Oracle Linux 7 : qemu-kvm (ELSA-2017-1856)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1856 advisory. - Resolves: bz1451614 CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server rhel-7.4 - Resolves: bz1430060 CVE-2016-9603 qemu-kv...

Oracle Linux 7 : authconfig (ELSA-2017-2285)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2285 advisory. - fix typo in the patch for CVE-2017-7488 1441604 - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server 144160...

Oracle Linux 7 : gnutls (ELSA-2017-2292)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2292 advisory. - Address crash in OCSP status request extension, by eliminating the unneeded parsing CVE-2017-7507, 1455828 Tenable has extracted the preceding...

Oracle Linux 7 : glibc (ELSA-2017-1916)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1916 advisory. - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime 1374658 - Fix CVE-2015-8778: Integer overflow in hcreate...

python security and bug fix update

2.7.5-58.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-58 - Set stream to None in case an open fails. Resolves: rhbz1432003 2.7.5-57 - Fix implicit declaration warnings of functions added by patches 147 and 265 Resolves: rhbz1441237 2.7.5-56 - Fix shutil.makearchive...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3595)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3595 advisory. - ALSA: timer: Fix missing queue indices reset at SNDRVTIMERIOCTLSELECT Takashi Iwai Orabug: 26403952 CVE-2017-1000380 - ALSA: timer: Fix race...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3597)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3597 advisory. - HID: hid-cypress: validate length of report Greg Kroah-Hartman Orabug: 25891914 CVE-2017-7273 - udf: Remove repeated loads blocksize Jan Kara...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3596)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3596 advisory. kernel-uek 3.8.13-118.19.3 - posixacl: Clear SGID bit when setting file permissions Jan Kara Orabug: 25507344 CVE-2016-7097 CVE-2016-7097 Tenable has...

Oracle Linux 7 : tomcat (ELSA-2017-1809)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1809 advisory. - Resolves: rhbz1441487 CVE-2017-5648 tomcat: Calls to application listeners did not use the appropriate facade object - Resolves: rhbz1441480...

Oracle Linux 7 : graphite2 (ELSA-2017-1793)

From Red Hat Security Advisory 2017:1793 : An update for graphite2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2017-1789)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1789 advisory. 1:1.8.0.141-2.b16 - Update to aarch64-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves:...

Oracle Linux 6 : freeradius (ELSA-2017-1759)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1759 advisory. - Resolves: Bug1469115 CVE-2017-10979 freeradius: Out-of-bounds write in radcoalesce - Resolves: Bug1469118 CVE-2017-10978 freeradius: Out-of-bounds...

Oracle Linux 6 : kernel (ELSA-2017-1723)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1723 advisory. - mm enlarge stack guard gap Larry Woodman 1452729 1452730 CVE-2017-1000364 CVE-2017-1000366 - fs nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce...

Oracle Linux 6 : httpd (ELSA-2017-1721)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1721 advisory. - Related: 1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing Whitespace Defects - Resolves: 1463205 - CVE-2017-7668 httpd: apfindtoken buffer overread...

Oracle Linux 7 : bind (ELSA-2017-1680)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1680 advisory. - Fix CVE-2017-3142 and CVE-2017-3143 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 : bind (ELSA-2017-1679)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1679 advisory. - Fix CVE-2017-3142 and CVE-2017-3143 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : qemu-kvm (ELSA-2017-1681)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1681 advisory. 1.5.3-126.el73.10 - kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch bz1460179 - kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch bz1460179...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3589)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3589 advisory. - macsec: dynamically allocate space for sglist Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - macsec: avoid heap overflow in skbtosgvec Jason...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3590)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3590 advisory. - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366022 CVE-2017-7645 - HID: hid-cypress: validate length of report Greg Kroah-Hartm...

Oracle Linux 7 : kernel (ELSA-2017-1615-1) (Stack Clash)

Description of changes: - 3.10.0-514.26.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update...