Oracle Linux 6 : qemu-kvm (ELSA-2016-1585)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1585 advisory. - Resolves: bz1359724 EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS rhel-6.8.z - Resolves:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3593)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3593 advisory. - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393865 CVE-2016-4470 Tenable has extracted the preceding description block directl...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3592)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3592 advisory. 2.6.39-400.283.2 - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393863 CVE-2016-4470 Tenable has extracted the preceding description block...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3591)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3591 advisory. kernel-uek 3.8.13-118.9.2 - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393864 CVE-2016-4470 Tenable has extracted the preceding...

Oracle Linux 7 : libtiff (ELSA-2016-1546)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1546 advisory. - Add patches for CVEs: CVE-2015-7554, CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2015-8784 - Update patches for...

Oracle Linux 7 : golang (ELSA-2016-1538)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1538 advisory. - Resolves: rhbz1358278 - CVE-2016-5386 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 7 : kernel (ELSA-2016-1539)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1539 advisory. - security keys: potential uninitialized variable David Howells 1345935 1341352 CVE-2016-4470 - infiniband security: Restrict use of the write interfac...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3589)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3589 advisory. - atl2: Disable unimplemented scatter/gather feature Ben Hutchings Orabug: 23703990 CVE-2016-2117 Tenable has extracted the preceding description block...

kernel security and bug fix update

3.10.0-327.28.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.28.2 - net bridge: include in6.h in ifbridge.h for struct in6addr Jiri Benc 1331285 1268057 - net inet: defines IPPROTO needed for module alias generation Jiri Benc 1331285 1268057 - net sync some IP headers with glibc Jir...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3588)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3588 advisory. kernel-uek 3.8.13-118.9.1 - mlx4: Increase SYNCTPT command timeout Mukesh Kacker Orabug: 22895790 - neigh: do not modify unlinked entries Julian Anastasov...

Oracle Linux 6 / 7 : kernel-uek (ELSA-2016-3587)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3587 advisory. - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos...

Oracle Linux 5 / 6 / 7 : java-1.7.0-openjdk (ELSA-2016-1504)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1504 advisory. 1:1.7.0.111-2.6.7.1.0.1 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.111-2.6.7.1 - Bump to jdk7u111 b01 to fix TCK...

Oracle Linux 6 : samba4 (ELSA-2016-1487)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1487 advisory. 4.2.10-7 - resolves: 1351957 - Fix CVE-2016-2119 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 7 : samba (ELSA-2016-1486)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1486 advisory. - resolves: 1351960 - Fix CVE-2016-2119 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

java-1.7.0-openjdk security update

1:1.7.0.111-2.6.7.1.0.1 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.111-2.6.7.1 - Bump to jdk7u111 b01 to fix TCK regressions 7081817 & 8162344 - Resolves: rhbz1350038 1:1.7.0.111-2.6.7.0 - Bump to 2.6.7 and u111b00. - Update SystemTap bundle with fix for...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2016-1458)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1458 advisory. 1:1.8.0.101-3.b13 - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz1350034 1:1.8.0.101-2.b13 - Add...

Oracle Linux 5 / 6 : httpd (ELSA-2016-1421)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1421 advisory. 2.2.3-92.0.1 - Add the ability to read DH parameters from the first SSLCertificateFile John Haxby orabug 21671194 - fix modssl always performing full...

Oracle Linux 7 : httpd (ELSA-2016-1422)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1422 advisory. - add security fix for CVE-2016-5387 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 6 : kernel (ELSA-2016-1406)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1406 advisory. - infiniband security: Restrict use of the write interface Don Dutile 1332547 1332548 CVE-2016-4565 Tenable has extracted the preceding description block direct...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-1392)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-1392 advisory. 45.2-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.2-1 - Update to 45.2 45.1.1-1 - Update to 45.1.1...