Oracle Linux 7 : bash (ELSA-2017-1931)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1931 advisory. - CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: 1429838 - CVE-2016-7543: Fix for arbitrary code execution via...

Oracle Linux 7 : samba (ELSA-2017-1950)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1950 advisory. - resolves: 1450785 - Security fix for CVE-2017-7494 - related: 1430260 - Security fix for CVE-2017-2619 - resolves: 1430260 - Security fix for CVE-2017-2619...

Oracle Linux 7 : openssh (ELSA-2017-2029)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2029 advisory. 7.4p1-11 + 0.10.3-1 - Compiler warnings 1341754 7.4p1-10 + 0.10.3-1 - Add missing messages in FIPS mode 1341754 7.4p1-9 + 0.10.3-1 - Allow harmless...

Oracle Linux 7 : tigervnc / and / fltk (ELSA-2017-2000)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2000 advisory. - Delete underlying ssecurity in SSecurityVeNCrypt CCVE-2017-7392 Resolves: bz1439127 Prevent double free by crafted fences CVE-2017-7393 Resolves:...

Oracle Linux 7 : libtasn1 (ELSA-2017-1860)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1860 advisory. 4.10-1 - Updated to the 4.x branch 1360639 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : kernel (ELSA-2017-1842)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1842 advisory. - The doumount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAPSYSADMIN capability for doremountsb calls that chang...

Oracle Linux 7 : glibc (ELSA-2017-1916)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1916 advisory. - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime 1374658 - Fix CVE-2015-8778: Integer overflow in hcreate...

Security fix for the ALT Linux 7 package postgresql9.4 version 9.4.13-alt0.M70P.1

9.4.13-alt0.M70P.1 built Aug. 9, 2017 Alexei Takaseev in task 186876 Aug. 9, 2017 Alexei Takaseev - 9.4.13 - fix CVE-2017-7547...

Oracle Linux 7 : ghostscript (ELSA-2017-2180)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2180 advisory. - Security fix for CVE-2017-8291 updated to address SIGSEGV - Added security fix for CVE-2017-8291 bug 1446063 - Added security fix for CVE-2017-7207 bug 143435...

Oracle Linux 7 : qemu-kvm (ELSA-2017-1856)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1856 advisory. - Resolves: bz1451614 CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server rhel-7.4 - Resolves: bz1430060 CVE-2016-9603 qemu-kv...

Oracle Linux 7 : gnutls (ELSA-2017-2292)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2292 advisory. - Address crash in OCSP status request extension, by eliminating the unneeded parsing CVE-2017-7507, 1455828 Tenable has extracted the preceding...

Oracle Linux 7 : authconfig (ELSA-2017-2285)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2285 advisory. - fix typo in the patch for CVE-2017-7488 1441604 - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server 144160...

RedHat Update for GStreamer RHSA-2017:2060-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : postgresql (RHSA-2017:1983)

An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 7 : bash (RHSA-2017:1931)

An update for bash is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Low: Red Hat Bug Fix Advisory: dnsmasq bug fix and enhancement update

An update for dnsmasq is now available for Red Hat Enterprise Linux 7. The dnsmasq packages contain Dnsmasq, a lightweight DNS Domain Name Server forwarder and DHCP Dynamic Host Configuration Protocol server. For detailed information on changes in this release, see the Red Hat Enterprise Linux 7....

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3595)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3595 advisory. - ALSA: timer: Fix missing queue indices reset at SNDRVTIMERIOCTLSELECT Takashi Iwai Orabug: 26403952 CVE-2017-1000380 - ALSA: timer: Fix race...

Oracle Linux 7 : tomcat (ELSA-2017-1809)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1809 advisory. - Resolves: rhbz1441487 CVE-2017-5648 tomcat: Calls to application listeners did not use the appropriate facade object - Resolves: rhbz1441480...

CVE-2015-3149

The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack...

CVE-2015-3149

CVE-2015-3149 affects OpenJDK8 Hotspot as packaged in Red Hat Enterprise Linux 6 and 7. The vulnerability enables local users to write to arbitrary files via a symlink attack in the Hotspot component, indicating a local escalation risk. Root cause identified as a symlink-based write condition wit...