Oracle Linux 6 : nspr / nss / nss-util (ELSA-2013-0213)

From Red Hat Security Advisory 2013:0213 : Updated nss, nss-util, and nspr packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Netwo...

Oracle Linux 6 : thunderbird (ELSA-2012-1089)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-1089 advisory. 10.0.6-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.6-1 -...

Oracle Linux 5 / 6 : openssl (ELSA-2012-0518)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0518 advisory. - fix for CVE-2012-2110 - memory corruption in asn1d2ireadbio 814185 openssl098e: Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : qemu-kvm (ELSA-2012-1234)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1234 advisory. 0.12.1.2-2.295.el63.2 - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch bz851257 - Resolves: bz851257 EMBARGOED CVE-2012-3515 qemu/kvm: VT100...

Oracle Linux 6 : rdma (ELSA-2013-0509)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0509 advisory. ibacm 1.0.8-0.git7a3adb7 - Update to latest upstream via git repo - Resolves: bz866222, bz866223 ibsim 0.5-7 - Bump and rebuild against latest opensm -...

Oracle Linux 5 / 6 : expat (ELSA-2012-0731)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0731 advisory. - use symbol version for XMLSetHashSalt CVE-2012-0876, 816306 - add security fix for CVE-2012-1148 811825 Tenable has extracted the preceding...

Oracle Linux 6 : kernel (ELSA-2011-0421)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0421 advisory. - fs Revert 'fs inotify: stop kernel memory leak on file creation failure' Eric Paris 656831 656832 CVE-2010-4250 - dvb kernel: av7110 negative array...

Oracle Linux 6 : kernel (ELSA-2011-1849)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1849 advisory. - dm fixing test for NULL pointer testing Paolo Bonzini 752379 752380 CVE-2011-4127 - dm do not forward ioctls from logical volumes to the underlying device Pao...

Oracle Linux 6 : mysql (ELSA-2011-0164)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0164 advisory. 5.1.52-1.1 - Update to MySQL 5.1.52, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html including numerous small...

Oracle Linux 6 : kernel (ELSA-2013-0496)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0496 advisory. - virt xen: Fix stack corruption in xenfailsafecallback for 32bit PVOPS guests Andrew Jones 896050 CVE-2013-0190 - block sgio: use different default...

Oracle Linux 6 : kernel (ELSA-2012-1366)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1366 advisory. - netdrv sfc: Fix maximum number of TSO segments and minimum TX queue size Nikolay Aleksandrov 845556 845557 CVE-2012-3412 Tenable has extracted the preceding...

Oracle Linux 6 : pam (ELSA-2013-0521)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0521 advisory. - fix environment file handling problems - CVE-2011-3148 746619 and CVE-2011-3148 746620 Tenable has extracted the preceding description block directly...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2503)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2503 advisory. - kmod: make requestmodule killable Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - kmod: introduce callmodprobe helper Oleg Nesterov Orabug: 162863...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2039)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2039 advisory. 2.6.39-200.33.1 - sfc: Replace some literal constants with EFXPAGESIZE/EFXBUFSIZE Ben Hutchings Orabug: 14769994 - CVE-2012-3412 sfc: Fix maximum number of...

Oracle Linux 5 / 6 : curl (ELSA-2013-0983)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0983 advisory. 7.19.7-37 - fix heap-based buffer overflow in curleasyunescape CVE-2013-2174 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2008)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2008 advisory. - regset: Return -EFAULT, not -EIO, on host-side memory fault H. Peter Anvin CVE-2012-1097 - regset: Prevent null pointer reference on readonly...

Oracle Linux 6 : nss-pam-ldapd (ELSA-2013-0590)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0590 advisory. 0.7.5-18.1 - Apply upstream r1926 to resolve FDSET array index error - Resolves: rhbz915361 Tenable has extracted the preceding description block directly from...

Oracle Linux 6 : gdb (ELSA-2013-0522)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0522 advisory. - Fix CVE-2011-4355 gdb: arbitrary code execution via .debuggdbscripts' Jan Kratochvil, RH BZ 756116. Tenable has extracted the preceding description block...

Oracle Linux 6 : openswan (ELSA-2011-1356)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1356 advisory. 2.6.32-4.2 Resolves: 742069 CVE-2011-3380 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 6 : dhcp (ELSA-2013-0504)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0504 advisory. - Reducing the expiration time for an IPv6 lease may cause the server to crash CVE-2012-3955, 858130 - An error in the handling of malformed client identifiers...