Security fix for the ALT Linux 7 package postgresql9.5 version 9.5.12-alt0.M70P.1

9.5.12-alt0.M70P.1 built March 4, 2018 Alexei Takaseev in task 201191 March 2, 2018 Alexei Takaseev - 9.5.12 - Fix CVE-2018-1058...

Security fix for the ALT Linux 7 package postgresql10 version 10.3-alt0.M70P.1

10.3-alt0.M70P.1 built March 4, 2018 Alexei Takaseev in task 201191 March 2, 2018 Alexei Takaseev - 10.3 - Fix CVE-2018-1058...

Oracle Linux 7 : quagga (ELSA-2018-0377)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0377 advisory. - Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary cod...

Oracle Linux 7 : ruby (ELSA-2018-0378)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0378 advisory. - Add Psych.safeload ruby-2.1.0-there-should-be-only-one-exception.patch ruby-2.1.0-Adding-Psych.safeload.patch Related: CVE-2017-0903 - Disable Tokyo ...

RHEL 7 : ruby (RHSA-2018:0378)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0378 advisory. - ruby: Buffer underrun vulnerability in Kernel.sprintf CVE-2017-0898 - rubygems: Escape sequence in the summary field of gemspec...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4040)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4040 advisory. - gre: fix a possible skb leak Eric Dumazet Orabug: 26403972 CVE-2017-9074 - ipv6: Fix leak in ipv6gsosegment. David S. Miller Orabug: 26403972...

RHEL 7 : gcab (RHSA-2018:0350)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0350 advisory. The gcab package contains a utility for managing the Cabinet archives. It can list, extract, and create Microsoft cabinet .cab files. Security Fixes:...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2018-0349)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0349 advisory. 1:1.7.0.171-2.6.13.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.171-2.6.13.0 - Bump to 2.6.13 and u171b01. - Update...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4025)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4025 advisory. - dccp: CVE-2017-8824: use-after-free in DCCP code Mohamed Ghannam Orabug: 27290300 CVE-2017-8824 - ALSA: pcm: prevent UAF in sndpcminfo Robb Glass...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.19 (RHSA-2018:0268)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0268 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

Oracle Linux 7 : systemd (ELSA-2018-0260)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0260 advisory. 219-42.0.2.7 - fix netdev is missing for iscsi entry in /etc/fstab Orabug: 25897792 [email protected] - set 'RemoveIPC=no' in logind.conf as default for OL7...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4022)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4022 advisory. - x86: Add another set of MSR accessor functions Borislav Petkov Orabug: 27444923 CVE-2017-5753 - userns: prevent speculative execution Elena...

Oracle Linux 7 : dhcp (ELSA-2018-0158)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0158 advisory. 12:4.2.5-58.0.1.1 - Added oracle-errwarn-message.patch 12:4.2.5-58.1 - Resolves: 1523475 - Fix omapi socket descriptors leak Tenable has extracted the preceding...

CentOS 7 : nautilus (CESA-2018:0223)

An update for nautilus is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Oracle Linux 7 : kernel (ELSA-2018-0151)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0151 advisory. - powerpc spinlock: add gmb memory barrier Jon Masters 1519788 1519786 CVE-2017-5753 - powerpc Prevent Meltdown attack with L1-D$ flush Jon Masters...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.49-alt0.M70P.1

1:4.1.49-alt0.M70P.1 built Jan. 25, 2018 kernelbot in task 198490 Jan. 24, 2018 Kernel Bot - v4.1.49 Fixes: CVE-2017-0861, CVE-2017-1000407, CVE-2017-7184...

Oracle Linux 6 / 7 : firefox (ELSA-2018-0122)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0122 advisory. 52.6.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a...

Oracle Linux 7 : bind (ELSA-2018-0102)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0102 advisory. 32:9.9.4-51.2 - Fix CVE-2017-3145 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 7 : microcode_ctl (ELSA-2018-4018) (Spectre)

Description of changes: 2.1-22.5.0.3 - Revert Intel 20180108 microcode for CPUIDs: CVE-2017-5715 306c3 06-3c-03 rev 0x23, Haswell 306d4 06-3d-04 rev 0x28, Broadwell 306f2 06-3f-02 rev 0x3b, Haswell 306f4 06-3f-04 rev 0x10, Haswell 306e4 06-3e-04 rev 0x42a, Ivy Bridge 40651 06-45-01 rev 0x21,...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4017)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4017 advisory. - KVM: x86: Add memory barrier on vmcs field lookup Andrew Honig CVE-2017-5753 - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts Andrew Honig Orabug:...