Oracle Linux 6 : kernel (ELSA-2014-0924)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0924 advisory. - netdrv pppol2tp: fail when socket option level is not SOLPPPOL2TP 1119461 1119462 CVE-2014-4943 Tenable has extracted the preceding description block...

Oracle Linux 7 : httpd (ELSA-2014-0921)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0921 advisory. - modcgid: add security fix for CVE-2014-0231 1120607 - modproxy: add security fix for CVE-2014-0117 1120607 - moddeflate: add security fix for...

kernel security, bug fix, and enhancement update

3.10.0-123.4.2 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.4.2 - fs aio: fix plug memory disclosure and fix reqsactive accounting backport Jeff Moyer 1094604 1094605 CVE-2014-0206 - fs aio: plug memory disclosure and fix reqsactive accounting Mateusz Guzik 1094604 1094605 CVE-2014-0206...

Oracle Linux 6 : nss / and / nspr (ELSA-2014-0917)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0917 advisory. nspr 4.10.6-1 - Rebase to nspr-4.10.6 - Resolves: rhbz1112135 nss 3.16.1-4.0.1.el65 - Added nss-vendor.patch to change vendor 3.16.1-4 - Update some...

kernel security update

3.10.0-123.4.4 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.4.4 - net l2tpppp: fail when socket option level is not SOLPPPOL2TP Petr Matousek 1119465 1119466 CVE-2014-4943 3.10.0-123.4.3 - x86 ptrace: force IRET path after a ptracestop Oleg Nesterov 1115934 1115935 CVE-2014-4699...

Oracle Linux 5 / 6 : thunderbird (ELSA-2014-0918)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-0918 advisory. 24.7.0-1.0.1.el65 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 24.7.0-1 - Update to 24.7.0 Tenable has...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2014-0907)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0907 advisory. 1:1.6.0.1-6.1.13.4 - moved to icedteaver 1.13.4 - moved to openjdkver b32 and openjdkdate 15jul2014 - added upstreamed patch patch9...

Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2014-3046)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3046 advisory. - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229497 CVE-2014-4943 CVE-2014-4943 - ptrace,x86: force IRET path...

kernel security update

3.10.0-123.1.2 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.1.2 - tty ntty: Fix nttywrite crash when echoing in raw mode Aristeu Rozanski 1094241 1094242 CVE-2014-0196...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3047)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3047 advisory. - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229505 CVE-2014-4943 CVE-2014-4943 Tenable has extracted the...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3048)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3048 advisory. - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229529 CVE-2014-4943 CVE-2014-4943 Tenable has extracted the...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2014-0890)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0890 advisory. 1.7.0.65-2.5.1.2.0.1.el510 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.65-2.5.1.2 - added and applied fix for samrtcard ...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2014-0889)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0889 advisory. 1.7.0.65-2.5.1.2.0.1.el65 - Update DISTRONAME in specfile 1.7.0.65-2.5.1.2 - added and applied fix for samrtcard io patch405, pr1864smartcardIO.pat...

Oracle Linux 5 / 6 : samba / and / samba3x (ELSA-2014-0866)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0866 advisory. - resolves: 1105499 - CVE-2014-0244: DoS in nmbd. Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : tomcat6 (ELSA-2014-0865)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0865 advisory. - Related: CVE-2014-0075 - rebuild to generate javadoc - Related: CVE-2014-0075 incomplete - Related: CVE-2013-4322. arches needs to be specified -...

Oracle Linux 6 / 7 : lzo (ELSA-2014-0861)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0861 advisory. 2.03-3.1.1 - Fixed integer overflow in decompressor Resolves: CVE-2014-4607 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 / 7 : dovecot (ELSA-2014-0790)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0790 advisory. 1:2.0.9-7.1 - fix CVE-2014-3430: denial of service through maxxing out SSL connections 1108001 Tenable has extracted the preceding description block directl...

Oracle Linux 6 : mod_wsgi (ELSA-2014-0788)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-0788 advisory. - fix for CVE-2014-0242 1104685 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2014-3041)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3041 advisory. - floppy: don't write kernel-only members to FDRAWCMD ioctl output Matthew Daley Orabug: 19028443 CVE-2014-1738 Tenable has extracted the preceding...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3043)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3043 advisory. - fix autofs/afs/etc. magic mountpoint breakage Al Viro Orabug: 19028505 CVE-2014-0203 - SELinux: Fix kernel BUG on empty security contexts. Stephe...