Oracle Linux 5 / 6 : firefox (ELSA-2013-0820)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0820 advisory. firefox 17.0.6-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.6-1 - Update to 17.0.6 ESR 17.0.5-2 ...

Oracle Linux 6 : samba / and / cifs-utils (ELSA-2011-1221)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1221 advisory. - Security Release, fixes CVE-2011-2694, CVE-2011-2522 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : poppler (ELSA-2010-0859)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0859 advisory. - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add...

Oracle Linux 6 : cifs-utils (ELSA-2012-0902)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0902 advisory. 4.8.1-10 - mount.cifs: don't allow unprivileged users to mount onto dirs they can't chdir into bz 812782 4.8.1-9 - cifs.upcall: use krb5snametoprincipal to...

Oracle Linux 6 : NetworkManager (ELSA-2011-1338)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1338 advisory. - ifcfg-rh: CVE-2011-3364: filter newline characters when writing into ifcfg- files rh 737338 Tenable has extracted the preceding description block directly fro...

Oracle Linux 6 : 389-ds-base (ELSA-2012-0997)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0997 advisory. 1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on...

Oracle Linux 6 : kernel (ELSA-2012-1304)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1304 advisory. - net rds: set correct msgnamelen Weiping Pan 822729 822731 CVE-2012-3430 - mm hugetlb: fix resvmap leak in error path Motohiro Kosaki 824350 824351...

Oracle Linux 6 : pki-core (ELSA-2013-0511)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0511 advisory. 9.0.3-30 - Resolves 902474 - upgrading IPA from 2.2 to 3.0 sees certmonger errors 9.0.3-29 - Resolves 891985 - Increase FreeIPA root CA validity 9.0.3-28 -...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2016)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2016 advisory. - kernel: Fix unlimited socket backlog DoS CVE-2010-4251 - rds: prevent BUGON triggering on congestion map updates CVE-2011-1023 - epoll: prevent...

Oracle Linux 6 : foomatic (ELSA-2011-1110)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1110 advisory. 4.0.4-1:.1 - Applied patch to fix improper sanitization of command line options CVE-2011-2697, bug 721001. Tenable has extracted the preceding description block...

Oracle Linux 6 : 389-ds-base (ELSA-2013-0628)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0628 advisory. 1.2.11.15-12 - Resolves: Bug 910994 - PamConfig schema not updated during upgrade - Resolves: Bug 910995 - Valgrind reports memleak in...

Oracle Linux 6 : samba (ELSA-2010-0860)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0860 advisory. - Security Release, fixes CVE-2010-3069 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 : kernel (ELSA-2011-0283)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0283 advisory. - net tcp: Increase TCPMAXSEG socket option minimum to TCPMINMSS Frantisek Hrbata 652510 652511 CVE-2010-4165 - perf perfevents: Fix perfcountermmap ho...

Oracle Linux 5 / 6 : firefox (ELSA-2011-0471)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0471 advisory. firefox: 3.6.17-1.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.17-1 - Update to 3.6.17 xulrunne...

Oracle Linux 6 : libtasn1 (ELSA-2012-0427)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0427 advisory. 2.3-3.1 - fix CVE-2012-1569 - missing length check when decoding DER lengths 804920 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 5 / 6 : perl (ELSA-2013-0685)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0685 advisory. - Resolves: 915692 - CVE-2012-5526 newline injection due to improper CRLF escaping in Set-Cookie and P3P headers - Resolves: 915692 - CVE-2012-6329...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2513)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2513 advisory. - wakeupprocess should be never used to wakeup a TASKSTOPPED/TRACED task Oleg Nesterov Orabug: 16405869 CVE-2013-0871 - ptrace: ensure...

Oracle Linux 6 : dnsmasq (ELSA-2013-0277)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0277 advisory. - Fix CVE-2012-3411 rhbz882251 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 6 : kernel (ELSA-2013-0830)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0830 advisory. 2.6.32-358.6.2 - kernel perf: fix perfsweventenabled array out-of-bound access Petr Matousek 962793 962794 CVE-2013-2094 Tenable has extracted the preceding...

Oracle Linux 6 : axis (ELSA-2013-0269)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0269 advisory. 0:1.2.1-7.3 - Add missing connection hostname check against X.509 certificate name - Resolves: CVE-2012-5784 Tenable has extracted the preceding description blo...