Oracle Linux 7 : mercurial (ELSA-2017-2489)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2489 advisory. 2.6.2-8 - Fix CVE-2017-1000115 and CVE-2017-1000116 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : kernel (ELSA-2017-2473-1)

Description of changes: 3.10.0-693.1.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update x509.genkey bug 24817676 3.10.0-693.1.1 - fs dentry name snapshots Miklos Szeredi...

Oracle Linux 7 : git (ELSA-2017-2484)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2484 advisory. 1.8.3.1-12 - prevent command injection via malicious ssh URLs Resolves: CVE-2017-1000117 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : httpd (ELSA-2017-2478)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2478 advisory. - Resolves: 1463194 - CVE-2017-3167 httpd: apgetbasicauthpw authentication bypass - Resolves: 1463197 - CVE-2017-3169 httpd: modssl NULL pointer...

Oracle Linux 7 : subversion (ELSA-2017-2480)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2480 advisory. 1.7.14-11 - add security fix for CVE-2017-9800 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : httpd (ELSA-2017-2479)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2479 advisory. - Resolves: 1463194 - CVE-2017-3167 httpd: apgetbasicauthpw authentication bypass - Resolves: 1463197 - CVE-2017-3169 httpd: modssl NULL pointer...

Oracle Linux 7 : kernel (ELSA-2017-2473)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2473 advisory. - fs dentry name snapshots Miklos Szeredi 1471131 1470403 CVE-2017-7533 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : spice (ELSA-2017-2471)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2471 advisory. - Redo build properly versioned as a zstream build Related: CVE-2017-7506 Tenable has extracted the preceding description block directly from the Oracle Linux...

kernel security and bug fix update

3.10.0-693.1.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 3.10.0-693.1.1.el7.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update...

kernel security and bug fix update

3.10.0-693.1.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-693.1.1 - fs dentry name snapshots Miklos Szeredi 1471131 1470403 CVE-2017-7533 -...

Oracle Linux 6 / 7 : firefox (ELSA-2017-2456)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2456 advisory. 52.3.0-3.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a...

Oracle Linux 7 : libsoup (ELSA-2017-2459)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2459 advisory. 2.56.0-4 - Fix chunked decoding buffer overrun CVE-2017-2885 rh 1479322 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2017-2424)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2424 advisory. 1:1.7.0.151-2.6.11.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.151-2.6.11.0 - Bump to 2.6.11 and u151b00. - Update...

Oracle Linux 7 : golang (ELSA-2017-1859)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1859 advisory. - fix CVE-2017-8932 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 7 : qemu-kvm (ELSA-2017-2445)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2445 advisory. 1.5.3-141.el74.1 - kvm-qemu-nbd-Ignore-SIGPIPE.patch bz1468107 - Resolves: bz1468107 CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon...

Oracle Linux 7 : X.org / X11 / libraries (ELSA-2017-1865)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1865 advisory. - Use libbsd for randoms CVE-2017-2626, rhbz1427715 - Use libbsd for randoms CVE-2017-2625, rhbz1427716 - fixes CVE-2016-5407 - fixes CVE-2016-7953...

Oracle Linux 7 : evince (ELSA-2017-2388)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2388 advisory. 3.22.1-5.2 - Related: 1469528 ensure .desktop file is still valid 3.22.1-5.1 + Fix arbitrary code execution via filename in tar-compressed comics archive -...

Oracle Linux 7 : freeradius (ELSA-2017-2389)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2389 advisory. - Related: Bug1469414 CVE-2017-10984 freeradius: Out-of-bounds write in data2vpwimax - Resolves: Bug1469409 CVE-2017-10978 freeradius: Out-of-bounds...

Oracle Linux 7 : log4j (ELSA-2017-2423)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2423 advisory. 0:1.2.17-16 - Fix socket receiver deserialization vulnerability - Resolves: CVE-2017-5645 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : pki-core (ELSA-2017-2335)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2335 advisory. - Resolves CVE-2017-7537 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...