Oracle Linux 7 : setup (ELSA-2018-3249)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3249 advisory. 2.8.71-10 - fix crudp name in /etc/protocols 1566469 - do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells 1571104 Tenable has extracted the precedin...

Oracle Linux 7 : libcdio (ELSA-2018-3246)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3246 advisory. - fix CVE-2017-18198 and CVE-2017-18199 - fix CVE-2017-18201 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : glusterfs (ELSA-2018-3242)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3242 advisory. 3.12.2-18 - fixes bugs bz1524336 bz1622029 bz1622452 3.12.2-17 - fixes bugs bz1615578 bz1619416 bz1619538 bz1620469 bz1620765 3.12.2-16 - fixes bugs bz1569657...

Oracle Linux 7 : 389-ds-base (ELSA-2018-3127)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3127 advisory. - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default Tenable has extracted the...

Oracle Linux 7 : libmspack (ELSA-2018-3327)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3327 advisory. - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : jasper (ELSA-2018-3253)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3253 advisory. - Fix CVE-2016-9396 1583721 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 7 : wget (ELSA-2018-3052)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3052 advisory. - Fix CVE-2018-0494 1576106 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 7 : libkdcraw (ELSA-2018-3065)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3065 advisory. 4.10.5-5 - Resolves: 1557171, 1557189, 1558954 use the system LibRaw Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : openssl (ELSA-2018-3221)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3221 advisory. - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily - fi...

python security and bug fix update

2.7.5-76.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-76 - Remove an unversioned obsoletes tag Resolves: rhbz1627059 2.7.5-75 - Provide the /usr/libexec/platform-python symlink to the main binary Resolves: rhbz1599159 2.7.5-74 - Fix OSERROR 17 due to...

Oracle Linux 6 : python-paramiko (ELSA-2018-3406)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3406 advisory. - Fix CVE-2018-1000805 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested f...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2018-3409)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3409 advisory. 1:1.7.0.201-2.6.16.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.201-2.6.16.0 - Bump to 2.6.16 and u201b00. - Update 8076221/PR2809 disable RC4 to appl...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4261)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4261 advisory. - x86/speculation: Protect against userspace-userspace spectreRSB Jiri Kosina Orabug: 28631590 CVE-2018-15572 - x86/spectrev2: Remove remaining...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2018-2942)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2942 advisory. 1:1.8.0.191.b12-0 - Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz1633817 1:1.8.0.191.b10-0 - Update to aarch64-shenandoah-jdk8u191-b10. -...

Oracle Linux 7 : tomcat (ELSA-2018-2921)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2921 advisory. 0:7.0.76-8 - Resolves: rhbz1608608 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS Tenable has extracted the preceding description block direct...

Oracle Linux 7 : ghostscript (ELSA-2018-2918)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2918 advisory. - Added security fixes for: - CVE-2018-16509 bug 1621156 - CVE-2018-15910 bug 1621157 - CVE-2018-16542 bug 1621380 Tenable has extracted the preceding...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4250)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4250 advisory. - Fix up non-directory creation in SGID directories Linus Torvalds Orabug: 28459479 CVE-2018-13405 - ALSA: seq: Make ioctls race-free Takashi Iwai...

Oracle Linux 6 : openssl (ELSA-2018-4248)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4248 advisory. - Oracle bug 28730228: backport CVE-2018-0732 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : openssl (ELSA-2018-4249)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4249 advisory. - Oracle bug 28672370: backport CVE-2018-0732 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : spamassassin (ELSA-2018-2916)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2916 advisory. - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for Tenab...