Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3516)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3516 advisory. - vfs: read filehandle only once in handletopath Sasha Levin Orabug: 25388709 CVE-2015-1420 - USB: usbfs: fix potential infoleak in devio Kangjie L...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3514)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3514 advisory. - vfio/pci: Fix integer overflows, bitmask check Vlad Tsyrklevich Orabug: 25164094 CVE-2016-9083 CVE-2016-9084 - Don't feed anything but regular...

Oracle Linux 6 / 7 : ntp (ELSA-2017-0252)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0252 advisory. - don't limit rate of packets from sources CVE-2016-7426 - don't change interface from received packets CVE-2016-7429 - fix calculation of root...

Oracle Linux 7 : spice (ELSA-2017-0254)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0254 advisory. - Fix buffer overflow in mainchannelallocmsgrcvbuf when reading large messages. Resolves: CVE-2016-9577 Tenable has extracted the preceding description...

Oracle Linux 6 : spice-server (ELSA-2017-0253)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0253 advisory. - Fix buffer overflow in mainchannelallocmsgrcvbuf when reading large messages. Resolves: CVE-2016-9577 Tenable has extracted the preceding description...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2017-0238)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0238 advisory. 45.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.7.0-1 - Update to 45.7.0 Tenable has...

Oracle Linux 6 / 7 : libtiff (ELSA-2017-0225)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0225 advisory. - Fix patch for CVE-2016-5652 - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540 - CVE-2016-5652 Tenable has...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2017-0190)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0190 advisory. 45.7.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.7.0-...

Oracle Linux 7 : squid (ELSA-2017-0182)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0182 advisory. 7:3.5.20-2.2 - Resolves: 1412735 - CVE-2016-10002 squid: Information disclosure in HTTP request processing Tenable has extracted the preceding description block...

Oracle Linux 6 : mysql (ELSA-2017-0184)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0184 advisory. 5.1.73-8.0.1 - fix date in the test 5.1.73-8 - Fix CVE-2016-6662 and CVE-2016-6663 Resolves: 1397309 Tenable has extracted the preceding description...

Oracle Linux 6 : squid34 (ELSA-2017-0183)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2017-0183 advisory. 7:3.4.14-9.4 - Resolves: 1412733 - CVE-2016-10002 squid34: squid: Information disclosure in HTTP request processing Tenable has extracted the preceding...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2017-0180)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0180 advisory. 1:1.8.0.121-0.b13 - Update to aarch64-jdk8u121-b13. - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. -...

Oracle Linux 5 / 6 : bind (ELSA-2017-0063)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0063 advisory. - Fix CVE-2016-9147 ISC change 4510 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 / 7 : docker-engine / docker-engine-selinux (ELSA-2017-3511)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3511 advisory. - Fix runC privilege escalation CVE-2016-9962 - Fix ambient capability usage in containers CVE-2016-8867 27610 Tenable has extracted the preceding descripti...

Oracle Linux 5 : bind97 (ELSA-2017-0064)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0064 advisory. 32:9.7.0-21.P2.10 - Fix CVE-2016-9147 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 7 : kernel (ELSA-2017-0086)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0086 advisory. - net sctp: validate chunk len before actually using it Hangbin Liu 1399458 1399459 CVE-2016-9555 - net sctp: rename WORDTRUNC/ROUND macros Hangbin Liu...

Oracle Linux 7 : bind (ELSA-2017-0062)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0062 advisory. - Fix CVE-2016-9131 ISC change 4508 - Fix CVE-2016-9147 ISC change 4510 - Fix regression introduced by CVE-2016-8864 ISC change 4530 Tenable has...

Oracle Linux 7 : qemu-kvm (ELSA-2017-0083)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0083 advisory. - Resolves: bz1398217 CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in netchecksumcalculate rhel-7.3.z Tenable has extracted the preceding description...

kernel security, bug fix, and enhancement update

3.10.0-514.6.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-514.6.1 - net sctp: validate chunk len before actually using it Hangbin Liu...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3509)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3509 advisory. - net: avoid signed overflows for SOSND|RCVBUFFORCE Eric Dumazet Orabug: 25203623 CVE-2016-9793 - tcp: fix use after free in tcpxmitretransmitqueue...