RHEL 5 / 6 : mod_nss (RHSA-2013:1779)

An updated modnss package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

CentOS 5 / 6 : gimp (CESA-2013:1778)

Updated gimp packages that fix three security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Debian: Security Advisory (DSA-2809-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : python (ELSA-2013-1582)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1582 advisory. - Added fix for CVE-2013-4238 Resolves: rhbz998784 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 / 6 : Unbreakable Enterprise Kernel (ELSA-2013-2585)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2585 advisory. - afkey: fix info leaks in notify messages Mathias Krause Orabug: 17837974 CVE-2013-2234 - drivers/cdrom/cdrom.c: use kzalloc for failing hardware...

Oracle Linux 6 : qemu-kvm (ELSA-2013-1553)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1553 advisory. - Resolves: bz1007330 CVE-2013-4344 qemu: buffer overflow in scsitargetemulatereportluns Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : xorg-x11-server (ELSA-2013-1620)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1620 advisory. - CVE-2013-1940: Fix xf86FlushInput to drain evdev events too 950438 - CVE-2013-4396: Fix use-after free in ImageText requests 1014561 Tenable has extracted the...

Oracle Linux 6 : openssh (ELSA-2013-1591)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1591 advisory. - change default value of MaxStartups - CVE-2010-5107 - 908707 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : Unbreakable Enterprise Kernel (ELSA-2013-2583)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2583 advisory. - HID: pantherlord: validate output report details Kees Cook Orabug: 17841973 CVE-2013-2892 - HID: zeroplus: validate output report details Kees Cook...

Debian: Security Advisory (DSA-2806-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : samba (ELSA-2013-1542)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1542 advisory. - resolves: 1015359 - Fix CVE-2013-0213 and CVE-2013-0214 in SWAT. - resolves: 984808 - CVE-2013-4124: DoS via integer overflow when reading an EA list...

Oracle Linux 6 : 389-ds-base (ELSA-2013-1752)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1752 advisory. - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-sla...

Oracle Linux 6 : php (ELSA-2013-1615)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1615 advisory. - add security fix for CVE-2013-4248 - rename patch to math CVE-2010-3709 name - add security fixes for CVE-2006-7243, CVE-2013-1643 Tenable has...

Oracle Linux 6 : rdma / stack (ELSA-2013-1661)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1661 advisory. ibutils 1.5.7-8 - Add the -output patch to have programs use /var/cache/ibutils instead of /tmp Resolves: bz958569 infinipath-psm Thu Jan 24 2013 Jay...

Oracle Linux 6 : kernel (ELSA-2013-1645)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1645 advisory. - net ipv6: udp packets following an UFO enqueued packet need also be handled by UFO Jiri Pirko 1011930 CVE-2013-4387 - fs compatioctl:...

Oracle Linux 6 : coreutils (ELSA-2013-1652)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1652 advisory. - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various segmentation faults in sort, uniq and join1015019 Tenable has extracted the preceding...

Oracle Linux 6 : sudo (ELSA-2013-1701)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1701 advisory. - added patches for CVE-2013-1775 CVE-2013-2777 CVE-2013-2776 Resolves: rhbz1015355 Tenable has extracted the preceding description block directly from...

Oracle Linux 6 : glibc (ELSA-2013-1605)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1605 advisory. - Fix getaddrinfo stack overflow resulting in application crash CVE-2013-1914, 951213. - Fix multibyte character processing crash in regexp...

Oracle Linux 6 : augeas (ELSA-2013-1537)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1537 advisory. 1.0.0-5 - Don't package lenses in tests/ subdirectory. related: rhbz817753 1.0.0-4 - Rebase to Augeas 1.0.0 resolves: rhbz817753 - Add dependency on...

Oracle Linux 6 : dracut (ELSA-2013-1674)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1674 advisory. 004-336.0.1 - do not strip modules with signatures. orabug 17458249 Jerry Snitselaar - scsiwait module removed in 3.8. Mute errors. orabug 16977193 Maxim Uvarov...