Oracle Linux 6 : jasper (ELSA-2011-1807)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1807 advisory. 1.900.1-15.1 - CERT VU887409: heap buffer overflow flaws lead to arbitrary code execution 749149 Tenable has extracted the preceding description block...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-1384)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1384 advisory. 1:1.6.0.0-1.50.1.11.5 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865045 1:1.6.0.0-1.49.1.11.5 - Updated to IcedTea6 1.11.5 -...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2523 advisory. - block: default SCSI command filter does not accomodate commands overlap across device classes Jamie Iles Orabug: 16387137 CVE-2012-4542 - KVM: x86: Conver...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2012-1386)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1386 advisory. 1.7.0.9-2.3.3.0.1.el63.1 - Update DISTRONAME in specfile 1.7.0.9-2.3.3.el6.1 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865050...

Oracle Linux 6 : squid (ELSA-2011-1791)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1791 advisory. -7:3.1.10-1.el62.1 - Resolves: 755016 - CVE-2011-4096: Invalid free by processing CNAME DNS record Tenable has extracted the preceding description block directl...

Oracle Linux 6 : kernel (ELSA-2012-1426)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1426 advisory. - mm hugetlb: do not use vmahugecacheoffset for vmapriotreeforeach Frederic Weisbecker 843034 843035 CVE-2012-2133 - mm hugepages: fix use after free b...

Oracle Linux 6 : pidgin (ELSA-2012-1102)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1102 advisory. - Add patch for CVE-2011-2485 RH bug 837561. - Add patch for CVE-2012-1178 RH bug 837560. - Add patch for CVE-2012-2318 RH bug 837560. - Add patch for...

Oracle Linux 6 : xerces-j2 (ELSA-2011-0858)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0858 advisory. - Add xerces-j2-CVE-2009-2625.patch Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 6 : kernel (ELSA-2012-0052)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0052 advisory. - fs Revert 'proc: enable writing to /proc/pid/mem' Johannes Weiner 782649 782650 CVE-2012-0056 Tenable has extracted the preceding description block directly...

Oracle Linux 6 : gdm (ELSA-2011-0395)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0395 advisory. 2.30.4-21.0.2.el60.1 - Added oracle-enterprise.patch to show oracle-release contents. 2.30.4-21.1 - Fix CVE-2011-0727 Tenable has extracted the preceding...

Oracle Linux 6 : cifs-utils (ELSA-2012-0902)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0902 advisory. 4.8.1-10 - mount.cifs: don't allow unprivileged users to mount onto dirs they can't chdir into bz 812782 4.8.1-9 - cifs.upcall: use krb5snametoprincipal to...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2525)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2525 advisory. - net: fix incorrect credentials passing Linus Torvalds Orabug: 16836975 CVE-2013-1979 - tg3: fix length overflow in VPD firmware parsing Kees Cook...

Oracle Linux 6 : mutt (ELSA-2011-0959)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0959 advisory. 1.5.20-2.20091214hg736b6a.el61.1 - Fixed hostname verification of x.509 certificates. Resolves: 716889 CVE-2011-1429 Tenable has extracted the preceding...

Oracle Linux 6 : systemtap (ELSA-2011-1088)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1088 advisory. 1.4.6.0.1.el61.2 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile 1.4-6.2 - bz716476 patch - bz716489 patch...

Oracle Linux 6 : sssd (ELSA-2013-0508)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0508 advisory. 1.9.2-82 - Resolves: rhbz888614 - Failure in memberof can lead to failed database update 1.9.2-81 - Resolves: rhbz903078 - TOCTOU race conditions by...

Oracle Linux 6 : kernel (ELSA-2011-1465)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1465 advisory. - net vlan: fix panic when handling priority tagged frames Andy Gospodarek 742849 714936 CVE-2011-3593 - kernel fix taskstats io infoleak Jerome Marcha...

Oracle Linux 6 : openoffice.org (ELSA-2011-0183)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0183 advisory. - CVE-2010-4643 heap based buffer overflow when parsing TGA files - CVE-2010-4253 heap based buffer overflow in PPT import - CVE-2010-3450 directory...

Oracle Linux 6 : pango (ELSA-2011-0309)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0309 advisory. 1.28.1-3.el60.5 - Prevent an integer overflow in hbbufferensure Related: 679693 1.28.1-3.el60.4 - Check for realloc failures in hbbufferensure CVE-2011-0064...

Oracle Linux 5 / 6 : firefox (ELSA-2012-1407)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1407 advisory. firefox 10.0.10-1.0.1.el63 - Replaced firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js 10.0.10-1 - Update to 10.0.10 ESR 10.0.8...

Oracle Linux 6 : system-config-firewall (ELSA-2011-0953)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0953 advisory. - fixed possible privilege escalation flaw via use of python pickle CVE-2011-2520, replaced pickle by json rhbz717985 Tenable has extracted the preceding...