Oracle Linux 6 / 7 : openssl (ELSA-2014-1652)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1652 advisory. - fix CVE-2014-3567 - memory leak when handling session tickets - fix CVE-2014-3513 - memory leak in srtp support - add support for fallback SCSV t...

Oracle Linux 6 : cups (ELSA-2014-1388)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1388 advisory. - Applied upstream patch to fix CVE-2014-5029 bug 1122600, CVE-2014-5030 bug 1128764, CVE-2014-5031 bug 1128767. - fix patch for CVE-2014-3537 bug...

Oracle Linux 6 : thunderbird (ELSA-2014-1647)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-1647 advisory. 31.2.0-3.0.1.el65 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 31.2.0-3 - Enabled jemalloc on ppc64 and s390...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2014-1620)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1620 advisory. 1:1.7.0.65-2.5.3.1.0.1.el70 - Update DISTRONAME in specfile 1:1.7.0.65-2.5.3.1 - Bump to 2.5.3 for latest security fixes. - Remove obsolete patches...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2014-1635)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1635 advisory. firefox 31.2.0-3.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 31.2.0-3 - Update to 31.2.0 ESR - Fix...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2014-1633)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1633 advisory. 1:1.7.0.71-2.5.3.1.0.1.el511 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1:1.7.0.71-2.5.3.1 - Bump to 2.5.3 with security...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2014-1634)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1634 advisory. 1:1.6.0.33-1.13.5.0 - Update to IcedTea 1.13.5 - Remove upstreamed patches. - Regenerate add-final-location-rpaths patch against new release. -...

Oracle Linux 7 : rsyslog (ELSA-2014-1397)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1397 advisory. 7.4.7-7.0.1 - use setsid to get a controlling session and process group Orabug: 17346261 Todd Vierling 7.4.7-7 - fix CVE-2014-3634 resolves: 1149152 Tenable has...

Oracle Linux 7 : polkit-qt (ELSA-2014-1359)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1359 advisory. 0.103.0-10 - Resolves: 1147368 CVE-2014-5033 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : libvirt (ELSA-2014-1352)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1352 advisory. - domainconf: fix domain deadlock CVE-2014-3657 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 / 6 : php53 / and / php (ELSA-2014-1326)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1326 advisory. - spl: fix use-after-free in ArrayIterator due to object change during sorting. CVE-2014-4698 - spl: fix use-after-free in SPL Iterators...

Oracle Linux 6 / 7 : xerces-j2 (ELSA-2014-1319)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1319 advisory. 2.11.0-17 - Fix XML parsing bug JAXP, 8017298 - Resolves: CVE-2013-4002 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 / 6 / 7 : bash (ELSA-2014-1306)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1306 advisory. - CVE-2014-7169 Resolves: 1146324 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 4 : bash (ELSA-2014-3079)

Description of changes: 3.0-27.0.3 - Rework env function definition for safety Florian Weimer CVE-2014-7169 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2014-3079...

Oracle Linux 5 / 6 / 7 : nss (ELSA-2014-1307)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1307 advisory. - Resolves: Bug 1145433 - CVE-2014-1568 - Resolves: Bug 1145433 - CVE-2014-1568 nss-util Tenable has extracted the preceding description block directly...

Oracle Linux 6 : bash (ELSA-2014-3075)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3075 advisory. 4.1.2-15.1.0.1 - Preliminary fix for CVE-2014-7169 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : bash (ELSA-2014-3076)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3076 advisory. 4.2.45-5.2.0.1 - Preliminary fix for CVE-2014-7169 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 4 : bash (ELSA-2014-3078)

Description of changes: 3.0-27.0.2 - Preliminary fix for CVE-2014-7169 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2014-3078. include'deprecatednasllevel.inc';...

Oracle Linux 5 : bash (ELSA-2014-3077)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-3077 advisory. 3.2-33.1.0.1 - Preliminary fix for CVE-2014-7169 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 5 / 6 / 7 : bash (ELSA-2014-1293)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1293 advisory. 4.1.2-15.1 - Check for fishy environment Resolves: 1141645 Tenable has extracted the preceding description block directly from the Oracle Linux security...