Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3593)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3593 advisory. - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393865 CVE-2016-4470 Tenable has extracted the preceding description block directl...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3592)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3592 advisory. 2.6.39-400.283.2 - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393863 CVE-2016-4470 Tenable has extracted the preceding description block...

Oracle Linux 7 : libtiff (ELSA-2016-1546)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1546 advisory. - Add patches for CVEs: CVE-2015-7554, CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2015-8784 - Update patches for...

Oracle Linux 7 : golang (ELSA-2016-1538)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1538 advisory. - Resolves: rhbz1358278 - CVE-2016-5386 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 7 : kernel (ELSA-2016-1539)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1539 advisory. - security keys: potential uninitialized variable David Howells 1345935 1341352 CVE-2016-4470 - infiniband security: Restrict use of the write interfac...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3589)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3589 advisory. - atl2: Disable unimplemented scatter/gather feature Ben Hutchings Orabug: 23703990 CVE-2016-2117 Tenable has extracted the preceding description block...

Oracle Linux 6 / 7 : kernel-uek (ELSA-2016-3587)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3587 advisory. - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3588)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3588 advisory. kernel-uek 3.8.13-118.9.1 - mlx4: Increase SYNCTPT command timeout Mukesh Kacker Orabug: 22895790 - neigh: do not modify unlinked entries Julian Anastasov...

Oracle Linux 5 / 6 / 7 : java-1.7.0-openjdk (ELSA-2016-1504)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1504 advisory. 1:1.7.0.111-2.6.7.1.0.1 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.111-2.6.7.1 - Bump to jdk7u111 b01 to fix TCK...

Oracle Linux 7 : samba (ELSA-2016-1486)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1486 advisory. - resolves: 1351960 - Fix CVE-2016-2119 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2016-1458)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1458 advisory. 1:1.8.0.101-3.b13 - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz1350034 1:1.8.0.101-2.b13 - Add...

Oracle Linux 5 / 6 : httpd (ELSA-2016-1421)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1421 advisory. 2.2.3-92.0.1 - Add the ability to read DH parameters from the first SSLCertificateFile John Haxby orabug 21671194 - fix modssl always performing full...

Oracle Linux 7 : httpd (ELSA-2016-1422)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1422 advisory. - add security fix for CVE-2016-5387 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 6 : kernel (ELSA-2016-1406)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1406 advisory. - infiniband security: Restrict use of the write interface Don Dutile 1332547 1332548 CVE-2016-4565 Tenable has extracted the preceding description block direct...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-1392)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-1392 advisory. 45.2-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.2-1 - Update to 45.2 45.1.1-1 - Update to 45.1.1...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3579)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3579 advisory. kernel-uek 2.6.32-400.37.18uek - IB/security: Restrict use of the write interface Jason Gunthorpe Orabug: 23641666 CVE-2016-4565 Tenable has extracted the...

Oracle Linux 7 : kernel (ELSA-2016-1277)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1277 advisory. - infiniband security: Restrict use of the write interface Don Dutile 1332553 1316685 CVE-2016-4565 - net sctp: Prevent soft lockup when sctpaccept is...

Oracle Linux 7 : setroubleshoot / and / setroubleshoot-plugins (ELSA-2016-1293)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1293 advisory. setroubleshoot 3.2.24-4.0.1 - Add setroubleshoot-oracle-enterprise.patch to change bug reporting URL to linux.oracle.com 3.2.24-4 - Catch all subproces...

Oracle Linux 7 : ocaml (ELSA-2016-1296)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1296 advisory. 4.01.0-22.7 - Fix buffer overflow and information leak CVE-2015-8869 resolves: rhbz1343100 Tenable has extracted the preceding description block directly from t...

Oracle Linux 6 / 7 : libxml2 (ELSA-2016-1292)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1292 advisory. - Heap-based buffer overread in xmlNextChar CVE-2016-1762 - Bug 763071: Heap-buffer-overflow in xmlStrncat CVE-2016-1834 - Bug 757711:...