Oracle Linux 7 : kernel (ELSA-2014-1281)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1281 advisory. - kernel auditsc: auditkrule mask accesses need bounds checking Denys Vlasenko 1102708 1102710 CVE-2014-3917 - net l2tp: don't fall back on UDP get|setsockopt...

kernel security and bug fix update

3.10.0-123.8.1 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.8.1 - scsi fnic: fix broken FIP discovery by initializing multicast address Chris Leech 1119727 1100078 - scsi libfcoe: Make fcoesysfs optional / fix fnic NULL exception Chris Leech 1119727 1100078 - fs nfs: Don't mark the data...

Oracle Linux 5 : conga (ELSA-2014-1194)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1194 advisory. 0.12.2-81.0.2.el5 - Replaced redhat logo image in Data.fs 0.12.2-81.0.1.el5 - Added conga-enterprise-Carthage.patch to support OEL5 - Replaced redhat...

Oracle Linux 5 : nss / and / nspr (ELSA-2014-1246)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1246 advisory. 3.16.1-2 - Backport nss-3.12.6 upstream fix required by Firefox 31 ESR - Resolves: Bug 1110860 3.16.1-1 - Rebase to nss-3.16.1 for FF31 - Resolves: Bug...

Oracle Linux 5 : automake (ELSA-2014-1243)

From Red Hat Security Advisory 2014:1243 : An updated automake package that fixes one security issue is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Oracle Linux 5 : bind97 (ELSA-2014-1244)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1244 advisory. - Fix CVE-2014-0591 - fix for CVE-2013-4854 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 : krb5 (ELSA-2014-1255)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1255 advisory. 1.6.1-80.el5 - rebuild 1.6.1-79.el5 - incorporate fix for MITKRB5-SA-2014-001 CVE-2014-4345, 1132785 Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 : axis (ELSA-2014-1193)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1193 advisory. - Resolves: CVE-2014-3596 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3073)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3073 advisory. - auditsc: auditkrule mask accesses need bounds checking Andy Lutomirski Orabug: 19590638 CVE-2014-3917 Tenable has extracted the preceding...

Oracle Linux 5 / 6 / 7 : procmail (ELSA-2014-1172)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-1172 advisory. 3.22-34.1 - Fixed buffer overflow in formail Resolves: CVE-2014-3618 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3074)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3074 advisory. - auditsc: auditkrule mask accesses need bounds checking Andy Lutomirski Orabug: 19590597 CVE-2014-3917 Tenable has extracted the preceding description bloc...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3072)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3072 advisory. 3.8.13-44.1.1 - auditsc: auditkrule mask accesses need bounds checking Andy Lutomirski Orabug: 19590596 CVE-2014-3917 Tenable has extracted the preceding...

Oracle Linux 6 : kernel (ELSA-2014-1167)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1167 advisory. - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc...

Oracle Linux 5 / 6 / 7 : jakarta-commons-httpclient (ELSA-2014-1166)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1166 advisory. 1:3.1-16 - Fix MITM security vulnerability - Resolves: CVE-2014-3577 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 5 : kernel (ELSA-2014-1143)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1143 advisory. - audit auditsc: auditkrule mask accesses need bounds checking Denys Vlasenko 1102702 1102703 CVE-2014-3917 Tenable has extracted the preceding description bloc...

Oracle Linux 7 : httpcomponents-client (ELSA-2014-1146)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1146 advisory. 4.2.5-5 - Fix MITM security vulnerability - Resolves: CVE-2014-3577 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 5 / 6 : squid (ELSA-2014-1148)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-1148 advisory. - Resolves: 1134936 - CVE-2013-4115 buffer overflow when processing overly long DNS names Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2014-1144)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1144 advisory. firefox 24.8.0-1.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 24.8.0-1 - Update to 24.8.0 ESR...

Oracle Linux 7 : squid (ELSA-2014-1147)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1147 advisory. 7:3.3.8-12 - Resolves: 1134933 - CVE-2014-3609 assertion failure in header processing Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 / 6 / 7 : glibc (ELSA-2014-1110)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1110 advisory. 2.12-1.132.4 - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names...