Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9410)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9410 advisory. - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33135633 CVE-2021-33909 - net/mlx4: Fix EEPROM dump support Vladyslav...

Oracle Linux 7 : microcode_ctl (ELSA-2021-3028)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-3028 advisory. 2:2.1-73.11.0.1 - for Intel, do not trigger load if on-disk microcode is not an update Orabug: 30634727 - set earlymicrocode='no' in virtualized guests...

Oracle Linux 7 : olcne (ELSA-2021-9399)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9399 advisory. - Address Istio CVE's CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824 - Address CVE-2021-28683,...

Oracle Linux 7 : olcne (ELSA-2021-9397)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9397 advisory. - Address Istio CVE's CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824 istio - Address CVE-2021-28683,...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9395)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9395 advisory. - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33143006 CVE-2021-33909 - net/mlx4: Fix EEPROM dump support Vladysl...

Oracle Linux 7 : lasso (ELSA-2021-2989)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2989 advisory. - Related: 1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses - Related: 1963855 - CVE-2021-28091 lasso: XML...

Oracle Linux 7 : thunderbird (ELSA-2021-2881)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2881 advisory. 78.12.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.12.0-2 - Update to 78.12.0 build2 78.12.0-1 -...

Oracle Linux 7 : containerd (ELSA-2021-9373)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9373 advisory. - Address CVE-2021-32760 docker-cli - updated containerd minimum version to 1.4.8 to address CVE-2021-32760. docker-engine Tenable has extracted the preceding...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9371)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9371 advisory. 5.4.17-2102.203.6.el8uek - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33135632 CVE-2021-33909 Tenable has extracted the...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9368)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9368 advisory. 4.14.35-2047.505.4.3 - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33142065 CVE-2021-33909 Tenable has extracted the preceding...

Oracle Linux 7 : kernel (ELSA-2021-2725)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2725 advisory. - media: xirlinkcit: add missing descriptor sanity checks Mark Langsdorf 1826877 CVE-2020-11668 - Bluetooth: verify AMP hcichan before ampdestroy Gopal...

Oracle Linux 7 : java-11-openjdk (ELSA-2021-2784)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2784 advisory. 1:11.0.12.0.7-0.0.1 - link atomic for ix86 build 1:11.0.12.0.7-0 - Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2021-2845)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2845 advisory. 1:1.8.0.302.b08-0 - Update to aarch64-shenandoah-jdk8u302-b08 EA - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9370)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-9370 advisory. 4.14.35-2047.505.4.3.el7 - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33142065 CVE-2021-33909 Tenable has extracted the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9369)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9369 advisory. 4.1.12-124.52.5 - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33135634 CVE-2021-33909 Tenable has extracted the preceding...

kernel security and bug fix update

3.10.0-1160.36.2.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

Oracle Linux 7 : firefox (ELSA-2021-2741)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2741 advisory. 78.12.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9362)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9362 advisory. - bpf: Fix masking negation logic upon negative dst register Daniel Borkmann Orabug: 32911990 CVE-2021-31829 - Bluetooth: verify AMP hcichan before...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9363)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9363 advisory. - bpf: Fix masking negation logic upon negative dst register Daniel Borkmann Orabug: 32911990 CVE-2021-31829 - Bluetooth: verify AMP hcichan before...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9351)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9351 advisory. - Bluetooth: verify AMP hcichan before ampdestroy Archie Pusaka Orabug: 32912101 CVE-2021-33034 - bluetooth: eliminate the potential race condition whe...