Oracle Linux 6 / 7 : jakarta-taglibs-standard (ELSA-2015-1695)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1695 advisory. - Resolves: CVE-2015-0254 - Apply correction for previous CVE-2015-0254 patch prevent XXE in - Resolves: CVE-2015-0254 Tenable has extracted the preceding...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-1693)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1693 advisory. 38.2.1-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 38.2.1-...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2015-1682)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1682 advisory. 38.2.0-4.0.1.el67 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 38.2.0-4 - Update to 38.2.0 38.1.0-4 ...

Oracle Linux 5 : nss (ELSA-2015-1664)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1664 advisory. - Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly MFSA 2015-64 Tenable has extracted th...

Oracle Linux 7 : mariadb (ELSA-2015-1665)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1665 advisory. 1:5.5.44-1 - Rebase to 5.5.44 Resolves: 1247021 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : httpd (ELSA-2015-1667)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1667 advisory. - core: fix chunk header parsing defect CVE-2015-3183 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : httpd (ELSA-2015-1668)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1668 advisory. - fix regressions caused by fix for CVE-2015-3183 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 6 / 7 : net-snmp (ELSA-2015-1636)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1636 advisory. 1:5.5-54.0.1.el67.1 - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 1:5.5-54.el67.1 - Fixed parsing of invalid variables in incoming packets 12484...

Oracle Linux 6 : sqlite (ELSA-2015-1634)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1634 advisory. 3.6.20-1.2 - Add patch for compiler warnings highlighted by rpmdiff. Related: rhbz1244727 3.6.20-1.el67.1 - fix for CVE-2015-3416 Resolves: 1244727 Tenable has...

Oracle Linux 5 : glibc (ELSA-2015-1627)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1627 advisory. - Fix invalid-free when using getaddrinfo and AIIDN CVE-2013-7424, Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3071 advisory. kernel-uek 3.8.13-98.1.2 - udp: fix behavior of wrong checksums Eric Dumazet Orabug: 21628850 CVE-2015-5364 CVE-2015-5366 Tenable has extracted the...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3072)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3072 advisory. 2.6.39-400.250.11 - udp: fix behavior of wrong checksums Eric Dumazet Orabug: 21628851 CVE-2015-5364 CVE-2015-5366 Tenable has extracted the...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3073)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3073 advisory. kernel-uek 2.6.32-400.37.11uek - udp: fix behavior of wrong checksums Eric Dumazet Orabug: 21628852 CVE-2015-5364 CVE-2015-5366 Tenable has extract...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-1581)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2015-1581 advisory. 38.1.1-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 38.1.1-1 - Updat...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3067)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3067 advisory. - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563042 CVE-2015-5697 Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3068)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3068 advisory. - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563043 CVE-2015-5697 Tenable has extracted the preceding description block...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3066)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3066 advisory. kernel-uek 3.8.13-98.1.1 - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563041 CVE-2015-5697 Tenable has extracted the preceding...

Oracle Linux 7 : kernel (ELSA-2015-1534)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1534 advisory. - net ipv4: Missing sknullsnodeinit in pingunhash Denys Vlasenko 1218104 1218105 CVE-2015-3636 - net nfconntrack: reserve two bytes for nfctext-len...

Oracle Linux 6 / 7 : lxc (ELSA-2015-3065)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3065 advisory. - Orabug 21533491 CVE-2015-1334: Don't use the container's /proc during attach Tenable has extracted the preceding description block directly from...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3064)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3064 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502729 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid...