Oracle Linux 7 : openssl (ELSA-2018-4249)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4249 advisory. - Oracle bug 28672370: backport CVE-2018-0732 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : spamassassin (ELSA-2018-2916)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2916 advisory. - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for Tenab...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4242)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4242 advisory. - cdrom: Fix info leak/OOB read in cdromioctldrivestatus Scott Bauer Orabug: 28664499 CVE-2018-16658 - ACPICA: acpi: acpica: fix acpi operand cache lea...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4244)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4244 advisory. - mm: get rid of vmacacheflushall entirely Linus Torvalds Orabug: 28701016 CVE-2018-17182 Tenable has extracted the preceding description block directly fro...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4245)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4245 advisory. - rds: CVE-2018-7492: Fix NULL pointer dereference in rdsrdmamap Hakon Bugge Orabug: 28552792 CVE-2018-7492 - cdrom: Fix info leak/OOB read in...

Oracle Linux 6 : nss (ELSA-2018-2898)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2898 advisory. - Backport upstream fix for CVE-2018-12384 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 : kernel (ELSA-2018-2846)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2846 advisory. - fs exec: Limit arg stack to at most 75 of STKLIM Yauheni Kaliuta 1625976 CVE-2018-14634 - fs exec.c: account for argv/envp pointers Yauheni Kaliuta...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4234)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4234 advisory. 2.6.39-400.301.2 - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28710024 CVE-2018-14634 Tenable has extracted the preceding description...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4233)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4233 advisory. kernel-uek 3.8.13-118.24.3 - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28710010 CVE-2018-14634 Tenable has extracted the preceding...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4230)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4230 advisory. 4.1.12-124.19.6 - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28709994 CVE-2018-14634 Tenable has extracted the preceding description...

Oracle Linux 7 : firefox (ELSA-2018-2835)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2835 advisory. 60.2.1-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 60.2.1-1 - Update to 60.2.1 ESR Tenable has extracted the...

Oracle Linux 7 : kernel (ELSA-2018-2748)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2748 advisory. - fs exec: Limit arg stack to at most 75 of STKLIM Yauheni Kaliuta 1625980 1625991 CVE-2018-14634 - fs exec: account for argv/envp pointers Yauheni Kaliuta...

Oracle Linux 7 : nss (ELSA-2018-2768)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2768 advisory. - Backport upstream fix for CVE-2018-12384 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : flatpak (ELSA-2018-2766)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2766 advisory. 0.8.8-4 - Add patch for CVE-2018-6560 1547376 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : 389-ds-base (ELSA-2018-2757)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2757 advisory. 1.3.7.5-28 - Bump version to 1.3.7.5-28 - Resolves: Bug 1628676 - 389-ds-base: race condition on reference counter leads to DoS using persistent search...

Oracle Linux 6 : openssl (ELSA-2018-4228)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4228 advisory. 1.0.1e-57.0.5 - Merge upstream patch to fix CVE-2018-0739 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4227)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4227 advisory. - nsfs: mark dentry with DCACHERCUACCESS Cong Wang Orabug: 28576290 CVE-2018-5873 - cdrom: Fix info leak/OOB read in cdromioctldrivestatus Scott...

kernel security and bug fix update

3.10.0-862.14.4.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-862.14.4 - scsi Revert: lpfc: Fix port initialization failure Radomir Vrbovsky...

Oracle Linux 6 : mod_perl (ELSA-2018-2737)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2737 advisory. 2.0.4-12 - Fix CVE-2011-2767 arbitrary Perl code execution in the context of the user account via a user-owned .htaccess bug 1626272 Tenable has extracted the...

Oracle Linux 7 : spice / and / spice-gtk (ELSA-2018-2731)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2731 advisory. spice 0.14.0-2.0.2 - add arm suppport 0.14.0-2.5 - Fix flexible array buffer overflow Resolves: rhbz1596008 spice-gtk 0.34-3.2 - Fix flexible array buffer...