RHEL 6 : qemu-kvm (RHSA-2018:0024) (Spectre)

An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 6 : kernel (RHSA-2018:0008) (Meltdown) (Spectre)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 6 : MRG (RHSA-2017:3493)

This is the 6-month notification for the retirement of Red Hat Enterprise MRG Version 2 for Red Hat Enterprise Linux 6. This notification applies only to those customers subscribed to Red Hat Enterprise MRG Version 2 for Red Hat Enterprise Linux 6. In accordance with the Red Hat Enterprise MRG Li...

RHEL 6 : java-1.8.0-ibm (RHSA-2017:3453)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3453 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3659)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3659 advisory. - net: qmiwwan: fix divide by 0 on bad descriptors Bjorn Mork Orabug: 27215221 CVE-2017-16650 - mm, thp: Do not make page table dirty unconditionally in...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3657)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3657 advisory. - mm: Tighten x86 /dev/mem with zeroing reads Kees Cook Orabug: 26675925 CVE-2017-7889 - more biomapuseriov leak fixes Al Viro Orabug: 27069042...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3651)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3651 advisory. - mm, thp: Do not make page table dirty unconditionally in followtranshugepmd Kirill A. Shutemov Orabug: 27200879 CVE-2017-1000405 - fix unbalanced...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3658)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3658 advisory. - ping: implement proper locking Eric Dumazet Orabug: 26540288 CVE-2017-2671 - mm: Tighten x86 /dev/mem with zeroing reads Kees Cook Orabug: 266759...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2017-3392)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3392 advisory. 1:1.7.0.161-2.6.12.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.161-2.6.12.0 - Remove superfluous %1 from policy JAR file path. - Resolves:...

PT-2017-13877 · Red Hat +1 · Rhel +2

Name of the Vulnerable Software and Affected Versions: RHEL versions 6 and 7 Description: A non-privileged user can crash a system by mounting a fuse filesystem and exploiting an issue related to file hole punching that does not end aligned to a page boundary. Recommendations: For RHEL version 6,...

Oracle Linux 6 / 7 : firefox (ELSA-2017-3382)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2017-3382 advisory. 52.5.1-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper upda...

Oracle Linux 6 / 7 : apr (ELSA-2017-3270)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3270 advisory. 1.3.9-5.1 - Resolves: 1507346 - CVE-2017-12613 apr: Out-of-bounds array deref in aprtimeexp functions Tenable has extracted the preceding description block...

Oracle Linux 6 : kernel (ELSA-2017-3200)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3200 advisory. - net packet: fix tpreserve race in packetsetring Stefano Brivio 1481941 1481943 CVE-2017-1000111 - net packet: fix overflow in check for tpframenr...

RHEL 6 : kernel (RHSA-2017:3200)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3200 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A race condition issue leading to a...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3640)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3640 advisory. - selinux: fix off-by-one in setprocattr Stephen Smalley Orabug: 27001717 CVE-2017-2618 CVE-2017-2618 CVE-2017-2618 - sysctl: Drop reference added ...

RHEL 6 : httpd (RHSA-2017:3195)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3195 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: It was discovered that...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3636)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3636 advisory. - char: lp: fix possible integer overflow in lpsetup Willy Tarreau Orabug: 26403940 CVE-2017-1000363 - ALSA: timer: Fix missing queue indices reset...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3637)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3637 advisory. - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143563 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3635)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3635 advisory. - scsi: scsitransportiscsi: fix the issue that iscsiifrx doesn't parse nlmsg properly Xin Long Orabug: 26988633 CVE-2017-14489 - ipv6: avoid overfl...

Oracle Linux 6 : tomcat6 (ELSA-2017-3080)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3080 advisory. - Resolves: rhbz1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws - Resolves: rhbz1461292 CVE-2017-5664 tomcat6: tomcat: Security constraine...