Oracle Linux 7 : wget (ELSA-2016-2587)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2587 advisory. - Fix CVE-2016-4971 1345778 - Added support for non-ASCII URLs Related: CVE-2016-4971 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : postgresql (ELSA-2016-2606)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2606 advisory. 9.2.18-1 - update to 9.2.18 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-18.html...

Oracle Linux 7 : gimp (ELSA-2016-2589)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2589 advisory. - avoid buffer overflows in file-xwd plug-in CVE-2013-1913, CVE-2013-1978 gimp-help Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 7 : firewalld (ELSA-2016-2597)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2597 advisory. - Fixed CVE-2016-5410 RHBZ1359296 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 7 : mod_nss (ELSA-2016-2602)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2602 advisory. - OpenSSL ciphers stopped parsing at +, CVE-2016-3099 1323913 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : squid (ELSA-2016-2600)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2600 advisory. - Resolves: 1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572 CVE-2016-3948 squid: various flaws - Related: 1334509 - CVE-2016-4553...

Oracle Linux 7 : glibc (ELSA-2016-2573)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2573 advisory. - CVE-2016-3075: Stack overflow in nssdnsgetnetbynamer 1321993 - Fix CVE-2015-7547: getaddrinfo stack-based buffer overflow 1296031. Tenable has extracted the...

Oracle Linux 7 : fontconfig (ELSA-2016-2601)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2601 advisory. - CVE-2016-5384: Validate offsets in cache files properly. 1355930 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : krb5 (ELSA-2016-2591)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2591 advisory. - Fix CVE-2016-3120 - Fix CVE-2016-3119 LDAP NULL dereference Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : libreswan (ELSA-2016-2603)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2603 advisory. - Resolves: rhbz1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack Tenable has extracted the preceding description block...

Oracle Linux 7 : dhcp (ELSA-2016-2590)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2590 advisory. - unclosed TCP connections to OMAPI or failover ports can cause DoS CVE-2016-2774 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : 389-ds-base (ELSA-2016-2594)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2594 advisory. - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1350799 - CVE-2016-499...

Oracle Linux 7 : resteasy-base (ELSA-2016-2604)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2604 advisory. 3.0.6-4 - Resolves: rhbz1378619 - disable SerializerProvider by default 3.0.6-3 - Resolves: rhbz1357624 - fail to build with java 8 3.0.6-2 - Resolves:...

Oracle Linux 7 : systemd (ELSA-2016-2610)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2610 advisory. 219-30.0.1.3 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - ad...

Oracle Linux 7 : php (ELSA-2016-2598)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2598 advisory. - bz2: fix improper error handling in bzread CVE-2016-5399 - gd: fix integer overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 - gd: fi...

Oracle Linux 7 : libvirt (ELSA-2016-2577)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2577 advisory. 2.0.0-10 - virtlogd: Don't stop or restart along with libvirtd rhbz1372576 2.0.0-9 - Add helper for removing transient definition rhbz1368774 - qemu:...

Oracle Linux 7 : ntp (ELSA-2016-2583)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2583 advisory. - add disable monitor to default ntp.conf CVE-2013-5211 - don't allow spoofed packet to enable symmetric interleaved mode CVE-2016-1548 - check mode of...

Oracle Linux 7 : poppler (ELSA-2016-2580)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2580 advisory. 0.26.5-16 - Fix crash in Splash - Resolves: 1299492 0.26.5-15 - Check array length - Resolves: 1299506 0.26.5-14 - Show correct glyph or none instead of 'fi' -...

Oracle Linux 7 : openssh (ELSA-2016-2588)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2588 advisory. - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1329191 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : curl (ELSA-2016-2575)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2575 advisory. - fix incorrect use of a previously loaded certificate from file related to CVE-2016-5420 - acknowledge the --no-sessionid/CURLOPTSSLSESSIONIDCACHE...