Oracle Linux 5 / 6 : thunderbird (ELSA-2015-0266)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-0266 advisory. 31.5.0-1.0.1.el66 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 31.5.0-1 - Update to 31.5.0 Tenable has...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0265)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0265 advisory. firefox 31.5.0-2.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 31.5.0-2 - Update to 31.5.0 ESR Build...

Oracle Linux 5 : samba3x (ELSA-2015-0249)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0249 advisory. - related: 1191608 - Update patchset for CVE-2015-0240. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : samba4 (ELSA-2015-0250)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0250 advisory. - related: 1191387 - Update patchset for CVE-2015-0240. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : samba (ELSA-2015-0251)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0251 advisory. - related: 1191338 - Update patchset for CVE-2015-0240. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : samba (ELSA-2015-0252)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0252 advisory. 4.1.1-38 - resolves: 1194132 - CVE-2015-0240: RCE in netlogon server. Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : kernel (ELSA-2015-0164)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0164 advisory. - fs splice: perform generic write checks Eric Sandeen 1155908 CVE-2014-7822 - x86 traps: stop using IST for SS Petr Matousek 1172809 CVE-2014-9322 Tenable has...

Oracle Linux 7 : subversion (ELSA-2015-0166)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0166 advisory. 1.7.14-7 - add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : mariadb (ELSA-2015-0118)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0118 advisory. - Rebase to 5.5.41 Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432 Resolves: 1186109 Tenabl...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3003)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3003 advisory. - CIFS Possible null ptr deref in SMB2tcon Steve French Orabug: 20433140 CVE-2014-7145 - net: sctp: fix NULL pointer dereference in af-fromaddrpara...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3005)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3005 advisory. kernel-uek 2.6.32-400.36.14uek - net: sctp: fix NULL pointer dereference in af-fromaddrparam on malformed packet Daniel Borkmann Orabug: 20425334...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3004)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3004 advisory. - net: sctp: fix NULL pointer dereference in af-fromaddrparam on malformed packet Daniel Borkmann Orabug: 20425333 CVE-2014-7841 Tenable has extracted the...

Oracle Linux 6 : kernel (ELSA-2015-0087)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0087 advisory. - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 - net sctp: fix NULL pointer dereference in af-fromaddrparam on malforme...

Oracle Linux 6 / 7 : libyaml (ELSA-2015-0100)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0100 advisory. 0.1.3-4 - Add patch for CVE-2014-9130 RHBZ1169369 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 7 : kernel (ELSA-2015-0102)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0102 advisory. - mm shmem: fix splicing from a hole while it's punched Denys Vlasenko 1118244 1118245 CVE-2014-4171 - mm shmem: fix faulting into a hole, not taking...

Oracle Linux 5 : glibc (ELSA-2015-0090)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0090 advisory. 2.5-123.0.1.el511.1 - Switch to use malloc when the input line is too long Orabug 19951108 - Use a /sys/devices/system/cpu/online for SCNPROCESSORSONLN...

kernel security and bug fix update

3.10.0-123.20.1 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.20.1 - fs seqfile: don't include mm.h in genksyms calculation Ian Kent 1184152 1183280 3.10.0-123.19.1 - mm shmem: fix splicing from a hole while it's punched Denys Vlasenko 1118244 1118245 CVE-2014-4171 - mm shmem: fix faulti...

Oracle Linux 6 / 7 : glibc (ELSA-2015-0092)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0092 advisory. - Fix parsing of numeric hosts in gethostbynamer CVE-2015-0235, 1183535. - Fix wordexp to honour WRDENOCMD CVE-2014-7817, 1170118 - Remove gconv...

glibc security update

Oracle Linux 7: 2.17-55.0.4.el70.5 - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. Jose E. Marchesi 2.17-55.5 - Rebuild and run regression testing...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2015-0085)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0085 advisory. 1:1.6.0.33-1.13.6.1.0.1.el511 - Add oracle-enterprise.patch 1:1.6.0.34-1.13.6.1 - Update to latest 1.13.6 release candidate tarball - Fixes a...