Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3618)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3618 advisory. - Btrfs: fix truncation of compressed and inlined extents Divya Indi Orabug: 22307286 CVE-2015-8374 - Btrfs: fix file corruption and data loss afte...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3619)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3619 advisory. - netfilter: xtables: make sure e-nextoffset covers remaining blob size Florian Westphal Orabug: 24682076 CVE-2016-4997 CVE-2016-4998 - netfilter:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3617)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3617 advisory. - Btrfs: fix truncation of compressed and inlined extents Ashish Samant Orabug: 22307285 CVE-2015-8374 - Btrfs: fix file corruption and data loss...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2016-1912)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2016-1912 advisory. 45.4.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.4.0-...

Oracle Linux 7 : kernel (ELSA-2016-1847)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1847 advisory. - net tcp: enable per-socket rate limiting of all 'challenge acks' Florian Westphal 1355603 1355605 CVE-2016-5696 - net tcp: uninline tcpoowratelimited...

kernel security, bug fix, and enhancement update

3.10.0-327.36.1.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.36.1 - x86 Use ptenone to test for empty PTE Larry Woodman 1363860 1347159 - x86 Disallow running with 32-bit PTEs to work around erratum Larry Woodman 1363860 1347159 - x86 Ignore A/D bits in pte/pmd/pudnone Alexander...

Oracle Linux 6 : ntp (ELSA-2016-3613)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3613 advisory. 4.2.6p5-10.0.1.el68.1 - add disable monitor to default ntp.conf CVE-2013-5211 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : libarchive (ELSA-2016-1844)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1844 advisory. - Fixes variation of CVE-2016-5418: Hard links could include '..' in their path. - Fixes CVE-2016-5418: Archive Entry with type 1 hardlink causes file...

Oracle Linux 7 : ntp (ELSA-2016-3612)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3612 advisory. 4.2.6p5-22.0.1.el72.2 - add disable monitor to default ntp.conf CVE-2013-5211 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 6 : libarchive (ELSA-2016-1850)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1850 advisory. - Fixes variation of CVE-2016-5418: Hard links could include '..' in their path. - Fixes CVE-2016-5418: Archive Entry with type 1 hardlink causes file...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-1809)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-1809 advisory. 45.3.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.3.0-1 - Update to 45.3.0 Tenable has extracted t...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3596)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3596 advisory. - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24402831 CVE-2016-4470 - vfs: add vfsselectinode helper Miklos Szeredi Orabug:...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2016-1776)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1776 advisory. 1:1.6.0.40-1.13.12.4.0.1 - Add oracle-enterprise.patch 1:1.6.0.40-1.13.12.4 - Bump source tarballs to try and really fix TCK failures this time...

Oracle Linux 6 : kernel (ELSA-2016-1664)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1664 advisory. - net tcp: make challenge acks less predictable Florian Westphal 1355606 1355607 CVE-2016-5696 Tenable has extracted the preceding description block directly fr...

Oracle Linux 6 / 7 : python (ELSA-2016-1626)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1626 advisory. - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359161 - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack rhbz1303647 Raise...

Oracle Linux 7 : kernel (ELSA-2016-1633)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1633 advisory. - net tcp: enable per-socket rate limiting of all 'challenge acks' Florian Westphal 1355603 1355605 CVE-2016-5696 - net tcp: uninline tcpoowratelimited Florian...

python security update

2.6.6-66.0.1 - Add Oracle Linux distribution in platform.py orabug 21288328 Keshav Sharma 2.6.6-66 - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359161 2.6.6-65 - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack rhbz1303647 Raise an error when STARTTLS fails upstream pat...

kernel security and bug fix update

3.10.0-327.28.3.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.28.3 - net tcp: enable per-socket rate limiting of all 'challenge acks' Florian Westphal 1355603 1355605 CVE-2016-5696 - net tcp: uninline tcpoowratelimited Florian Westphal 1355603 1355605 CVE-2016-5696 - net tcp: make...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3595)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3595 advisory. - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010012 Orabug: 2401010 CVE-2016-5696 Tenable has extracted the preceding description bloc...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3594)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3594 advisory. kernel-uek 4.1.12-37.6.3 - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010103 Orabug: 2401010 CVE-2016-5696 Tenable has extracted the...