Oracle Linux 6 : kernel (ELSA-2015-1623)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1623 advisory. - net udp: fix behavior of wrong checksums Denys Vlasenko 1240758 1240759 CVE-2015-5364 CVE-2015-5366 Tenable has extracted the preceding description...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147610 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3067)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3067 advisory. - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563042 CVE-2015-5697 Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3055)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3055 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502741 CVE-2015-0239 CVE-2015-0239 - x86/tls: Validate TLS entries to protect espfix...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3064)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3064 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502729 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid...

Oracle Linux 6 : wpa_supplicant (ELSA-2015-1439)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2015-1439 advisory. 1:0.7.3-6 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1226396 1:0.7.3-5 - Add domainmatch config option from upstream rh 1186806 rh...

Oracle Linux 6 : ntp (ELSA-2015-1459)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1459 advisory. - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack...

Oracle Linux 6 : gnutls (ELSA-2015-1457)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1457 advisory. - fix CVE-2015-0282 1198159 - fix CVE-2015-0294 1198159 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : grep (ELSA-2015-1447)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1447 advisory. - Fixed buffer overrun for grep -F Resolves: CVE-2015-1345 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 6 : kernel (ELSA-2015-1272)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1272 advisory. - fs take imutex during preparebinprm for setid executables Mateusz Guzik 1216269 CVE-2015-3339 - fs pipe: fix pipe corruption and iovec overrun on...

Oracle Linux 6 : libxml2 (ELSA-2015-1419)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1419 advisory. - CVE-2015-1819 Enforce the reader to run in constant memoryrhbz1214163 - Fix missing entities after CVE-2014-3660 fix rhbz1149086 - CVE-2014-3660 denial of...

Oracle Linux 6 : sudo (ELSA-2015-1409)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1409 advisory. - RHEL-6.7 erratum - added patch for CVE-2014-9680 - added BuildRequires for tzdata Resolves: rhbz1200253 Tenable has extracted the preceding description block...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3053)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3053 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502739 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid...

Oracle Linux 6 : pki-core (ELSA-2015-1347)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1347 advisory. 9.0.3-43 - Resolves 1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist 9.0.3-42 - Resolves 1221900 -...

Oracle Linux 6 : wireshark (ELSA-2015-1460)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1460 advisory. - Resolves: CVE-2015-2189 CVE-2015-2191 - Resolves: CVE-2014-8710 CVE-2014-8711 CVE-2014-8712 CVE-2014-8713 CVE-2014-8714 CVE-2015-0562 CVE-2015-0564...

Oracle Linux 6 : curl (ELSA-2015-1254)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1254 advisory. - require credentials to match for NTLM re-use CVE-2015-3143 - close Negotiate connections when done CVE-2015-3148 - reject CRLFs in URLs passed to pro...

Oracle Linux 6 : libreoffice (ELSA-2015-1458)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1458 advisory. - Resolves: rhbz1217466 CVE-2015-1774 HWP filter fix Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 6 : net-snmp (ELSA-2015-1385)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1385 advisory. - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is received CVE-2014-3565 Tenable has extracted the preceding description block directly...

CentOS 6 : libxml2 (CESA-2015:1419)

Updated libxml2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS 6 : ntp (CESA-2015:1459)

Updated ntp packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...