Oracle Linux 6 : ocaml (ELSA-2017-0565)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0565 advisory. 3.11.2-5 - Enable execshield stack protection on ppc/ppc64 572826 related: rhbz1343082 - Fix strict-aliasing warnings in build 990540. 3.11.2-3 - Fix buffer...

Oracle Linux 6 : kernel (ELSA-2017-0817)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0817 advisory. - net dccp: fix freeing skb too early for IPV6RECVPKTINFO Hannes Frederic Sowa 1424628 CVE-2017-6074 - fs posixacl: Clear SGID bit when setting file...

Oracle Linux 6 : glibc (ELSA-2017-0680)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0680 advisory. - Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function 1358015. - Fix CVE-2015-8778 glibc: Integer overflow in hcreate and hcreater...

Oracle Linux 6 : quagga (ELSA-2017-0794)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0794 advisory. - Resolves: 1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory - fix for CVE-2013-2236 1391918 - fix f...

Oracle Linux 6 : samba (ELSA-2017-0662)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0662 advisory. - resolves: 1405356 - CVE-2016-2125 CVE-2016-2126 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 6 : tigervnc (ELSA-2017-0630)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0630 advisory. 1.1.0-24 - Proper global init/deinit of GnuTLS Resolves: bz1418946 1.1.0-23 - Fix buffer overflow in FullFramePixelBuffer::fillRect Resolves: bz1416289...

Oracle Linux 6 : curl (ELSA-2017-0847)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0847 advisory. 7.19.7-53 - treat Negotiate authentication as connection-oriented CVE-2017-2628 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 : qemu-kvm (ELSA-2017-0621)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0621 advisory. - Resolves: bz1420487 EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrusbitbltcputovideo rhel-6.9 - Resolves...

Oracle Linux 6 : coreutils (ELSA-2017-0654)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0654 advisory. - su: deny killing other processes with root privileges CVE-2017-2616 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : samba4 (ELSA-2017-0744)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0744 advisory. - resolves: 1405358 - CVE-2016-2125 CVE-2016-2126 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 6 : libguestfs (ELSA-2017-0564)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0564 advisory. 1:1.20.11-20 - inspection: fix detection of /usr in separate partition resolves: rhbz1388407 1:1.20.11-19 - libguestfs-java: bump the java Require to = 1.7.0,...

Oracle Linux 6 : gnutls (ELSA-2017-0574)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0574 advisory. - Added fixes for OpenPGP parsing issues CVE-2017-5337, CVE-2017-5336, CVE-2017-5335 Tenable has extracted the preceding description block directly fro...

Oracle Linux 6 : bash (ELSA-2017-0725)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0725 advisory. - CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: 1396383 - CVE-2016-7543 - Fix for arbitrary code execution via...

Oracle Linux 6 : wireshark (ELSA-2017-0631)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0631 advisory. - segfault with CVE-2013-4075 capture - valgrind error with CVE-2015-3812 capture - Resolves: CVE-2013-4075 Tenable has extracted the preceding...

Oracle Linux 7 : icoutils (ELSA-2017-0837)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0837 advisory. 0.31.3-1 - Rebase to upstream version 0.31.3. - This version includes multiple security fixes CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-600...

Oracle Linux 7 : openjpeg (ELSA-2017-0838)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0838 advisory. - Revert previous changes in patch for CVE-2016-5159 - Add two more allocation checks to patch for CVE-2016-5159 Related: 1419772 - Fix CWE-825 errors ...

Oracle Linux 6 : openjpeg (ELSA-2017-0559)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0559 advisory. - Revert previous changes in patch for CVE-2016-5159 - Fix double free in patch for CVE-2016-5139 - Add two more allocation checks to patch for...

Oracle Linux 7 : firefox (ELSA-2017-0558)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2017-0558 advisory. 52.0-5.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.0-5 - Added fix for mozbz1348168/CVE-2017-5428 Tenable has extract...

Oracle Linux 6 : tomcat6 (ELSA-2017-0527)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0527 advisory. - Related: rhbz1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un- encoded characters - Related: rhbz1402664...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2017-0498)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0498 advisory. 45.8.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.8.0-1 - Update to 45.8.0 Tenable has...