Oracle Linux 6 : libvirt (ELSA-2011-0479)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0479 advisory. 0.8.1-27.0.1.el60.6 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.6 - Properly initialize supplementary groups for qemu process rhbz668692 -...

Oracle Linux 5 / 6 : pango (ELSA-2011-0180)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0180 advisory. - Prevent heap corruption with malformed fonts. CVE-2011-0020 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2021)

Description of changes: CVE-2012-2123: Privilege escalation when assigning permissions using fcaps. If a process increases permissions using fcaps, all of the dangerous personality flags which are cleared for suid apps are not cleared. This has allowed programs that gained elevated permissions...

Oracle Linux 5 / 6 : systemtap (ELSA-2012-0376)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0376 advisory. 1.6-5.0.1.el62 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile - remove buildtime dependency on package...

Oracle Linux 6 : thunderbird (ELSA-2011-1166)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-1166 advisory. 3.1.12-1.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.12-1 -...

Oracle Linux 5 / 6 : httpd (ELSA-2011-1245)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1245 advisory. - updated patch for CVE-2011-3192 from upstream 733062 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Fedora 17 : xen-4.1.5-6.fc17 (2013-10929)

Revised fixes for XSA-55 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Oracle Linux 6 : automake (ELSA-2013-0526)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0526 advisory. 1.11.1-4 - remove BR dependency on java-devel-openjdk 1.11.1-3 - fix for CVE-2012-3386 -- 'make distcheck' was making the directory distdir world-readable 84846...

Oracle Linux 6 : samba4 (ELSA-2013-0506)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0506 advisory. 4.0.0-55.rc4 - Fix dependencies of samba4-test package. - related: 896142 4.0.0-54.rc4 - Fix summary and description of dc subpackages. - resolves: 896142 -...

Oracle Linux 6 : libvirt (ELSA-2012-1202)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1202 advisory. libvirt-0.9.10-21.0.1.el63.4 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el63.4 - daemon: Fix crash in virTypedParameterArrayClear...

Oracle Linux 6 : NetworkManager (ELSA-2011-1338)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1338 advisory. - ifcfg-rh: CVE-2011-3364: filter newline characters when writing into ifcfg- files rh 737338 Tenable has extracted the preceding description block directly fro...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2016)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2016 advisory. - kernel: Fix unlimited socket backlog DoS CVE-2010-4251 - rds: prevent BUGON triggering on congestion map updates CVE-2011-1023 - epoll: prevent...

Oracle Linux 6 : 389-ds-base (ELSA-2013-0503)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0503 advisory. 1.2.11.15-11 - Resolves: Bug 896256 - updating package touches configuration files 1.2.11.15-10 - Resolves: Bug 889083 - For modifiersName/internalModifiersName...

Oracle Linux 6 : post (ELSA-2011-0423)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0423 advisory. 2:2.6.6-2.1 - fix CVE-2011-0411 682978 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 : httpd (ELSA-2011-1391)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1391 advisory. - add security fixes for CVE-2011-3347, CVE-2011-3368 743901 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : openldap (ELSA-2012-0899)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0899 advisory. - security fix: CVE-2012-1164: assertion failure by processing search queries requesting only attributes for particular entry 813162 Tenable has extracted the...

Oracle Linux 6 : pki-core (ELSA-2013-0511)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0511 advisory. 9.0.3-30 - Resolves 902474 - upgrading IPA from 2.2 to 3.0 sees certmonger errors 9.0.3-29 - Resolves 891985 - Increase FreeIPA root CA validity 9.0.3-28 -...

Oracle Linux 6 : dhcp (ELSA-2013-0504)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0504 advisory. - Reducing the expiration time for an IPv6 lease may cause the server to crash CVE-2012-3955, 858130 - An error in the handling of malformed client identifiers...

Oracle Linux 6 : kernel (ELSA-2012-0571)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0571 advisory. - virt VMX: vmxsetcr0 expects kvm-srcu locked Marcelo Tosatti 808206 807507 CVE-2012-1601 - virt KVM: Ensure all vcpus are consistent with in-kernel...

Oracle Linux 6 : openldap (ELSA-2012-1151)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1151 advisory. - CVE-2012-2668 825875 cipher suite selection by name can be ignored default cipher suite is always selected Tenable has extracted the preceding description blo...