Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4071 advisory. - net: cdcether: fix divide by 0 on bad descriptors Bjorn Mork Orabug: 27841392 CVE-2017-16649 - sysctl: Drop reference added by grabheader in...

Oracle Linux 7 : libvncserver (ELSA-2018-1055)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1055 advisory. 0.9.9-12 - Fix CVE-2018-7225 improper client cut text length sanitization bug 1548440 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : libvorbis (ELSA-2018-1058)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1058 advisory. 1.3.3-8.1 - Backport fix for CVE-2018-5146 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : kernel (ELSA-2018-1062)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1062 advisory. - acpi sbshc: remove raw pointer from printk message Baoquan He 1547009 CVE-2018-5750 - media v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixu...

Oracle Linux 7 : ntp (ELSA-2018-0855)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0855 advisory. - fix buffer overflow in datum refclock driver CVE-2017-6462 - fix crash with invalid unpeer command CVE-2017-6463 - fix potential crash with invalid...

Oracle Linux 7 : policycoreutils (ELSA-2018-0913)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0913 advisory. 2.5-22.0.1 - Lazy unmount private, shared entry Joe Jin orabug 12560705 2.5-22 - semanage: Fix fcontext help message 1499259 - semanage: Improve semanage-user.8...

Oracle Linux 7 : openssh (ELSA-2018-0980)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0980 advisory. - Fix for CVE-2017-15906 1517226 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 : openssl (ELSA-2018-0998)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0998 advisory. - fix CVE-2017-3737 - incorrect handling of fatal error state - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus Tenable ha...

Oracle Linux 7 : krb5 (ELSA-2018-0666)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0666 advisory. - Fix CVE-2017-7562 certauth eku bypass - Fix CVE-2017-11368 s4u2 request assertion failures Tenable has extracted the preceding description block...

Oracle Linux 7 : glibc (ELSA-2018-0805)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0805 advisory. - CVE-2018-1000001: Fix realpath buffer underflow 1534635 - CVE-2017-15670: glob: Fix one-byte overflow with GLOBTILDE 1504809 - CVE-2017-15804: glob:...

Oracle Linux 7 : gcc (ELSA-2018-0849)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0849 advisory. - fix incorrect codegen from rdseed intrinsic use 1482762, CVE-2017-11671 Tenable has extracted the preceding description block directly from the Oracle Linux...

kernel security, bug fix, and enhancement update

3.10.0-862.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-862 - netdrv i40e: Fix attach VF to VM issue Stefan Assmann 1528123 - netdrv ixgbevf:...

Oracle Linux 6 : firefox (ELSA-2018-1098)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1098 advisory. 52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update...

Oracle Linux 6 : python-paramiko (ELSA-2018-1124)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1124 advisory. - Add a fix for upstream tests for CVE-2018-7750 broken in previous. Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4062)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4062 advisory. - fork: fix incorrect fput of -exefile causing use-after-free Eric Biggers Orabug: 27290198 CVE-2017-17052 - KVM: x86: fix singlestepping over...

Oracle Linux 6 : thunderbird (ELSA-2018-0647)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0647 advisory. 52.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.7.0-1 - Update to 52.7.0 Tenable has extracted...

Oracle Linux 7 : kubernetes (ELSA-2018-4061)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4061 advisory. - Ensure that the runtime mounts RO volumes read-only CVE-2017-1002102 - Update Dashboard version to v1.8.3 CVE-2017-1002102 - Fix nested volume mounts...

Oracle Linux 6 : libvorbis (ELSA-2018-0649)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0649 advisory. - Backport fix for CVE-2018-5146 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 : slf4j (ELSA-2018-0592)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0592 advisory. 0:1.7.4-4 - Disallow EventData deserialization by default CVE-2018-8088 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 / 7 : firefox (ELSA-2018-0549)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0549 advisory. 52.7.2-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper upda...