Oracle Linux 7 : mariadb (ELSA-2016-1602)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1602 advisory. 1:5.5.50-1 - Rebase to 5.5.50 Resolves: 1359628 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : php (ELSA-2016-1609)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1609 advisory. 5.3.3-48 - don't set environmental variable based on user supplied Proxy request header CVE-2016-5385 Tenable has extracted the preceding description block...

Oracle Linux 7 : qemu-kvm (ELSA-2016-1606)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1606 advisory. - Resolves: bz1358996 CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsiaioioctl rhel-7.2.z - Resolves: bz1359728 EMBARGOED...

Oracle Linux 7 : php (ELSA-2016-1613)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1613 advisory. - don't set environmental variable based on user supplied Proxy request header CVE-2016-5385 Tenable has extracted the preceding description block directly from...

Oracle Linux 6 : qemu-kvm (ELSA-2016-1585)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1585 advisory. - Resolves: bz1359724 EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS rhel-6.8.z - Resolves:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3593)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3593 advisory. - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393865 CVE-2016-4470 Tenable has extracted the preceding description block directl...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3592)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3592 advisory. 2.6.39-400.283.2 - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393863 CVE-2016-4470 Tenable has extracted the preceding description block...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3591)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3591 advisory. kernel-uek 3.8.13-118.9.2 - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393864 CVE-2016-4470 Tenable has extracted the preceding...

Oracle Linux 7 : libtiff (ELSA-2016-1546)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1546 advisory. - Add patches for CVEs: CVE-2015-7554, CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2015-8784 - Update patches for...

Oracle Linux 7 : golang (ELSA-2016-1538)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1538 advisory. - Resolves: rhbz1358278 - CVE-2016-5386 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 7 : kernel (ELSA-2016-1539)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1539 advisory. - security keys: potential uninitialized variable David Howells 1345935 1341352 CVE-2016-4470 - infiniband security: Restrict use of the write interfac...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3589)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3589 advisory. - atl2: Disable unimplemented scatter/gather feature Ben Hutchings Orabug: 23703990 CVE-2016-2117 Tenable has extracted the preceding description block...

kernel security and bug fix update

3.10.0-327.28.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.28.2 - net bridge: include in6.h in ifbridge.h for struct in6addr Jiri Benc 1331285 1268057 - net inet: defines IPPROTO needed for module alias generation Jiri Benc 1331285 1268057 - net sync some IP headers with glibc Jir...

Oracle Linux 6 / 7 : kernel-uek (ELSA-2016-3587)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3587 advisory. - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3588)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3588 advisory. kernel-uek 3.8.13-118.9.1 - mlx4: Increase SYNCTPT command timeout Mukesh Kacker Orabug: 22895790 - neigh: do not modify unlinked entries Julian Anastasov...

Oracle Linux 5 / 6 / 7 : java-1.7.0-openjdk (ELSA-2016-1504)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1504 advisory. 1:1.7.0.111-2.6.7.1.0.1 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.111-2.6.7.1 - Bump to jdk7u111 b01 to fix TCK...

Oracle Linux 6 : samba4 (ELSA-2016-1487)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1487 advisory. 4.2.10-7 - resolves: 1351957 - Fix CVE-2016-2119 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

java-1.7.0-openjdk security update

1:1.7.0.111-2.6.7.1.0.1 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.111-2.6.7.1 - Bump to jdk7u111 b01 to fix TCK regressions 7081817 & 8162344 - Resolves: rhbz1350038 1:1.7.0.111-2.6.7.0 - Bump to 2.6.7 and u111b00. - Update SystemTap bundle with fix for...

Oracle Linux 7 : samba (ELSA-2016-1486)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1486 advisory. - resolves: 1351960 - Fix CVE-2016-2119 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2016-1458)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1458 advisory. 1:1.8.0.101-3.b13 - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz1350034 1:1.8.0.101-2.b13 - Add...