Oracle Linux 7 : librelp (ELSA-2018-1223)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1223 advisory. - fixed CVE-2018-1000140 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 6 : librelp (ELSA-2018-1225)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1225 advisory. - fixed CVE-2018-1000140 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 7 : PackageKit (ELSA-2018-1224)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1224 advisory. - Fixes CVE-2018-1106 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested fo...

Oracle Linux 7 : patch (ELSA-2018-1200)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1200 advisory. 2.7.1-10 - Fixed Coverity reported issues 2.7.1-9 - Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands Tenable has extracted...

Oracle Linux 6 : patch (ELSA-2018-1199)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1199 advisory. 2.6-8 - Fixed year overflow detected in rpmdiff 2.6-7 - Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands Tenable has...

Installing updates or third party software on the ELM

As a general rule, you should not install software on your ELM. While there are some circumstances where it will work fine, it is likely to cause software dependency problems that will block App Layering updates. App Layering is very particular about the Linux software packages and versions...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2018-1188)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1188 advisory. 1:1.8.0.171-3.b10 - Cleanup from previous commit. - Resolves: rhbz1559766 1:1.8.0.171-2.b10 - Backported from fedora: aarch64BuildFailure.patch,...

Oracle Linux 7 : firefox (ELSA-2018-1099)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1099 advisory. 52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.7.3-1 - Update to 52.7.3 ESR Tenable has extracted the preceding...

Oracle Linux 7 : libvncserver (ELSA-2018-1055)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1055 advisory. 0.9.9-12 - Fix CVE-2018-7225 improper client cut text length sanitization bug 1548440 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4071 advisory. - net: cdcether: fix divide by 0 on bad descriptors Bjorn Mork Orabug: 27841392 CVE-2017-16649 - sysctl: Drop reference added by grabheader in...

Oracle Linux 7 : libvorbis (ELSA-2018-1058)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1058 advisory. 1.3.3-8.1 - Backport fix for CVE-2018-5146 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : ntp (ELSA-2018-0855)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0855 advisory. - fix buffer overflow in datum refclock driver CVE-2017-6462 - fix crash with invalid unpeer command CVE-2017-6463 - fix potential crash with invalid...

Oracle Linux 7 : policycoreutils (ELSA-2018-0913)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0913 advisory. 2.5-22.0.1 - Lazy unmount private, shared entry Joe Jin orabug 12560705 2.5-22 - semanage: Fix fcontext help message 1499259 - semanage: Improve semanage-user.8...

Oracle Linux 7 : openssh (ELSA-2018-0980)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0980 advisory. - Fix for CVE-2017-15906 1517226 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 : kernel (ELSA-2018-1062)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1062 advisory. - acpi sbshc: remove raw pointer from printk message Baoquan He 1547009 CVE-2018-5750 - media v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixu...

Oracle Linux 7 : openssl (ELSA-2018-0998)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0998 advisory. - fix CVE-2017-3737 - incorrect handling of fatal error state - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus Tenable ha...

Oracle Linux 7 : krb5 (ELSA-2018-0666)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0666 advisory. - Fix CVE-2017-7562 certauth eku bypass - Fix CVE-2017-11368 s4u2 request assertion failures Tenable has extracted the preceding description block...

Oracle Linux 7 : gcc (ELSA-2018-0849)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0849 advisory. - fix incorrect codegen from rdseed intrinsic use 1482762, CVE-2017-11671 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : glibc (ELSA-2018-0805)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0805 advisory. - CVE-2018-1000001: Fix realpath buffer underflow 1534635 - CVE-2017-15670: glob: Fix one-byte overflow with GLOBTILDE 1504809 - CVE-2017-15804: glob:...

kernel security, bug fix, and enhancement update

3.10.0-862.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-862 - netdrv i40e: Fix attach VF to VM issue Stefan Assmann 1528123 - netdrv ixgbevf:...