Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3004)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3004 advisory. - net: sctp: fix NULL pointer dereference in af-fromaddrparam on malformed packet Daniel Borkmann Orabug: 20425333 CVE-2014-7841 Tenable has extracted the...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3005)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3005 advisory. kernel-uek 2.6.32-400.36.14uek - net: sctp: fix NULL pointer dereference in af-fromaddrparam on malformed packet Daniel Borkmann Orabug: 20425334...

Oracle Linux 6 / 7 : libyaml (ELSA-2015-0100)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0100 advisory. 0.1.3-4 - Add patch for CVE-2014-9130 RHBZ1169369 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 6 : kernel (ELSA-2015-0087)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0087 advisory. - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 - net sctp: fix NULL pointer dereference in af-fromaddrparam on malforme...

Oracle Linux 7 : kernel (ELSA-2015-0102)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0102 advisory. - mm shmem: fix splicing from a hole while it's punched Denys Vlasenko 1118244 1118245 CVE-2014-4171 - mm shmem: fix faulting into a hole, not taking...

Oracle Linux 5 : glibc (ELSA-2015-0090)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0090 advisory. 2.5-123.0.1.el511.1 - Switch to use malloc when the input line is too long Orabug 19951108 - Use a /sys/devices/system/cpu/online for SCNPROCESSORSONLN...

kernel security and bug fix update

3.10.0-123.20.1 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.20.1 - fs seqfile: don't include mm.h in genksyms calculation Ian Kent 1184152 1183280 3.10.0-123.19.1 - mm shmem: fix splicing from a hole while it's punched Denys Vlasenko 1118244 1118245 CVE-2014-4171 - mm shmem: fix faulti...

Oracle Linux 6 / 7 : glibc (ELSA-2015-0092)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0092 advisory. - Fix parsing of numeric hosts in gethostbynamer CVE-2015-0235, 1183535. - Fix wordexp to honour WRDENOCMD CVE-2014-7817, 1170118 - Remove gconv...

glibc security update

Oracle Linux 7: 2.17-55.0.4.el70.5 - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. Jose E. Marchesi 2.17-55.5 - Rebuild and run regression testing...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2015-0085)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0085 advisory. 1:1.6.0.33-1.13.6.1.0.1.el511 - Add oracle-enterprise.patch 1:1.6.0.34-1.13.6.1 - Update to latest 1.13.6 release candidate tarball - Fixes a...

Oracle Linux 6 / 7 : jasper (ELSA-2015-0074)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0074 advisory. - CVE-2014-8157 - dec-numtiles off-by-one check in jpcdecprocesssot 1183671 Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2015-0068) (POODLE)

From Red Hat Security Advisory 2015:0068 : Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2015-0069)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0069 advisory. 1:1.8.0.31-1.b13 - Update to January CPU patch update. - Resolves: RHBZ1180299 1:1.8.0.25-4.b17 - updated aarch64 sources - epoch synced to 1 - all ppc...

java-1.7.0-openjdk security update

1:1.7.0.75-2.5.4.0.0.1.el511 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.75-2.5.4.0 - Bump to 2.5.4 using OpenJDK 7u75 b13. - Fix elliptic curve list as part of fsg.sh - Resolves: rhbz1180294...

Oracle Linux 6 / 7 : openssl (ELSA-2015-0066)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0066 advisory. - fix CVE-2014-3570 - incorrect computation in BNsqr - fix CVE-2014-3571 - possible crash in dtls1getrecord - fix CVE-2014-3572 - possible downgrad...

Oracle Linux 5 / 6 : thunderbird (ELSA-2015-0047)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-0047 advisory. 31.4.0-1.0.1.el66 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 31.4.0-1 - Update to 31.4.0 31.3.0-3 -...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0046)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0046 advisory. 31.4.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 31.4.0-...

Oracle Linux 6 : glibc (ELSA-2015-0016)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0016 advisory. - Fix crashes on invalid input in IBM gconv modules CVE-2014-6040, 1139571. Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : libvirt (ELSA-2015-0008)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0008 advisory. - CVE-2014-7823: dumpxml: security hole with migratable flag CVE-2014-7823 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 / 7 : docker (ELSA-2014-3110)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3110 advisory. 1.3.3-1.0.1 - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 -...