CentOS 6 : firefox (CESA-2018:2693)

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4215)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4215 advisory. - x86/speculation/l1tf: Fix overflow in l1tfpfnlimit on 32bit Vlastimil Babka Orabug: 28505476 CVE-2018-3620 - x86/speculation/l1tf: Protect PAE swap entrie...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4210)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4210 advisory. - x86/entry/64: Ensure %ebx handling correct in xenfailsafecallback George Kennedy Orabug: 28402927 CVE-2018-14678 - x86/speculation/l1tf: Increase l1tf...

Oracle Linux 6 : bind (ELSA-2018-2571)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2571 advisory. 32:9.8.2-0.68.rc1.1 - Fix CVE-2018-5740 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 / 7 : mutt (ELSA-2018-2526)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2526 advisory. 5:1.5.21-28 - Resolves: CVE-2018-14354 CVE-2018-14357 CVE-2018-14362 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 : kernel (ELSA-2018-2390)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2390 advisory. - kernel cpu/hotplug: Enable 'nosmt' as late as possible Frantisek Hrbata 1593376 CVE-2018-3620 - x86 x86/mm: Simplify pg4umdpage macros Josh Poimboeuf...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4196)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4196 advisory. - posix-timer: Properly check sigevent-sigevnotify Thomas Gleixner Orabug: 28481412 CVE-2017-18344 - x86/mm/kmmio: Make the tracer robust against...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2018-2283)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2283 advisory. - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream. Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : yum-utils (ELSA-2018-2284)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2284 advisory. 1.1.30-42.0.1 - add dependency btrfs-progs for yum-plugin-fs-snapshot [email protected] bug 16285176 - use unified btrfs binary instead of btrfsctl...

Oracle Linux 6 : openslp (ELSA-2018-2308)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2308 advisory. 2.0.0-3 - Fix possible heap memory corruption, CVE-2017-17833 Resolves: 1575699 Tenable has extracted the preceding description block directly from the Oracle...

CVE-2016-8657

It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group root:jboss, 664. On systems using classic /etc/init.d init scripts i.e. on Red Hat Enterprise Linux 6 a...

CentOS 6 : thunderbird (CESA-2018:2251)

An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

RHEL 6 : thunderbird (RHSA-2018:2251)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:2251 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.9.1. Security Fixes: Mozilla:...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2018-2241)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2241 advisory. 1:1.8.0.181-7.b13 - Update to aarch64-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz1594249 1:1.8.0.181-3.b04 - Fix hook to show...

RHEL 6 : Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 (RHSA-2018:2186)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2186 advisory. This release adds the new Apache HTTP Server 2.4.29 packages that are part of the JBoss Core Services offering. This release serves as a...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4172)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4172 advisory. - KVM: Fix stack-out-of-bounds read in writemmio Wanpeng Li Orabug: 27951293 CVE-2017-17741 CVE-2017-17741 - kernel/exit.c: avoid undefined behavio...

CentOS 6 : firefox (CESA-2018:2112)

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Enhancement Advisory: Red Hat JBoss Web Server 5.0.0 enhancement update

Updated Red Hat JBoss Web Server 5.0.0 packages are now available for Red Hat Enterprise Linux 6. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apach...

Oracle Linux 6 : qemu-kvm (ELSA-2018-2162)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2162 advisory. - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch bz1574074 - Resolves: bz1574074 CVE-2018-3639 qemu-kvm: hw: cpu: speculative stor...

Oracle Linux 6 : kernel (ELSA-2018-2164)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2164 advisory. - x86 entry/64: Don't use IST entry for BP stack Waiman Long 1596113 CVE-2018-10872 - mm mempolicy: fix use after free when calling getmempolicy August...