Oracle Linux 5 / 6 : php53 / and / php (ELSA-2014-1326)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1326 advisory. - spl: fix use-after-free in ArrayIterator due to object change during sorting. CVE-2014-4698 - spl: fix use-after-free in SPL Iterators...

Oracle Linux 5 / 6 / 7 : bash (ELSA-2014-1306)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1306 advisory. - CVE-2014-7169 Resolves: 1146324 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 6 : bash (ELSA-2014-3075)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3075 advisory. 4.1.2-15.1.0.1 - Preliminary fix for CVE-2014-7169 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 : bash (ELSA-2014-3077)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-3077 advisory. 3.2-33.1.0.1 - Preliminary fix for CVE-2014-7169 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 5 / 6 / 7 : bash (ELSA-2014-1293)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1293 advisory. 4.1.2-15.1 - Check for fishy environment Resolves: 1141645 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : kernel (ELSA-2014-1281)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1281 advisory. - kernel auditsc: auditkrule mask accesses need bounds checking Denys Vlasenko 1102708 1102710 CVE-2014-3917 - net l2tp: don't fall back on UDP get|setsockopt...

Oracle Linux 5 : conga (ELSA-2014-1194)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1194 advisory. 0.12.2-81.0.2.el5 - Replaced redhat logo image in Data.fs 0.12.2-81.0.1.el5 - Added conga-enterprise-Carthage.patch to support OEL5 - Replaced redhat...

Oracle Linux 5 : nss / and / nspr (ELSA-2014-1246)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1246 advisory. 3.16.1-2 - Backport nss-3.12.6 upstream fix required by Firefox 31 ESR - Resolves: Bug 1110860 3.16.1-1 - Rebase to nss-3.16.1 for FF31 - Resolves: Bug...

Oracle Linux 5 : bind97 (ELSA-2014-1244)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1244 advisory. - Fix CVE-2014-0591 - fix for CVE-2013-4854 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3073)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3073 advisory. - auditsc: auditkrule mask accesses need bounds checking Andy Lutomirski Orabug: 19590638 CVE-2014-3917 Tenable has extracted the preceding...

Oracle Linux 5 / 6 / 7 : procmail (ELSA-2014-1172)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-1172 advisory. 3.22-34.1 - Fixed buffer overflow in formail Resolves: CVE-2014-3618 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3072)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3072 advisory. 3.8.13-44.1.1 - auditsc: auditkrule mask accesses need bounds checking Andy Lutomirski Orabug: 19590596 CVE-2014-3917 Tenable has extracted the preceding...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3074)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3074 advisory. - auditsc: auditkrule mask accesses need bounds checking Andy Lutomirski Orabug: 19590597 CVE-2014-3917 Tenable has extracted the preceding description bloc...

Oracle Linux 6 : kernel (ELSA-2014-1167)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1167 advisory. - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc...

Oracle Linux 5 / 6 / 7 : jakarta-commons-httpclient (ELSA-2014-1166)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1166 advisory. 1:3.1-16 - Fix MITM security vulnerability - Resolves: CVE-2014-3577 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 5 / 6 : squid (ELSA-2014-1148)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-1148 advisory. - Resolves: 1134936 - CVE-2013-4115 buffer overflow when processing overly long DNS names Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2014-1144)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1144 advisory. firefox 24.8.0-1.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 24.8.0-1 - Update to 24.8.0 ESR...

Oracle Linux 5 / 6 / 7 : glibc (ELSA-2014-1110)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1110 advisory. 2.12-1.132.4 - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3070)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3070 advisory. - net: Use netlinknscapable to verify the permisions of netlink messages Eric W. Biederman Orabug: 19404229 CVE-2014-0181 - sctp: Fix skackbacklog...

Oracle Linux 5 : openssl (ELSA-2014-1053)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1053 advisory. - fix CVE-2014-0221 - recursion in DTLS code leading to DoS - fix CVE-2014-3505 - doublefree in DTLS packet processing - fix CVE-2014-3506 - avoid memo...