Oracle Linux 6 : krb5 (ELSA-2015-0794)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0794 advisory. - fix for CVE-2014-5355 1193939 'krb5: unauthenticated denial of service in recvauthcommon and others' - fix for CVE-2014-5353 1174543 'Fix LDAP misuse...

CentOS 6 : krb5 (CESA-2015:0794)

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available fo...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3020)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3020 advisory. - IB/core: Prevent integer overflow in ibumemget address arithmetic Shachar Raindel Orabug: 20788393 CVE-2014-8159 CVE-2014-8159 - xen-pciback: lim...

Oracle Linux 6 / 7 : postgresql (ELSA-2015-0750)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0750 advisory. 8.4.20-2 - fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161 rhbz1198651 & rhbz1198652 Tenable has extracted the preceding descriptio...

CentOS 6 : openssl (CESA-2015:0715)

Updated OpenSSL packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3012)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3012 advisory. - ttusb-dec: buffer overflow in ioctl Dan Carpenter Orabug: 20673373 CVE-2014-8884 - mm: Fix NULL pointer dereference in madviseMADVWILLNEED suppor...

Moderate: Red Hat Security Advisory: qpid security and bug fix update

Updated qpid packages that fix multiple security issues and one bug are now available for Red Hat Enterprise MRG 3 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3013)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3013 advisory. - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687313 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 -...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3014)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3014 advisory. - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687314 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 -...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3015)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3015 advisory. - netfilter: conntrack: disable generic tracking for known protocols Florian Westphal Orabug: 20679631 CVE-2014-8160 - mac80211: fix fragmentation...

CVE-2014-8159

The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a...

Oracle Linux 6 : kernel (ELSA-2015-0674)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0674 advisory. - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181173 1179327 CVE-2014-8159 - fs splice: perform generic wri...

RHEL 6 : 389-ds-base (RHSA-2015:0628)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0628 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...

Oracle Linux 6 : 389-ds-base (ELSA-2015-0628)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0628 advisory. - Resolves: 1180629 - CVE-2014-8105: information disclosure through 'cn=changelog' subtree Tenable has extracted the preceding description block directly from t...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0265)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0265 advisory. firefox 31.5.0-2.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 31.5.0-2 - Update to 31.5.0 ESR Build...

Security fix for the ALT Linux 6 package samba version 3.5.22-alt0.M60P.1

3.5.22-alt0.M60P.1 built Feb. 24, 2015 Andrey Cherepanov in task 140944 Feb. 23, 2015 Andrey Cherepanov - 3.5.22 + fixes CVE-2015-0240 security flaw in the smbd file server daemon...

CentOS 6 : samba (CESA-2015:0251)

Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from...

Oracle Linux 6 : subversion (ELSA-2015-0165)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0165 advisory. - moddavsvn fix for CVE-2014-3580 backport Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41

3:11-alt41 built Feb. 6, 2015 Sergey V Turchin in task 139918 Feb. 6, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323,...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3005)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3005 advisory. kernel-uek 2.6.32-400.36.14uek - net: sctp: fix NULL pointer dereference in af-fromaddrparam on malformed packet Daniel Borkmann Orabug: 20425334...