Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2015-0809)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0809 advisory. 1:1.8.0.45-30.b13 - repacked sources - Resolves: RHBZ1209076 1:1.8.0.45-7.b13 - Re-add %name prefix to patches to avoid conflicts with OpenJDK 7...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2015-0808)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0808 advisory. 1:1.6.0.35-1.13.7.1 - Repackaged source files - Resolves: rhbz1209067 1:1.6.0.35-1.13.7.0 - Update to IcedTea 1.13.7 - Regenerate...

Oracle Linux 6 : krb5 (ELSA-2015-0794)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0794 advisory. - fix for CVE-2014-5355 1193939 'krb5: unauthenticated denial of service in recvauthcommon and others' - fix for CVE-2014-5353 1174543 'Fix LDAP misuse...

Oracle Linux 6 / 7 : xorg-x11-server (ELSA-2015-0797)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0797 advisory. 1.15.0-26 - CVE fixes for: CVE-2015-0255 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2015-0771)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-0771 advisory. 31.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 31.6.0-1 - Update to 31.6.0 Tenable has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3019)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3019 advisory. - IB/core: Prevent integer overflow in ibumemget address arithmetic Shachar Raindel Orabug: 20799875 CVE-2014-8159 CVE-2014-8159 - xen-pciback: lim...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3021)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3021 advisory. kernel-uek 2.6.32-400.37.3 - net: sctp: fix slab corruption from use after free on INIT collisions Daniel Borkmann Orabug: 20780349 CVE-2015-1421 Tenable ha...

Oracle Linux 6 / 7 : flac (ELSA-2015-0767)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0767 advisory. - fix buffer overflow when processing ID3v2 metadata CVE-2014-8962 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0766)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0766 advisory. 31.6.0-2.0.1.el511 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3020)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3020 advisory. - IB/core: Prevent integer overflow in ibumemget address arithmetic Shachar Raindel Orabug: 20788393 CVE-2014-8159 CVE-2014-8159 - xen-pciback: lim...

Oracle Linux 6 / 7 : postgresql (ELSA-2015-0750)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0750 advisory. 8.4.20-2 - fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161 rhbz1198651 & rhbz1198652 Tenable has extracted the preceding descriptio...

Oracle Linux 7 : libxml2 (ELSA-2015-0749)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0749 advisory. - Fix missing entities after CVE-2014-3660 fix - CVE-2014-0191 Do not fetch external parameter entities rhbz1195649 Tenable has extracted the preceding...

Oracle Linux 7 : ipa / and / slapi-nis (ELSA-2015-0728)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0728 advisory. - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnamr and getgrgidr 1202997 - Fix CVE-2015-0283 Tenable has extracted the preceding description...

Oracle Linux 7 : kernel (ELSA-2015-0726)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0726 advisory. - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181177 1179347 CVE-2014-8159 Tenable has extracted the...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0718)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-0718 advisory. 31.5.3-1.0.1.el511 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files...

Oracle Linux 6 : openssl (ELSA-2015-0715)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0715 advisory. - update fix for CVE-2015-0287 to what was released upstream - fix CVE-2015-0209 - potential use after free in d2iECPrivateKey - fix CVE-2015-0286 -...

Oracle Linux 7 : openssl (ELSA-2015-0716)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0716 advisory. - update fix for CVE-2015-0287 to what was released upstream - fix CVE-2015-0209 - potential use after free in d2iECPrivateKey - fix CVE-2015-0286 -...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3012)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3012 advisory. - ttusb-dec: buffer overflow in ioctl Dan Carpenter Orabug: 20673373 CVE-2014-8884 - mm: Fix NULL pointer dereference in madviseMADVWILLNEED suppor...

Oracle Linux 6 / 7 : unzip (ELSA-2015-0700)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-0700 advisory. 6.0-2 - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 Resolves: 1196132 1196120 1196124 1196128 Tenable has extracted the preceding...

Oracle Linux 6 / 7 : freetype (ELSA-2015-0696)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0696 advisory. - Fixes CVE-2014-9657 - Check minimum size of recordsize. - Fixes CVE-2014-9658 - Use correct value for minimum table length test. - Fixes...