Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3073)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3073 advisory. kernel-uek 2.6.32-400.37.11uek - udp: fix behavior of wrong checksums Eric Dumazet Orabug: 21628852 CVE-2015-5364 CVE-2015-5366 Tenable has extract...

Oracle Linux 6 : kernel (ELSA-2015-1623)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1623 advisory. - net udp: fix behavior of wrong checksums Denys Vlasenko 1240758 1240759 CVE-2015-5364 CVE-2015-5366 Tenable has extracted the preceding description...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3067)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3067 advisory. - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563042 CVE-2015-5697 Tenable has extracted the preceding description block...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3064)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3064 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502729 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3055)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3055 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502741 CVE-2015-0239 CVE-2015-0239 - x86/tls: Validate TLS entries to protect espfix...

Oracle Linux 6 : grep (ELSA-2015-1447)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1447 advisory. - Fixed buffer overrun for grep -F Resolves: CVE-2015-1345 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 6 : wpa_supplicant (ELSA-2015-1439)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2015-1439 advisory. 1:0.7.3-6 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1226396 1:0.7.3-5 - Add domainmatch config option from upstream rh 1186806 rh...

Oracle Linux 6 : kernel (ELSA-2015-1272)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1272 advisory. - fs take imutex during preparebinprm for setid executables Mateusz Guzik 1216269 CVE-2015-3339 - fs pipe: fix pipe corruption and iovec overrun on...

Oracle Linux 6 : gnutls (ELSA-2015-1457)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1457 advisory. - fix CVE-2015-0282 1198159 - fix CVE-2015-0294 1198159 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : ntp (ELSA-2015-1459)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1459 advisory. - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack...

Oracle Linux 6 : pki-core (ELSA-2015-1347)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1347 advisory. 9.0.3-43 - Resolves 1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist 9.0.3-42 - Resolves 1221900 -...

Oracle Linux 6 : libxml2 (ELSA-2015-1419)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1419 advisory. - CVE-2015-1819 Enforce the reader to run in constant memoryrhbz1214163 - Fix missing entities after CVE-2014-3660 fix rhbz1149086 - CVE-2014-3660 denial of...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3053)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3053 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502739 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid...

Oracle Linux 6 : sudo (ELSA-2015-1409)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1409 advisory. - RHEL-6.7 erratum - added patch for CVE-2014-9680 - added BuildRequires for tzdata Resolves: rhbz1200253 Tenable has extracted the preceding description block...

Oracle Linux 6 : libreoffice (ELSA-2015-1458)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1458 advisory. - Resolves: rhbz1217466 CVE-2015-1774 HWP filter fix Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 6 : net-snmp (ELSA-2015-1385)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1385 advisory. - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is received CVE-2014-3565 Tenable has extracted the preceding description block directly...

Oracle Linux 6 : wireshark (ELSA-2015-1460)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1460 advisory. - Resolves: CVE-2015-2189 CVE-2015-2191 - Resolves: CVE-2014-8710 CVE-2014-8711 CVE-2014-8712 CVE-2014-8713 CVE-2014-8714 CVE-2015-0562 CVE-2015-0564...

Oracle Linux 6 : curl (ELSA-2015-1254)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1254 advisory. - require credentials to match for NTLM re-use CVE-2015-3143 - close Negotiate connections when done CVE-2015-3148 - reject CRLFs in URLs passed to pro...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3050)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3050 advisory. kernel-uek 2.6.32-400.37.7 - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444792 CVE-2015-2922 Tenable has extracted the preceding...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2015-1229)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1229 advisory. 1:1.7.0.85-2.6.1.2.0.1.el71 - Update DISTRONAME in specfile 1:1.7.0.85-2.6.1.2 - Bump upstream tarball to u25b01 to fix issue with 8075374 backport...