1 - Update to 60.4.0 Tenable has extracted...

Oracle Linux 7 : perl (ELSA-2019-0109)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0109 advisory. 4:5.16.3-294 - Fix CVE-2018-18311 Integer overflow leading to buffer overflow bug 1661064 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : libvncserver (ELSA-2019-0059)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0059 advisory. 0.9.9-13 - Fix CVE-2018-15127 Heap out-of-bounds write in rfbserver.c:rfbProcessFileTransferReadBuffer bug 1662995 Tenable has extracted the preceding descripti...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4510)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4510 advisory. - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c Hui Peng Orabug: 29042981 CVE-2018-19824 - ALSA: usb-audio: Replace...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4509)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4509 advisory. - KVM: X86: Fix scan ioapic use-before-initialization Wanpeng Li Orabug: 29026132 CVE-2018-19407 - ALSA: usb-audio: Fix UAF decrement if card has no li...

Oracle Linux 7 : systemd (ELSA-2019-0049)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0049 advisory. 219-62.0.4 - do not create utmp update symlinks for reboot and poweroff Orabug: 27854896 - OL7 udev rule for virtio net standby interface Orabug:...