Oracle Linux 6 : tomcat6 (ELSA-2013-0964)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0964 advisory. - Related: CVE-2013-2067 Session fixation Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 6 : nss, / nspr, / and / nss-util (ELSA-2012-1091)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1091 advisory. nspr 4.9.1-2 - Related: rhbz833762 - Update License to MPLv2.0 4.9.1-1 - Resolves: rhbz833762 - Update to NSPR491RTM nss 3.13.5-1.0.1.el63 - Added...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2503)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2503 advisory. - kmod: make requestmodule killable Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - kmod: introduce callmodprobe helper Oleg Nesterov Orabug: 162863...

Oracle Linux 5 / 6 : apr-util (ELSA-2010-0950)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0950 advisory. 1.3.9-3.1 - add security fix for CVE-2010-1623 659253 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : kernel (ELSA-2012-1366)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1366 advisory. - netdrv sfc: Fix maximum number of TSO segments and minimum TX queue size Nikolay Aleksandrov 845556 845557 CVE-2012-3412 Tenable has extracted the preceding...

Oracle Linux 6 : ruby (ELSA-2013-0612)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0612 advisory. - escaping vulnerability about Exceptiontos / NameErrortos ruby-1.8.7-p371-CVE-2012-4481.patch - Related: rhbz915379 Tenable has extracted the precedin...

Oracle Linux 6 : librsvg2 (ELSA-2011-1289)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1289 advisory. 2.26.0-5.el61.1 - Store node type separately in RsvgNode CVE-2011-3146 Resolves: 735266 Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 / 6 : thunderbird (ELSA-2012-1351)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-1351 advisory. 10.0.8-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.8-1 -...

Oracle Linux 6 : thunderbird (ELSA-2011-0311)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0311 advisory. 3.1.8-4.0.2.el60 - Replace clean.gif in tarball 3.1.8-4.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.j...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2010)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2010 advisory. - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet...

Oracle Linux 6 : rsync (ELSA-2011-0390)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0390 advisory. 3.0.6-5.1 - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 684932 Tenable has...

Oracle Linux 6 : util-linux-ng (ELSA-2013-0517)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0517 advisory. - fix 892471 - CVE-2013-0157 mount folder existence information disclosure Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : dovecot (ELSA-2013-0520)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0520 advisory. 1:2.0.9-5 - script-login did not drop privileges correctly 709095 - fix directory traversal due to not obeying chroot directive 709097 - check proxy...

Oracle Linux 6 : thunderbird (ELSA-2011-1166)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-1166 advisory. 3.1.12-1.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.12-1 -...

Oracle Linux 6 : kernel (ELSA-2012-0571)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0571 advisory. - virt VMX: vmxsetcr0 expects kvm-srcu locked Marcelo Tosatti 808206 807507 CVE-2012-1601 - virt KVM: Ensure all vcpus are consistent with in-kernel...

Oracle Linux 5 / 6 : systemtap (ELSA-2012-0376)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0376 advisory. 1.6-5.0.1.el62 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile - remove buildtime dependency on package...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2019)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2019 advisory. - net dccp: handle invalid feature options length CVE-2011-1770 - net can: add missing socket check in can/raw release CVE-2011-1748 Tenable has...

Oracle Linux 6 : automake (ELSA-2013-0526)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0526 advisory. 1.11.1-4 - remove BR dependency on java-devel-openjdk 1.11.1-3 - fix for CVE-2012-3386 -- 'make distcheck' was making the directory distdir world-readable 84846...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2524)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2524 advisory. 2.6.39-400.24.1 - perf: Treat attr.config as u64 in perfsweventinit Tommi Rantala Orabug: 16808734 CVE-2013-2094 Tenable has extracted the preceding...

Oracle Linux 6 : dhcp (ELSA-2013-0504)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0504 advisory. - Reducing the expiration time for an IPv6 lease may cause the server to crash CVE-2012-3955, 858130 - An error in the handling of malformed client identifiers...