Security fix for the ALT Linux 7 package libssh version 0.6.5-alt1

June 17, 2015 Sergey V Turchin 0.6.5-alt1 - new version - security fix: CVE-2015-3146...

CentOS 7 : abrt (CESA-2015:1083)

Updated abrt packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Oracle Linux 6 / 7 : openssl (ELSA-2015-1115)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1115 advisory. - improved fix for CVE-2015-1791 - add missing parts of CVE-2015-0209 fix for corectness although unexploitable - fix CVE-2014-8176 - invalid free ...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt3

June 15, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt3 - Fixed CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-0209, CVE-2015-4000...

Oracle Linux 7 : wpa_supplicant (ELSA-2015-1090)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1090 advisory. - P2P: Validate SSID element length before copying it CVE-2015-1863 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3041)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3041 advisory. - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226729 CVE-2014-9585 - isofs: Fix infinite looping over CE...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt45

3:11-alt45 built June 10, 2015 Sergey V Turchin in task 145263 June 10, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3096, CVE-2015-3097, CVE-2015-3098, CVE-2015-3099, CVE-2015-3100, CVE-2015-3101, CVE-2015-3102, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105, CVE-2015-3106,...

Oracle Linux 7 : abrt (ELSA-2015-1083)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1083 advisory. abrt 2.1.11-22.0.1 - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.1.11-22 - do not open the buildids file as the user abrt - do not...

Oracle Linux 6 / 7 : openssl (ELSA-2015-1072)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1072 advisory. 1.0.1e-30.9 - fix CVE-2015-4000 - prevent the logjam attack on client - restrict the DH key size to at least 768 bits limit will be increased in future...

Security fix for the ALT Linux 7 package qemu version 1.4.0-alt1.1.M70P.1

1.4.0-alt1.1.M70P.1 built May 15, 2015 Mikhail Efremov in task 144448 May 15, 2015 Mikhail Efremov - Backported patch from Sisyphus CVE-2015-3456: + fdc: force the fifo access to be in bounds of the allocated buffer...

Oracle Linux 7 : qemu-kvm (ELSA-2015-0999)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0999 advisory. 1.5.3-86.el71.2 - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch bz1219269 - Resolves: bz1219269 EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3035)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3035 advisory. - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077385 CVE-2015-3331 - xen/pciback: Don't disable PCICOMMAND on PCI...

CentOS 7 : kexec-tools (CESA-2015:0986)

Updated kexec-tools packages that fix one security issue, one bug, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Oracle Linux 7 : tomcat (ELSA-2015-0983)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0983 advisory. 0:7.0.54-2 - Resovles: CVE-2014-0227 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

CentOS 7 : qemu-kvm (CESA-2015:0999) (Venom)

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Oracle Linux 7 : kernel (ELSA-2015-0987)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0987 advisory. - x86 crypto: aesni - fix memory usage in GCM decryption Kurt Stutsman 1213331 1212178 CVE-2015-3331 Tenable has extracted the preceding description block...

CentOS 7 : tomcat (CESA-2015:0983)

Updated tomcat packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from...

Oracle Linux 7 : kexec-tools (ELSA-2015-0986)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0986 advisory. 2.0.7-19.0.1.el71.2 - kdumpctl: exclude defaulthugepagesz setting from kdump kernel cmdline Sriharsha Yadagudde Orabug: 19134999 - kdumpctl: verify if kernel...

Low: Red Hat Bug Fix Advisory: nss, nss-util, and nspr bug fix and enhancement update

Updated nss, nss-util, and nspr packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3032)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3032 advisory. - isofs: Fix unchecked printing of ER records Jan Kara Orabug: 20930551 CVE-2014-9584 - KEYS: close race between key lookup and freeing Sasha Levin...