Oracle Linux 6 : firefox (ELSA-2018-1098)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1098 advisory. 52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update...

Oracle Linux 6 : python-paramiko (ELSA-2018-1124)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1124 advisory. - Add a fix for upstream tests for CVE-2018-7750 broken in previous. Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4062)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4062 advisory. - fork: fix incorrect fput of -exefile causing use-after-free Eric Biggers Orabug: 27290198 CVE-2017-17052 - KVM: x86: fix singlestepping over...

Oracle Linux 6 : libvorbis (ELSA-2018-0649)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0649 advisory. - Backport fix for CVE-2018-5146 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

CentOS 6 : firefox (CESA-2018:0526)

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Oracle Linux 6 : firefox (ELSA-2018-0526)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0526 advisory. 52.7.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper...

CentOS 6 : mailman (CESA-2018:0504)

An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CentOS 6 : libreoffice (CESA-2018:0517)

An update for libreoffice is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Oracle Linux 6 : libreoffice (ELSA-2018-0517)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0517 advisory. 1:4.3.7.2-2.0.1.2 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile [email protected] - Build with...

CentOS 6 : 389-ds-base (CESA-2018:0515)

An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CentOS 6 : qemu-kvm (CESA-2018:0516)

An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Oracle Linux 6 : qemu-kvm (ELSA-2018-0516)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0516 advisory. 0.12.1.2-2.503.el69.5 - kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch bz1501296 - Resolves: bz1501296 CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB...

RHEL 6 : JBoss Enterprise Application Platform 7.1.1 on RHEL 6 (Important) (RHSA-2018:0479)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0479 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

Oracle Linux 6 : 389-ds-base (ELSA-2018-0515)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0515 advisory. - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c fix...

Oracle Linux 6 : mailman (ELSA-2018-0504)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0504 advisory. 3:2.1.12-26.3 - Related: 1545967 - Add missed import 3:2.1.12-26.2 - Resolves: 1545967 - Fix XSS vulnerability in web UI. Add sanitizer 3:2.1.12-26.1 - Resolves...

RHEL 6 : 389-ds-base (RHSA-2018:0515)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0515 advisory. - 389-ds-base: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c CVE-2017-15135 - 389-ds-base: remote...

RHEL 6 : kernel (RHSA-2018:0496)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0496 advisory. - hw: cpu: speculative execution bounds-check bypass CVE-2017-5753 Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 6 : kernel (RHSA-2018:0512)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0512 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: hw: cpu: speculative execution branch target...

CVE-2017-2628

curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVEGSSAPI define was meanwhile substituted by USEHTTPNEGOTIATE. This issue was introduced in RHEL 6.7 and affects RHEL 6 curl...

Oracle Linux 6 : dhcp (ELSA-2018-0469)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0469 advisory. - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 Tenable has extracted the preceding description block directly from the...