Oracle Linux 7 : git (ELSA-2018-3408)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3408 advisory. 1.8.3.1-20 - Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder for backporting to 2.1.x and to Steve Beattie for backportin...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4269)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4269 advisory. - scsi: libsas: fix memory leak in sassmpgetphyevents Jason Yan Orabug: 27927686 CVE-2018-7757 Tenable has extracted the preceding description block directl...

Oracle Linux 6 : spice-server (ELSA-2018-3522)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3522 advisory. - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages sent from an authenticated client Resolves: CVE-2017-7506 Tenable has extracte...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4268)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4268 advisory. - netfilter: xtTCPMSS: add more sanity tests on tcph-doff Eric Dumazet Orabug: 27896807 CVE-2017-18017 Tenable has extracted the preceding...

Oracle Linux 7 : java-11-openjdk (ELSA-2018-3521)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3521 advisory. 1:11.0.1.13-3.0.1 - link atomic for ix86 build 1:11.0.1.13-3 - Bump release for rebuild. 1:11.0.1.13-2 - Use LTS designator in version output for RHEL...

Oracle Linux 7 : java-1.7.0-openjdk (ELSA-2018-3350)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3350 advisory. 1:1.7.0.201-2.6.16.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.201-2.6.16.1 - Bump to 2.6.16 and u201b00. - Update 8076221/PR2809 disable RC4 to appl...

Oracle Linux 7 : thunderbird (ELSA-2018-3458)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-3458 advisory. 60.2.1-4.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.2.1-4 - Fixing minor issues 60.2.1-3 - Revertin...

Oracle Linux 7 : python-paramiko (ELSA-2018-3347)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3347 advisory. 2.1.1-9 - Fix a security flaw CVE-2018-1000805 in Paramiko's server mode does not effect client mode. Backported from 2.1.6 Resolves rhbz1637366 Tenable has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4265)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4265 advisory. - scsi: libsas: fix memory leak in sassmpgetphyevents Jason Yan Orabug: 27927687 CVE-2018-7757 Tenable has extracted the preceding description bloc...

Oracle Linux 7 : ovmf (ELSA-2018-3090)

From Red Hat Security Advisory 2018:3090 : An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Linux 7 : curl / and / nss-pem (ELSA-2018-3157)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3157 advisory. - fix RTSP bad headers buffer over-read CVE-2018-1000301 - fix FTP path trickery leads to NIL byte out of bounds write CVE-2018-1000120 - fix LDAP NULL...

Oracle Linux 7 : python (ELSA-2018-3041)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3041 advisory. - Remove 3DS cipher to mitigate CVE-2016-2183 sweet32. Resolves: rhbz1581901 - Fix CVE-2018-1060 and CVE-2018-1061 Resolves: rhbz1563454 and rhbz154919...

Oracle Linux 7 : samba (ELSA-2018-3056)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3056 advisory. - resolves: 1614265 - Fix CVE-2018-1139 - resolves: 1614269 - Fix CVE-2018-10858 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : gnutls (ELSA-2018-3050)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3050 advisory. - Improved counter-measures in TLS CBC record padding for lucky13 attack CVE-2018-10844, 1589704, CVE-2018-10845, 1589707 - Added counter-measures for...

Oracle Linux 7 : libvirt (ELSA-2018-3113)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3113 advisory. 4.5.0-10 - conf: correct false boot order error during domain parse rhbz1601318 4.5.0-9 - virDomainDefCompatibleDevice: Relax alias change check rhbz1621910 -...

Oracle Linux 7 : kernel (ELSA-2018-3083)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3083 advisory. - fs exec: Limit arg stack to at most 75 of STKLIM Yauheni Kaliuta 1625991 CVE-2018-14634 - fs exec: account for argv/envp pointers Yauheni Kaliuta...

Oracle Linux 7 : binutils (ELSA-2018-3032)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3032 advisory. 2.27-34.base.0.1 - Backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R386GOT32/R386GOT32X IFUNC reloc error Orabug...

Oracle Linux 7 : sssd (ELSA-2018-3158)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3158 advisory. - Resolves: rhbz1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder rhel-7 Tenable has extracted the preceding description...

Oracle Linux 7 : zziplib (ELSA-2018-3229)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3229 advisory. - 'Variable 'file' going out of scope leaks the storage it points to.' has been introduced by the original version of 0001-fix-CVE-2018-7725.patch - Fi...

Oracle Linux 7 : krb5 (ELSA-2018-3071)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3071 advisory. - Fix flaws in LDAP DN checking CVE-2018-5729, CVE-2018-5730 Tenable has extracted the preceding description block directly from the Oracle Linux...