Oracle Linux 6 / 7 : jasper (ELSA-2015-0074)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0074 advisory. - CVE-2014-8157 - dec-numtiles off-by-one check in jpcdecprocesssot 1183671 Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2015-0068) (POODLE)

From Red Hat Security Advisory 2015:0068 : Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2015-0069)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0069 advisory. 1:1.8.0.31-1.b13 - Update to January CPU patch update. - Resolves: RHBZ1180299 1:1.8.0.25-4.b17 - updated aarch64 sources - epoch synced to 1 - all ppc...

java-1.7.0-openjdk security update

1:1.7.0.75-2.5.4.0.0.1.el511 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.75-2.5.4.0 - Bump to 2.5.4 using OpenJDK 7u75 b13. - Fix elliptic curve list as part of fsg.sh - Resolves: rhbz1180294...

Oracle Linux 6 / 7 : openssl (ELSA-2015-0066)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0066 advisory. - fix CVE-2014-3570 - incorrect computation in BNsqr - fix CVE-2014-3571 - possible crash in dtls1getrecord - fix CVE-2014-3572 - possible downgrad...

Oracle Linux 5 / 6 : thunderbird (ELSA-2015-0047)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-0047 advisory. 31.4.0-1.0.1.el66 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 31.4.0-1 - Update to 31.4.0 31.3.0-3 -...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0046)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0046 advisory. 31.4.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 31.4.0-...

Oracle Linux 6 : glibc (ELSA-2015-0016)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0016 advisory. - Fix crashes on invalid input in IBM gconv modules CVE-2014-6040, 1139571. Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : libvirt (ELSA-2015-0008)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0008 advisory. - CVE-2014-7823: dumpxml: security hole with migratable flag CVE-2014-7823 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 / 7 : docker (ELSA-2014-3110)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3110 advisory. 1.3.3-1.0.1 - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 -...

Oracle Linux 6 / 7 : ntp (ELSA-2014-2024)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-2024 advisory. - don't generate weak control key for resolver CVE-2014-9293 - don't generate weak MD5 keys in ntp-keygen CVE-2014-9294 - fix buffer overflows via...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3108)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3108 advisory. - net: guard tcpsetkeepalive to tcp sockets Eric Dumazet Orabug: 20224099 CVE-2012-6657 - isofs: Fix unbounded recursion when processing relocated...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3107)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3107 advisory. - isofs: Fix unbounded recursion when processing relocated directories Jan Kara Orabug: 20224060 CVE-2014-5471 CVE-2014-5472 Tenable has extracted...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3106)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3106 advisory. - isofs: Fix unbounded recursion when processing relocated directories Jan Kara Orabug: 20224059 CVE-2014-5471 CVE-2014-5472 Tenable has extracted...

Oracle Linux 5 : ntp (ELSA-2014-2025)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-2025 advisory. - don't generate weak control key for resolver CVE-2014-9293 - don't generate weak MD5 keys in ntp-keygen CVE-2014-9294 Tenable has extracted the...

Oracle Linux 6 / 7 : jasper (ELSA-2014-2021)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-2021 advisory. - CVE-2014-8137 - double-free in in jasiccattrvaldestroy 1173566 - CVE-2014-8138 - heap overflow in jp2decode 1173566 - CVE-2014-9029 - incorrect...

Oracle Linux 7 : kernel (ELSA-2014-2010)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-2010 advisory. 3.10.0-123.13.2 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.13.2 - x86 traps: stop using IST for SS Petr Matousek 1172812 1172813 CVE-2014-9322 Tenab...

Oracle Linux 5 : kernel (ELSA-2014-2008)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-2008 advisory. kernel 2.6.18-400.1.1 - x86 traps: stop using IST for SS Petr Matousek 1172809 CVE-2014-9322 Tenable has extracted the preceding description block directly from...

Oracle Linux 7 : glibc (ELSA-2014-2023)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-2023 advisory. - Fix wordexp to honour WRDENOCMD CVE-2014-7817, 1170118 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 : kernel (ELSA-2014-2008-1)

From Red Hat Security Advisory 2014:2008 : Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...