Oracle Linux 7 : qemu-kvm (ELSA-2017-0987)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0987 advisory. 1.5.3-126.el73.6 - kvm-fix-cirrusvga-fix-OOB-read-case-qemu-Segmentation-f.patch bz1430059 - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch bz143005...

Oracle Linux 6 : libreoffice (ELSA-2017-0979)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0979 advisory. 1:4.3.7.2-2.0.1.1 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile [email protected] - Build with...

Oracle Linux 7 : kernel (ELSA-2017-0933-1)

Description of changes: - 3.10.0-514.16.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3539)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3539 advisory. - KVM: x86: fix emulation of 'MOV SS, null selector' Paolo Bonzini Orabug: 25719659 CVE-2017-2583 CVE-2017-2583 - ext4: store checksum seed in...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3538)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3538 advisory. - udp: properly support MSGPEEK with truncated buffers Eric Dumazet Orabug: 25874741 CVE-2016-10229 Tenable has extracted the preceding description...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3537)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3537 advisory. kernel-uek 3.8.13-118.17.5 - block: fix use-after-free in seq file Vegard Nossum Orabug: 25877530 CVE-2016-7910 Tenable has extracted the preceding...

Oracle Linux 7 : tomcat (ELSA-2017-0935)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0935 advisory. - Resolves: rhbz1413591 CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing Tenable has extracted the preceding description...

Oracle Linux 7 : libreoffice (ELSA-2017-0914)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0914 advisory. - Resolves: rhbz1435534 CVE-2017-3157 Arbitrary file disclosure in Calc and Writer - Resolves: rhbz1353839 CVE-2016-4324 dereference of invalid STL iterator on...

Oracle Linux 7 : httpd (ELSA-2017-0906)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0906 advisory. - updated patch for CVE-2016-8743 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : util-linux (ELSA-2017-0907)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0907 advisory. - Reviewed-by: Joe Jin fix CVE-2017-2616 - Sending SIGKILL to other processes with root privileges via su Tenable has extracted the preceding description block...

kernel security, bug fix, and enhancement update

3.10.0-514.16.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676...

Oracle Linux 7 : kernel (ELSA-2017-0933)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0933 advisory. - tty nhdlc: get rid of racy nhdlc.tbuf 'Herton R. Krzesinski' 1429919 1429920 CVE-2017-2636 - security selinux: fix off-by-one in setprocattr Paul Moo...

Oracle Linux 7 : 389-ds-base (ELSA-2017-0920)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0920 advisory. - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages Tenable has extracted the preceding description block directly from...

kernel security, bug fix, and enhancement update

3.10.0-514.16.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-514.16.1 - tty nhdlc: get rid of racy nhdlc.tbuf 'Herton R. Krzesinski' 1429919...

Oracle Linux 6 : 389-ds-base (ELSA-2017-0893)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0893 advisory. - Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages Tenable has extracted the preceding description block...

Oracle Linux 6 : kernel (ELSA-2017-0892)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0892 advisory. - block fix use-after-free in seq file Denys Vlasenko 1418548 1418549 CVE-2016-7910 Tenable has extracted the preceding description block directly from...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3533)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3533 advisory. - Revert 'x86/mm: Expand the exception table logic to allow new handling options' Brian Maly Orabug: 25790387 CVE-2016-9644 - Revert 'fix minor...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3535)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3535 advisory. - RHEL: complement upstream workaround for CVE-2016-10142. Quentin Casasnovas Orabug: 25765786 CVE-2016-10142 CVE-2016-10142 - net: ping: check...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3534)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3534 advisory. - Revert 'fix minor infoleak in getuserex' Brian Maly Orabug: 25790392 CVE-2016-9644 - net: ping: check minimum size on ICMP header length Kees Coo...

Oracle Linux 6 : openssh (ELSA-2017-0641)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0641 advisory. - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 Tenable has extracted the preceding description block directly from th...