Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4025)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4025 advisory. - dccp: CVE-2017-8824: use-after-free in DCCP code Mohamed Ghannam Orabug: 27290300 CVE-2017-8824 - ALSA: pcm: prevent UAF in sndpcminfo Robb Glass...

Oracle Linux 7 : systemd (ELSA-2018-0260)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0260 advisory. 219-42.0.2.7 - fix netdev is missing for iscsi entry in /etc/fstab Orabug: 25897792 [email protected] - set 'RemoveIPC=no' in logind.conf as default for OL7...

Oracle Linux 6 / 7 : thunderbird (ELSA-2018-0262)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0262 advisory. 52.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.6.0-1 - Update to 52.6.0 Tenable has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4022)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4022 advisory. - x86: Add another set of MSR accessor functions Borislav Petkov Orabug: 27444923 CVE-2017-5753 - userns: prevent speculative execution Elena...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.20.2 - x86: Add another set of MSR accessor functions Borislav Petkov Orabug: 27444923 CVE-2017-5753 - userns: prevent speculative execution Elena Reshetova Orabug: 27444923 CVE-2017-5753 - udf: prevent speculative execution Elena Reshetova Orabug: 27444923 CVE-2017-5753 - f...

Oracle Linux 7 : dhcp (ELSA-2018-0158)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0158 advisory. 12:4.2.5-58.0.1.1 - Added oracle-errwarn-message.patch 12:4.2.5-58.1 - Resolves: 1523475 - Fix omapi socket descriptors leak Tenable has extracted the preceding...

Oracle Linux 7 : 389-ds-base (ELSA-2018-0163)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0163 advisory. 1.3.6.1-26 - Bump version to 1.3.6.1-25 - Resolves: Bug 1534430 - crash in slapifiltersprintf 1.3.6.1-25 - Bump version to 1.3.6.1-25 - Resolves: Bug 1526928 -...

Oracle Linux 7 : nautilus (ELSA-2018-0223)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0223 advisory. 3.22.3-4 - Fix desktop files security issue upstream bugzilla.gnome.org/777991 Resolves: 1490949 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : kernel (ELSA-2018-0151)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0151 advisory. - powerpc spinlock: add gmb memory barrier Jon Masters 1519788 1519786 CVE-2017-5753 - powerpc Prevent Meltdown attack with L1-D$ flush Jon Masters...

Oracle Linux 6 / 7 : firefox (ELSA-2018-0122)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0122 advisory. 52.6.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4020)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4020 advisory. - x86: Use PREDCMD MSR when ibpb is enabled Konrad Rzeszutek Wilk Orabug: 27369777 CVE-2017-5715 CVE-2017-5753 - x86/spec: Dont print the Missing...

kernel security and bug fix update

3.10.0-693.17.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-693.17.1 - s390 locking/barriers: remove old gmb macro definition Denys Vlasenko...

Oracle Linux 6 : microcode_ctl (ELSA-2018-4019) (Spectre)

Description of changes: 1:1.17-25.4.0.2 - Revert: early microcode load to allow updating Broadwell model 79 - Revert: Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Revert: Run dracut upon microcode update - Revert updated Intel 20180108 microcode for CPUIDs: CVE-2017-5715...

Oracle Linux 7 : bind (ELSA-2018-0102)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0102 advisory. 32:9.9.4-51.2 - Fix CVE-2017-3145 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 7 : microcode_ctl (ELSA-2018-4018) (Spectre)

Description of changes: 2.1-22.5.0.3 - Revert Intel 20180108 microcode for CPUIDs: CVE-2017-5715 306c3 06-3c-03 rev 0x23, Haswell 306d4 06-3d-04 rev 0x28, Broadwell 306f2 06-3f-02 rev 0x3b, Haswell 306f4 06-3f-04 rev 0x10, Haswell 306e4 06-3e-04 rev 0x42a, Ivy Bridge 40651 06-45-01 rev 0x21,...

Oracle Linux 6 : bind (ELSA-2018-0101)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0101 advisory. 32:9.8.2-0.62.rc1.5 - Fix CVE-2017-3145 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4017)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4017 advisory. - KVM: x86: Add memory barrier on vmcs field lookup Andrew Honig CVE-2017-5753 - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts Andrew Honig Orabug:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4011) (Meltdown) (Spectre)

Description of changes: 4.1.12-112.14.11.el7uek - x86/pti/efi: broken conversion from efi to kernel page table Pavel Tatashin Orabug: 27363926 Orabug: 27352353 CVE-2017-5754 - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT redux Konrad Rzeszutek Wilk Orabug: 27369994 -...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4006)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4006 advisory. - x86/ia32: save and clear registers on syscall. Jamie Iles Orabug: 27355759 CVE-2017-5754 - pti: Rename X86FEATUREKAISER to X86FEATUREPTI Pavel Tatashin...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4004)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4004 advisory. - kABI: Revert kABI: Make the bootcpudata look normal Konrad Rzeszutek Wilk CVE-2017-5715 - userns: prevent speculative execution Elena Reshetova...