Oracle Linux 5 / 6 : ecryptfs-utils (ELSA-2011-1241)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1241 advisory. - privilege escalation via mountpoint race conditions CVE-2011-1831, CVE-2011-1832 - race condition when checking source during mount CVE-2011-1833...

Oracle Linux 6 : sssd (ELSA-2013-0508)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0508 advisory. 1.9.2-82 - Resolves: rhbz888614 - Failure in memberof can lead to failed database update 1.9.2-81 - Resolves: rhbz903078 - TOCTOU race conditions by...

Oracle Linux 6 : kernel (ELSA-2011-1465)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1465 advisory. - net vlan: fix panic when handling priority tagged frames Andy Gospodarek 742849 714936 CVE-2011-3593 - kernel fix taskstats io infoleak Jerome Marcha...

Oracle Linux 6 : krb5-appl (ELSA-2011-0920)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0920 advisory. 1.0.1-2.1 - ftpd: add candidate patch to detect setegid/setregid/setresgid and check for errors when calling them MITKRB5-SA-2011-005, CVE-2011-1526, 713341...

Oracle Linux 6 : qemu-kvm (ELSA-2011-0345)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0345 advisory. - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch bz668598 - Resolves: bz668598 CVE-2011-0011 qemu-kvm: Setting VNC password to empty string...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2504)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2504 advisory. - exec: do not leave bprm-interp on stack Kees Cook Orabug: 16286741 CVE-2012-4530 - exec: use -ELOOP for max recursion depth Kees Cook Orabug:...

Oracle Linux 6 : openjpeg (ELSA-2012-1068)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1068 advisory. - Apply patches for CVE-2009-5030, CVE-2012-3358 Resolves: 831561 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : krb5 (ELSA-2011-1379)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1379 advisory. 1.9-9.2 - apply upstream patch to fix a null pointer derference with the LDAP kdb backend CVE-2011-1527, an assertion failure with multiple kdb backend...

Oracle Linux 6 : dhcp (ELSA-2012-1141)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1141 advisory. - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected servers. CVE-2012-3571, 843120 Tenable h...

Oracle Linux 5 / 6 : firefox (ELSA-2013-0144)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0144 advisory. firefox 10.0.12-1.0.1.el63 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 10.0.12-1 - Update to 10.0.12 ESR...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2523 advisory. - block: default SCSI command filter does not accomodate commands overlap across device classes Jamie Iles Orabug: 16387137 CVE-2012-4542 - KVM: x86: Conver...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2011-2024)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2024 advisory. - inetdiag: fix inetdiagbcaudit Eric Dumazet CVE-2011-2213 - net gre: fix netns vs proto registration ordering CVE-2011-1767 - net tunnels: fix netns v...

Oracle Linux 6 : jasper (ELSA-2011-1807)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1807 advisory. 1.900.1-15.1 - CERT VU887409: heap buffer overflow flaws lead to arbitrary code execution 749149 Tenable has extracted the preceding description block...

Oracle Linux 6 : nss (ELSA-2010-0862)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0862 advisory. nss: 3.12.8-1.0.1.el6 - Update expired PayPalEE.cert to fix build failure - Use blank image instead of clean.gif in nss-3.12.8-stripped.tar.bz2 3.12.8-1 - Updat...

Oracle Linux 6 : quagga (ELSA-2012-1259)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1259 advisory. - improve fix for CVE-2011-3325 - fix CVE-2011-3323 - fix CVE-2011-3324 - fix CVE-2011-3325 - fix CVE-2011-3326 - fix CVE-2011-3327 - fix CVE-2012-0255...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2525)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2525 advisory. - net: fix incorrect credentials passing Linus Torvalds Orabug: 16836975 CVE-2013-1979 - tg3: fix length overflow in VPD firmware parsing Kees Cook...

Oracle Linux 6 : stunnel (ELSA-2013-0714)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0714 advisory. 4.29-3 Resolves: CVE-2013-1762 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 5 / 6 : samba / and / samba3x (ELSA-2012-0533)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0533 advisory. - Security Release, fixes CVE-2012-2111 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 : bind (ELSA-2012-1549)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1549 advisory. 32:9.8.2-0.10.rc1.6 - fix CVE-2012-5688 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 5 / 6 : java-1.6.0-openjdk (ELSA-2011-0281)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0281 advisory. 1.6.0.0-1.39.b17 - respin of IcedTea6 1.7.10 - Resolves: rhbz676276 1.6.0.0-1.37.b17 - Updated to IcedTea6 1.7.10 - Resolves: rhbz676276 Tenable ha...