Oracle Linux 5 / 6 / 7 : firefox (ELSA-2016-2843)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2843 advisory. 45.5.1-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.5.1-1 - Updat...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-2825)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2825 advisory. 45.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.5.0-1 - Update to 45.5.0 Tenable has extracted t...

Oracle Linux 6 : memcached (ELSA-2016-2820)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2820 advisory. 0:1.4.4-3.el68.1 - fix vulnerabilities allowing remote code execution CVE-2016-8704, CVE-2016-8705, CVE-2016-8706 Tenable has extracted the preceding...

Oracle Linux 7 : ipsilon (ELSA-2016-2809)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2809 advisory. 1.0.0-13 - Backport patch for CVE-2016-8638 RHBZ1394116 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3646)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3646 advisory. - aacraid: Check size values after double-fetch from user Dave Carroll Orabug: 25060055 CVE-2016-6480 CVE-2016-6480 - audit: fix a double fetch in...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3644)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3644 advisory. - acpi: Disable ACPI table override if securelevel is set Linn Crosetto Orabug: 25058966 CVE-2016-3699 - aacraid: Check size values after...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3645)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3645 advisory. - aacraid: Check size values after double-fetch from user Dave Carroll Orabug: 25060050 CVE-2016-6480 CVE-2016-6480 - IB/srpt: Simplify...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2016-2780)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2016-2780 advisory. 45.5.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.5.0-...

Oracle Linux 5 / 6 / 7 : nss / and / nss-util (ELSA-2016-2779)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2779 advisory. - Mozilla 1314604 / Red Hat CVE-2016-8635 - Remove patch for CVE-2016-1950, which is included in the release Tenable has extracted the precedin...

Oracle Linux 6 : 389-ds-base (ELSA-2016-2765)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2765 advisory. - Resolves: 1358559 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation - Resolves: 1361421 - CVE-2016-5416...

Oracle Linux 6 / 7 : policycoreutils (ELSA-2016-2702)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2702 advisory. 2.0.83-30.1.0.1 - Lazy unmount private, shared entryJoe Jinorabug 12560705 2.0.83-30.1 - sandbox: create a new session for sandboxed processes Resolves:...

Oracle Linux 7 : postgresql (ELSA-2016-2606)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2606 advisory. 9.2.18-1 - update to 9.2.18 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-18.html...

Oracle Linux 7 : squid (ELSA-2016-2600)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2600 advisory. - Resolves: 1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572 CVE-2016-3948 squid: various flaws - Related: 1334509 - CVE-2016-4553...

Oracle Linux 7 : krb5 (ELSA-2016-2591)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2591 advisory. - Fix CVE-2016-3120 - Fix CVE-2016-3119 LDAP NULL dereference Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : glibc (ELSA-2016-2573)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2573 advisory. - CVE-2016-3075: Stack overflow in nssdnsgetnetbynamer 1321993 - Fix CVE-2015-7547: getaddrinfo stack-based buffer overflow 1296031. Tenable has extracted the...

Oracle Linux 7 : libreswan (ELSA-2016-2603)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2603 advisory. - Resolves: rhbz1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack Tenable has extracted the preceding description block...

Oracle Linux 7 : mod_nss (ELSA-2016-2602)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2602 advisory. - OpenSSL ciphers stopped parsing at +, CVE-2016-3099 1323913 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : firewalld (ELSA-2016-2597)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2597 advisory. - Fixed CVE-2016-5410 RHBZ1359296 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 7 : resteasy-base (ELSA-2016-2604)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2604 advisory. 3.0.6-4 - Resolves: rhbz1378619 - disable SerializerProvider by default 3.0.6-3 - Resolves: rhbz1357624 - fail to build with java 8 3.0.6-2 - Resolves:...

Oracle Linux 7 : libvirt (ELSA-2016-2577)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2577 advisory. 2.0.0-10 - virtlogd: Don't stop or restart along with libvirtd rhbz1372576 2.0.0-9 - Add helper for removing transient definition rhbz1368774 - qemu:...