Oracle Linux 7 : xerces-c (ELSA-2015-1193)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1193 advisory. 3.1.1-7 Resolves: rhbz1217104 CVE-2015-0252 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 : kvm (ELSA-2015-1189)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1189 advisory. kvm-83-273.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83.273.el5 -...

Oracle Linux 6 / 7 : nss (ELSA-2015-1185)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1185 advisory. nss 3.19.1-3.0.1 - Added nss-vendor.patch to change vendor 3.19.1-3 - Additional NULL initialization. 3.19.1-2 - Updated the patch to keep old cipher suite...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3047)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3047 advisory. - x86/asm/entry/64: Remove a bogus 'retfromfork' optimization Andy Lutomirski Orabug: 21308307 CVE-2015-2830 Tenable has extracted the preceding...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3045)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3045 advisory. - x86/asm/entry/64: Remove a bogus 'retfromfork' optimization Andy Lutomirski Orabug: 21308309 CVE-2015-2830 Tenable has extracted the preceding...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3046)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3046 advisory. - x86/asm/entry/64: Remove a bogus 'retfromfork' optimization Andy Lutomirski Orabug: 21308308 CVE-2015-2830 Tenable has extracted the preceding...

Oracle Linux 7 : mailman (ELSA-2015-1153)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2015-1153 advisory. - fix CVE-2015-2775 - directory traversal in MTA transports Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : php (ELSA-2015-1135)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1135 advisory. - core: fix multipart/form-data request can use excessive amount of CPU usage CVE-2015-4024 - fix various functions accept paths with NUL character...

Oracle Linux 7 : kernel (ELSA-2015-1137)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1137 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202861 1198843 CVE-2015-1805 - x86 kernel: Remove a bogus 'retfromfork'...

Oracle Linux 7 : libreswan (ELSA-2015-1154)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2015-1154 advisory. - Resolves: rhbz1226407 CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart Tenable has extracted the preceding description block directly from th...

libreswan security, bug fix and enhancement update

3.12-10.1.0.1 - add libreswan-oracle.patch to detect Oracle Linux distro 3.12-10.1 - Resolves: rhbz1226407 CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart 3.12-10 - Resolves: rhbz1213652 Support CAVS updated another prf free symkey, bogus fips mode fix 3.12-9 - Resolves:...

kernel security and bug fix update

3.10.0-229.7.2 - Oracle Linux certificates Alexey Petrenko 3.10.0-229.7.2 - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202861 1198843 CVE-2015-1805 3.10.0-229.7.1 - scsi storvsc: get rid of overly verbose warning messages Vitaly Kuznetsov 1215770 1206437 - scsi...

Oracle Linux 6 / 7 : openssl (ELSA-2015-1115)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1115 advisory. - improved fix for CVE-2015-1791 - add missing parts of CVE-2015-0209 fix for corectness although unexploitable - fix CVE-2014-8176 - invalid free ...

Oracle Linux 7 : wpa_supplicant (ELSA-2015-1090)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1090 advisory. - P2P: Validate SSID element length before copying it CVE-2015-1863 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3043)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3043 advisory. - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226731 CVE-2014-9585 - isofs: Fix infinite looping over CE...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3041)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3041 advisory. - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226729 CVE-2014-9585 - isofs: Fix infinite looping over CE...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3042)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3042 advisory. - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226730 CVE-2014-9585 - isofs: Fix infinite looping over CE...

Oracle Linux 6 : kernel (ELSA-2015-1081)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1081 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202860 1185166 CVE-2015-1805 - x86 crypto: aesni - fix memory usage in...

Oracle Linux 7 : abrt (ELSA-2015-1083)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1083 advisory. abrt 2.1.11-22.0.1 - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.1.11-22 - do not open the buildids file as the user abrt - do not...

Oracle Linux 6 / 7 : openssl (ELSA-2015-1072)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1072 advisory. 1.0.1e-30.9 - fix CVE-2015-4000 - prevent the logjam attack on client - restrict the DH key size to at least 768 bits limit will be increased in future...