Oracle Linux 7 : git (ELSA-2018-3408)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3408 advisory. 1.8.3.1-20 - Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder for backporting to 2.1.x and to Steve Beattie for backportin...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4270)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4270 advisory. - scsi: sg: mitigate read/write abuse Jann Horn Orabug: 28824731 CVE-2017-13168 - infiniband: fix a possible use-after-free bug Cong Wang Orabug:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4268)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4268 advisory. - netfilter: xtTCPMSS: add more sanity tests on tcph-doff Eric Dumazet Orabug: 27896807 CVE-2017-18017 Tenable has extracted the preceding...

Oracle Linux 7 : thunderbird (ELSA-2018-3458)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-3458 advisory. 60.2.1-4.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.2.1-4 - Fixing minor issues 60.2.1-3 - Revertin...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4265)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4265 advisory. - scsi: libsas: fix memory leak in sassmpgetphyevents Jason Yan Orabug: 27927687 CVE-2018-7757 Tenable has extracted the preceding description bloc...

Oracle Linux 7 : ovmf (ELSA-2018-3090)

From Red Hat Security Advisory 2018:3090 : An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Linux 7 : libkdcraw (ELSA-2018-3065)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3065 advisory. 4.10.5-5 - Resolves: 1557171, 1557189, 1558954 use the system LibRaw Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : setup (ELSA-2018-3249)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3249 advisory. 2.8.71-10 - fix crudp name in /etc/protocols 1566469 - do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells 1571104 Tenable has extracted the precedin...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4261)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4261 advisory. - x86/speculation: Protect against userspace-userspace spectreRSB Jiri Kosina Orabug: 28631590 CVE-2018-15572 - x86/spectrev2: Remove remaining...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4250)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4250 advisory. - Fix up non-directory creation in SGID directories Linus Torvalds Orabug: 28459479 CVE-2018-13405 - ALSA: seq: Make ioctls race-free Takashi Iwai...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4244)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4244 advisory. - mm: get rid of vmacacheflushall entirely Linus Torvalds Orabug: 28701016 CVE-2018-17182 Tenable has extracted the preceding description block directly fro...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4245)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4245 advisory. - rds: CVE-2018-7492: Fix NULL pointer dereference in rdsrdmamap Hakon Bugge Orabug: 28552792 CVE-2018-7492 - cdrom: Fix info leak/OOB read in...

Oracle Linux 6 : kernel (ELSA-2018-2846)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2846 advisory. - fs exec: Limit arg stack to at most 75 of STKLIM Yauheni Kaliuta 1625976 CVE-2018-14634 - fs exec.c: account for argv/envp pointers Yauheni Kaliuta...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4234)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4234 advisory. 2.6.39-400.301.2 - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28710024 CVE-2018-14634 Tenable has extracted the preceding description...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4230)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4230 advisory. 4.1.12-124.19.6 - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28709994 CVE-2018-14634 Tenable has extracted the preceding description...

Oracle Linux 7 : firefox (ELSA-2018-2835)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2835 advisory. 60.2.1-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 60.2.1-1 - Update to 60.2.1 ESR Tenable has extracted the...

Oracle Linux 7 : kernel (ELSA-2018-2748)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2748 advisory. - fs exec: Limit arg stack to at most 75 of STKLIM Yauheni Kaliuta 1625980 1625991 CVE-2018-14634 - fs exec: account for argv/envp pointers Yauheni Kaliuta...

Oracle Linux 7 : flatpak (ELSA-2018-2766)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2766 advisory. 0.8.8-4 - Add patch for CVE-2018-6560 1547376 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4227)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4227 advisory. - nsfs: mark dentry with DCACHERCUACCESS Cong Wang Orabug: 28576290 CVE-2018-5873 - cdrom: Fix info leak/OOB read in cdromioctldrivestatus Scott...

Oracle Linux 6 : spice-gtk / and / spice-server (ELSA-2018-2732)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2732 advisory. spice-gtk 0.26-8.1 - Fix flexible array buffer overflow Resolves: rhbz1596008 spice-server 0.12.4-16.1 - Fix flexible array buffer overflow Resolves: rhbz159600...