Oracle Linux 6 : coreutils (ELSA-2017-0654)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0654 advisory. - su: deny killing other processes with root privileges CVE-2017-2616 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : gnutls (ELSA-2017-0574)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0574 advisory. - Added fixes for OpenPGP parsing issues CVE-2017-5337, CVE-2017-5336, CVE-2017-5335 Tenable has extracted the preceding description block directly fro...

Oracle Linux 6 : libguestfs (ELSA-2017-0564)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0564 advisory. 1:1.20.11-20 - inspection: fix detection of /usr in separate partition resolves: rhbz1388407 1:1.20.11-19 - libguestfs-java: bump the java Require to = 1.7.0,...

Oracle Linux 6 : samba4 (ELSA-2017-0744)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0744 advisory. - resolves: 1405358 - CVE-2016-2125 CVE-2016-2126 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 6 : curl (ELSA-2017-0847)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0847 advisory. 7.19.7-53 - treat Negotiate authentication as connection-oriented CVE-2017-2628 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 : bash (ELSA-2017-0725)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0725 advisory. - CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: 1396383 - CVE-2016-7543 - Fix for arbitrary code execution via...

Oracle Linux 6 : tigervnc (ELSA-2017-0630)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0630 advisory. 1.1.0-24 - Proper global init/deinit of GnuTLS Resolves: bz1418946 1.1.0-23 - Fix buffer overflow in FullFramePixelBuffer::fillRect Resolves: bz1416289...

Oracle Linux 6 : qemu-kvm (ELSA-2017-0621)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0621 advisory. - Resolves: bz1420487 EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrusbitbltcputovideo rhel-6.9 - Resolves...

Oracle Linux 6 : wireshark (ELSA-2017-0631)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0631 advisory. - segfault with CVE-2013-4075 capture - valgrind error with CVE-2015-3812 capture - Resolves: CVE-2013-4075 Tenable has extracted the preceding...

Oracle Linux 7 : icoutils (ELSA-2017-0837)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0837 advisory. 0.31.3-1 - Rebase to upstream version 0.31.3. - This version includes multiple security fixes CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-600...

Oracle Linux 7 : openjpeg (ELSA-2017-0838)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0838 advisory. - Revert previous changes in patch for CVE-2016-5159 - Add two more allocation checks to patch for CVE-2016-5159 Related: 1419772 - Fix CWE-825 errors ...

Oracle Linux 6 : openjpeg (ELSA-2017-0559)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0559 advisory. - Revert previous changes in patch for CVE-2016-5159 - Fix double free in patch for CVE-2016-5139 - Add two more allocation checks to patch for...

Oracle Linux 7 : firefox (ELSA-2017-0558)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2017-0558 advisory. 52.0-5.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.0-5 - Added fix for mozbz1348168/CVE-2017-5428 Tenable has extract...

Oracle Linux 6 : tomcat6 (ELSA-2017-0527)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0527 advisory. - Related: rhbz1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un- encoded characters - Related: rhbz1402664...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2017-0498)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0498 advisory. 45.8.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.8.0-1 - Update to 45.8.0 Tenable has...

Oracle Linux 7 : firefox (ELSA-2017-0461)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0461 advisory. 52.0-4.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.0-4 - Update to 52.0 ESR b4 52.0-3 - Added fix for...

Oracle Linux 5 / 6 : firefox (ELSA-2017-0459)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0459 advisory. 45.8.0-2.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.8.0-2 -...

Oracle Linux 5 : kvm (ELSA-2017-0454)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0454 advisory. - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch bz1421564 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : kernel (ELSA-2017-0386-1)

Description of changes: - 3.10.0-514.6.10.0.1.el7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update...

Oracle Linux 7 : ipa (ELSA-2017-0388)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0388 advisory. - Resolves: 1413137 CVE-2017-2590 ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands - ca: correctly authorise ca-del, ca-enable a...