Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4089)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4089 advisory. - perf/hwbp: Simplify the perf-hwbp code, fix documentation Linus Torvalds Orabug: 27947608 CVE-2018-100199 - ALSA: usb-audio: Kill stray URB at exiting...

Oracle Linux 7 : java-1.7.0-openjdk (ELSA-2018-1278)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1278 advisory. 1:1.7.0.181-2.6.14.5.0.1 - Update DISTRONAME in specfile 1:1.7.0.181-2.6.14.5 - added depndence on latest c-j-c who do not have the incorrect jre-abrt...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4087)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4087 advisory. 4.1.12-124.14.3 - perf/hwbp: Simplify the perf-hwbp code, fix documentation Linus Torvalds Orabug: 27947602 CVE-2018-100199 Tenable has extracted the...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4088)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4088 advisory. - perf/hwbp: Simplify the perf-hwbp code, fix documentation Linus Torvalds Orabug: 27947612 CVE-2018-100199 - ALSA: usb-audio: Kill stray URB at exiting...

Oracle Linux 7 : corosync (ELSA-2018-1169)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1169 advisory. 2.4.3-2.1 - Resolves: rhbz1560467 - totemcrypto: Check length of the packet Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2018-1270)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1270 advisory. 1:1.7.0.181-2.6.14.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.181-2.6.14.1 - Fix invalid license 'LGPL+' should be LGPLv2+ for ECC code and add...

Oracle Linux 7 : pcs (ELSA-2018-1060)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1060 advisory. - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure - Fixed CVE-2018-1079 pcs: Privilege escalation via authoriz...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4084)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4084 advisory. - ext4: add validity checks for bitmap block numbers Theodore Ts'o Orabug: 27854373 CVE-2018-1093 CVE-2018-1093 - Input: gtco - fix potential...

Oracle Linux 7 : librelp (ELSA-2018-1223)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1223 advisory. - fixed CVE-2018-1000140 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 6 : librelp (ELSA-2018-1225)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1225 advisory. - fixed CVE-2018-1000140 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 7 : PackageKit (ELSA-2018-1224)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1224 advisory. - Fixes CVE-2018-1106 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested fo...

Oracle Linux 7 : patch (ELSA-2018-1200)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1200 advisory. 2.7.1-10 - Fixed Coverity reported issues 2.7.1-9 - Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands Tenable has extracted...

Oracle Linux 6 : patch (ELSA-2018-1199)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1199 advisory. 2.6-8 - Fixed year overflow detected in rpmdiff 2.6-7 - Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands Tenable has...

Installing updates or third party software on the ELM

As a general rule, you should not install software on your ELM. While there are some circumstances where it will work fine, it is likely to cause software dependency problems that will block App Layering updates. App Layering is very particular about the Linux software packages and versions...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2018-1188)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1188 advisory. 1:1.8.0.171-3.b10 - Cleanup from previous commit. - Resolves: rhbz1559766 1:1.8.0.171-2.b10 - Backported from fedora: aarch64BuildFailure.patch,...

Oracle Linux 7 : firefox (ELSA-2018-1099)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1099 advisory. 52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.7.3-1 - Update to 52.7.3 ESR Tenable has extracted the preceding...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4071 advisory. - net: cdcether: fix divide by 0 on bad descriptors Bjorn Mork Orabug: 27841392 CVE-2017-16649 - sysctl: Drop reference added by grabheader in...

Oracle Linux 7 : libvncserver (ELSA-2018-1055)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1055 advisory. 0.9.9-12 - Fix CVE-2018-7225 improper client cut text length sanitization bug 1548440 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : libvorbis (ELSA-2018-1058)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1058 advisory. 1.3.3-8.1 - Backport fix for CVE-2018-5146 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : kernel (ELSA-2018-1062)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1062 advisory. - acpi sbshc: remove raw pointer from printk message Baoquan He 1547009 CVE-2018-5750 - media v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixu...