Oracle Linux 5 / 6 : perl (ELSA-2013-0685)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0685 advisory. - Resolves: 915692 - CVE-2012-5526 newline injection due to improper CRLF escaping in Set-Cookie and P3P headers - Resolves: 915692 - CVE-2012-6329...

Oracle Linux 5 / 6 : firefox (ELSA-2011-0471)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0471 advisory. firefox: 3.6.17-1.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.17-1 - Update to 3.6.17 xulrunne...

Oracle Linux 6 : 389-ds-base (ELSA-2012-0997)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0997 advisory. 1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on...

Oracle Linux 6 : squid (ELSA-2013-0505)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0505 advisory. - Resolves: 888198 - CVE-2012-5643: improved upstream patch - Resolves: 888198 - CVE-2012-5643: patch - Resolves: 888198 - CVE-2012-5643: DoS excessive resource...

Oracle Linux 6 : libvirt (ELSA-2011-0479)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0479 advisory. 0.8.1-27.0.1.el60.6 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.6 - Properly initialize supplementary groups for qemu process rhbz668692 -...

Fedora 18 : xen-4.2.2-6.fc18 (2013-10136)

Information leak on XSAVE/XRSTOR capable AMD CPUs XSA-52, CVE-2013-2076 970206 Hypervisor crash due to missing exception recovery on XRSTOR XSA-53, CVE-2013-2077 970204 Hypervisor crash due to missing exception recovery on XSETBV XSA-54, CVE-2013-2078 970202 Multiple vulnerabilities in libelf PV...

Oracle Linux 6 : icedtea-web (ELSA-2013-0753)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0753 advisory. - Updated to latest ustream release of 1.2 branch - 1.2.3 - Security Updates - CVE-2013-1927, RH884705 - fixed gifar vulnerability - CVE-2013-1926,...

Oracle Linux 6 : policycoreutils (ELSA-2011-0414)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0414 advisory. policycoreutils: 2.0.83-19.8 - Fix seunshare to work with /tmp content when SELinux context is not provided Resolves: 679689 2.0.83-19.7 - put back correct chco...

Oracle Linux 6 : qemu-kvm (ELSA-2013-0896)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0896 advisory. - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch bz957056 - Resolves: bz957056 CVE-2013-2007 qemu: guest agent creates files with insecure...

Oracle Linux 6 : rsync (ELSA-2011-0390)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0390 advisory. 3.0.6-5.1 - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 684932 Tenable has...

Oracle Linux 5 / 6 : pidgin (ELSA-2013-0646)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0646 advisory. - Add patch for CVE-2013-0274 RH bug 910653. - Add patch for CVE-2013-0273 RH bug 910653. - Add patch for CVE-2013-0272 RH bug 910653. - Add patch...

Oracle Linux 6 : thunderbird (ELSA-2011-0311)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0311 advisory. 3.1.8-4.0.2.el60 - Replace clean.gif in tarball 3.1.8-4.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.j...

Oracle Linux 6 : kernel (ELSA-2013-0496)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0496 advisory. - virt xen: Fix stack corruption in xenfailsafecallback for 32bit PVOPS guests Andrew Jones 896050 CVE-2013-0190 - block sgio: use different default...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2503)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2503 advisory. - kmod: make requestmodule killable Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - kmod: introduce callmodprobe helper Oleg Nesterov Orabug: 162863...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2038)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2038 advisory. - CVE-2012-3412 sfc: Fix maximum number of TSO segments and minimum TX queue size Ben Hutchings Orabug: 14769994 CVE-2012-3412 - dl2k: Clean up rioioctl...

Oracle Linux 6 : bind (ELSA-2010-0975)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0975 advisory. 32:9.7.0-5.P2.1 - fix CVE-2010-3613 and CVE-2010-3614 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : librsvg2 (ELSA-2011-1289)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1289 advisory. 2.26.0-5.el61.1 - Store node type separately in RsvgNode CVE-2011-3146 Resolves: 735266 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : dhcp (ELSA-2013-0504)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0504 advisory. - Reducing the expiration time for an IPv6 lease may cause the server to crash CVE-2012-3955, 858130 - An error in the handling of malformed client identifiers...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2010)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2010 advisory. - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet...

Oracle Linux 5 / 6 : thunderbird (ELSA-2012-1351)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-1351 advisory. 10.0.8-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.8-1 -...