Oracle Linux 6 / 7 : openssl (ELSA-2016-1940)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1940 advisory. - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2179 - further DoS issues in...

Oracle Linux 5 : kvm (ELSA-2016-1943)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1943 advisory. - Resolves: bz1359723 CVE-2016-5403 kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS rhel-5.11.z -...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3618)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3618 advisory. - Btrfs: fix truncation of compressed and inlined extents Divya Indi Orabug: 22307286 CVE-2015-8374 - Btrfs: fix file corruption and data loss afte...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3619)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3619 advisory. - netfilter: xtables: make sure e-nextoffset covers remaining blob size Florian Westphal Orabug: 24682076 CVE-2016-4997 CVE-2016-4998 - netfilter:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3617)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3617 advisory. - Btrfs: fix truncation of compressed and inlined extents Ashish Samant Orabug: 22307285 CVE-2015-8374 - Btrfs: fix file corruption and data loss...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2016-1912)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2016-1912 advisory. 45.4.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.4.0-...

Oracle Linux 7 : kernel (ELSA-2016-1847)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1847 advisory. - net tcp: enable per-socket rate limiting of all 'challenge acks' Florian Westphal 1355603 1355605 CVE-2016-5696 - net tcp: uninline tcpoowratelimited...

Oracle Linux 6 : ntp (ELSA-2016-3613)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3613 advisory. 4.2.6p5-10.0.1.el68.1 - add disable monitor to default ntp.conf CVE-2013-5211 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : libarchive (ELSA-2016-1844)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1844 advisory. - Fixes variation of CVE-2016-5418: Hard links could include '..' in their path. - Fixes CVE-2016-5418: Archive Entry with type 1 hardlink causes file...

Oracle Linux 7 : ntp (ELSA-2016-3612)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3612 advisory. 4.2.6p5-22.0.1.el72.2 - add disable monitor to default ntp.conf CVE-2013-5211 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-1809)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-1809 advisory. 45.3.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.3.0-1 - Update to 45.3.0 Tenable has extracted t...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3596)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3596 advisory. - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24402831 CVE-2016-4470 - vfs: add vfsselectinode helper Miklos Szeredi Orabug:...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2016-1776)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1776 advisory. 1:1.6.0.40-1.13.12.4.0.1 - Add oracle-enterprise.patch 1:1.6.0.40-1.13.12.4 - Bump source tarballs to try and really fix TCK failures this time...

Oracle Linux 6 : kernel (ELSA-2016-1664)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1664 advisory. - net tcp: make challenge acks less predictable Florian Westphal 1355606 1355607 CVE-2016-5696 Tenable has extracted the preceding description block directly fr...

Oracle Linux 7 : kernel (ELSA-2016-1633)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1633 advisory. - net tcp: enable per-socket rate limiting of all 'challenge acks' Florian Westphal 1355603 1355605 CVE-2016-5696 - net tcp: uninline tcpoowratelimited Florian...

Oracle Linux 6 / 7 : python (ELSA-2016-1626)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1626 advisory. - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359161 - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack rhbz1303647 Raise...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3595)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3595 advisory. - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010012 Orabug: 2401010 CVE-2016-5696 Tenable has extracted the preceding description bloc...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3594)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3594 advisory. kernel-uek 4.1.12-37.6.3 - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010103 Orabug: 2401010 CVE-2016-5696 Tenable has extracted the...

Oracle Linux 7 : qemu-kvm (ELSA-2016-1606)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1606 advisory. - Resolves: bz1358996 CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsiaioioctl rhel-7.2.z - Resolves: bz1359728 EMBARGOED...

Oracle Linux 6 : qemu-kvm (ELSA-2016-1585)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1585 advisory. - Resolves: bz1359724 EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS rhel-6.8.z - Resolves:...