Oracle Linux 7 : tomcat (ELSA-2017-3081)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3081 advisory. - Resolves: rhbz1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws - Resolves: rhbz1495654 CVE-2017-7674 tomcat: Vary header not added by CORS...

Oracle Linux 6 : tomcat6 (ELSA-2017-3080)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3080 advisory. - Resolves: rhbz1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws - Resolves: rhbz1461292 CVE-2017-5664 tomcat6: tomcat: Security constraine...

Oracle Linux 6 : ntp (ELSA-2017-3071)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3071 advisory. - add disable monitor to default ntp.conf CVE-2013-5211 - fix buffer overflow in datum refclock driver CVE-2017-6462 - fix crash with invalid unpeer...

Oracle Linux 7 : wget (ELSA-2017-3075)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-3075 advisory. 1.14-15.1 - Fixed various security flaws CVE-2017-13089, CVE-2017-13090 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3631)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3631 advisory. - ipv6: avoid overflow of offset in ip6find1stfragopt Sabrina Dubroca Orabug: 27011255 CVE-2017-7542 Tenable has extracted the preceding descriptio...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3633)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3633 advisory. - mqueue: fix a use-after-free in sysmqnotify Cong Wang Orabug: 26643562 CVE-2017-11176 - ipv6: avoid overflow of offset in ip6find1stfragopt Sabri...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3632)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3632 advisory. - mqueue: fix a use-after-free in sysmqnotify Cong Wang Orabug: 26643556 CVE-2017-11176 - ipv6: avoid overflow of offset in ip6find1stfragopt Sabri...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2017-2998)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2998 advisory. 1:1.8.0.151-1.b12 - repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves:...

Oracle Linux 7 : kernel (ELSA-2017-2930-1) (BlueBorne)

Description of changes: - 3.10.0-693.5.2.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update...

Oracle Linux 7 : kernel (ELSA-2017-2930)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2930 advisory. - net tcp: initialize rcvmss to TCPMINMSS instead of 0 Davide Caratti 1488341 1487061 CVE-2017-14106 - net tcp: fix 0 divide in tcpselectwindow Davide...

Oracle Linux 6 : httpd (ELSA-2017-2972)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2972 advisory. 2.2.15-60.0.1.6 - replace index.html with Oracle's index page oracleindex.html - update vstring in specfile 2.2.15-60.6 - Resolves: 1493061 -...

Oracle Linux 6 : wpa_supplicant (ELSA-2017-2911)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2911 advisory. - Fix backport errors CVE-2017-13077, CVE-2017-13080 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : wpa_supplicant (ELSA-2017-2907)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2907 advisory. 1:2.6-5.1 - avoid key reinstallation CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,...

Oracle Linux 6 / 7 : thunderbird (ELSA-2017-2885)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2885 advisory. 52.4.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.4.0-2 - Update to 52.4.0 b2 Tenable has...

Oracle Linux 7 : httpd (ELSA-2017-2882)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2882 advisory. 2.4.6-67.0.1.el74.5 - replace index.html with Oracle's index page oracleindex.html 2.4.6-67.5 - Resolves: 1493064 - CVE-2017-9798 httpd: Use-after-free by...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3629)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3629 advisory. - brcmfmac: fix possible buffer overflow in brcmfcfg80211mgmttx Tim Tianyang Chen Orabug: 26943541 CVE-2017-7541 Tenable has extracted the preceding...

Oracle Linux 6 : kernel (ELSA-2017-2863)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2863 advisory. - net l2cap: prevent stack overflow on incoming bluetooth packet Neil Horman 1490060 1490062 CVE-2017-1000251 - fs binfmtelf.c:loadelfbinary: return -EINVAL on...

Oracle Linux 6 : postgresql (ELSA-2017-2860)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2860 advisory. 8.4.20-8 - backport fix for CVE-2017-7546 rhbz1484677 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

dnsmasq security update

2.45-1.1.0.1.el5 - Back port fix for CVE-2017-14491 from OL 6 errata ELSA-2017-2838...

Oracle Linux 7 : dnsmasq (ELSA-2017-2836)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2836 advisory. - Small correction of CVE-2017-14491 - Fix CVE-2017-14491 - Fix CVE-2017-14492 - Fix CVE-2017-14493 - Fix CVE-2017-14494 - Fix CVE-2017-14496 - Fix...