Oracle Linux 6 : nss-softokn (ELSA-2019-4152)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4152 advisory. 3.44.0-6.0.1 - Add fips140-2 DSA Known Answer Test fix Orabug 26696773 - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix Orabug 26617866, Orabug...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4871)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4871 advisory. - ieee802154: enforce CAPNETRAW for raw sockets Allen Pais Orabug: 30444947 CVE-2019-17053 - mISDN: enforce CAPNETRAW for raw sockets Ori Nimron...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4872)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4872 advisory. - ieee802154: enforce CAPNETRAW for raw sockets Allen Pais Orabug: 30444948 CVE-2019-17053 - mISDN: enforce CAPNETRAW for raw sockets Ori Nimron...

Oracle Linux 6 : microcode_ctl (ELSA-2019-4868)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4868 advisory. 3:1.17-33.19.0.4 - set earlymicrocode='no' in virtualized guests to avoid early load bugs Orabug: 30618737 3:1.17-33.19.0.1 - merge Oracle changes for...

Oracle Linux 7 : kernel (ELSA-2019-3979)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3979 advisory. - drm drm/i915/cmdparser: Fix jump whitelist clearing Dave Airlie 1756882 1756883 CVE-2019-0155 - drm drm/i915: Lower RM timeout to avoid DSI hard hang...

Oracle Linux 8 : kernel (ELSA-2019-3871)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3871 advisory. 4.18.0-147.0.31.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : kernel (ELSA-2019-3832)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3832 advisory. - drm drm/i915: Lower RM timeout to avoid DSI hard hangs Dave Airlie 1766056 1756805 CVE-2019-0154 - drm drm/i915/gen8+: Add RC6 CTX corruption WA Dave...

Oracle Linux 8 : php:7.3 (ELSA-2019-3736)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3736 advisory. php 7.3.5-5 - fix underflow in envpathinfo in fpmmain.c CVE-2019-11043 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4850)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4850 advisory. - vhost: make sure lognum innum yongduan Orabug: 30312787 CVE-2019-14835 - vhost: block speculation of translated descriptors Michael S. Tsirkin...

Oracle Linux 6 : kernel (ELSA-2019-3878)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3878 advisory. 2.6.32-754.24.3.OL6 - Update genkey bug 25599697 2.6.32-754.24.3 - drm drm/i915/cmdparser: Fix jump whitelist clearing Denys Vlasenko 1756891 CVE-2019-0155...

Oracle Linux 7 : kernel (ELSA-2019-3834)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3834 advisory. - drm drm/i915: Lower RM timeout to avoid DSI hard hangs Dave Airlie 1756815 1756816 CVE-2019-0154 - drm drm/i915/gen8+: Add RC6 CTX corruption WA Dave...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4837)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4837 advisory. - x86/tsx: Add config options to set tsx=on|off|auto Michal Hocko Orabug: 30419233 CVE-2019-11135 - x86/speculation/taa: Add documentation for TSX...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4838)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4838 advisory. - x86/tsx: Add config options to set tsx=on|off|auto Michal Hocko Orabug: 30419232 CVE-2019-11135 - x86/speculation/taa: Add documentation for TSX Async Abo...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4839)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4839 advisory. - x86/tsx: Add config options to set tsx=on|off|auto Michal Hocko Orabug: 30419231 CVE-2019-11135 - x86/speculation/taa: Add documentation for TSX Async Abo...

Oracle Linux 6 : kernel (ELSA-2019-3836)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3836 advisory. - documentation Documentation: Add ITLBMULTIHIT documentation Paolo Bonzini 1692385 CVE-2018-12207 - kvm KVM: introduce nohugepages module parameter...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4836)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4836 advisory. - kvm: x86: mmu: Recovery of shattered NX large pages Junaid Shahid Orabug: 29967630 CVE-2018-12207 - kvm: Add helper function for creating VM worker...

Oracle Linux 6 : sudo (ELSA-2019-3755)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3755 advisory. 1.8.6p3-29.0.1.el610.2 - Fixes OraBug: 28747380 sudo does not honor envkeep-='KRB5CCNAME' after 'sudo -k' [email protected] 1.8.6p3-29.2 - RHEL-6.10.z ERRAT...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2019-3136)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3136 advisory. 1:1.8.0.232.b09-0 - Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by...

Oracle Linux 7 : kernel (ELSA-2019-3055)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3055 advisory. - vhost vhost: make sure lognum innum Eugenio Perez 1750879 1750880 CVE-2019-14835 - net Bluetooth: Fix faulty expression for minimum encryption key si...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4823)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4823 advisory. - scsi: sg: fixup infoleak when using SGGETREQUESTTABLE Hannes Reinecke Orabug: 26941755 CVE-2017-14991 Tenable has extracted the preceding...