Oracle Linux 6 : ipa (ELSA-2013-0188)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0188 advisory. 2.2.0-17.el63.1 - Fix changelog issue. The dist tag was in each entry and changing the build release changed history. 878219 2.2.0-17.el63 - Use a secure method...

Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2012-1037)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1037 advisory. - Update to PostgreSQL 8.4.12, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-12.html including the fixes for...

Oracle Linux 5 : gimp (ELSA-2012-1181)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1181 advisory. - fix overflow in GIF loader CVE-2012-3481 - fix overflows in PSD plugin CVE-2009-3909, CVE-2012-3402 - fix heap corruption and overflow in GIF plug-in...

Oracle Linux 6 : httpd (ELSA-2013-0512)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0512 advisory. - add security fix for CVE-2012-2687 850794 - add security fixes for CVE-2011-4317, CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 787599 Tenable has...

Oracle Linux 5 : kvm (ELSA-2012-0676)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0676 advisory. - CVE: CVE-2012-2121 - Resolves: bz814151 CVE-2012-2121 kvm: device assignment page leak rhel-5.8 - Resolves: bz808205 CVE-2012-1601 kernel: kvm:...

Oracle Linux 5 : xen (ELSA-2011-1401)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1401 advisory. 3.0.3-132.el57.2 - Release device backends before restarting guest on the destination machine rhbz 743850 - Fix SCSI buffer overflow and disable SCSI CD-ROMs rh...

Oracle Linux 5 : squirrelmail (ELSA-2009-1066)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1066 advisory. - fix broken patch for CVE-2009-1579 - fix broken patch for CVE-2009-1579 - fix: CVE-2009-1581 : CSS positioning vulnerability - fix: CVE-2009-1579 :...

Oracle Linux 6 : poppler (ELSA-2010-0859)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0859 advisory. - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add...

Oracle Linux 5 : libtiff (ELSA-2009-1159)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1159 advisory. - Fix buffer overrun risks caused by unchecked integer overflow CVE-2009-2347 Resolves: 507725 - Fix some more LZW decoding vulnerabilities CVE-2009-22...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2016)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2016 advisory. - kernel: Fix unlimited socket backlog DoS CVE-2010-4251 - rds: prevent BUGON triggering on congestion map updates CVE-2011-1023 - epoll: prevent...

Oracle Linux 6 : kernel (ELSA-2012-1304)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1304 advisory. - net rds: set correct msgnamelen Weiping Pan 822729 822731 CVE-2012-3430 - mm hugetlb: fix resvmap leak in error path Motohiro Kosaki 824350 824351...

Oracle Linux 5 : lftp (ELSA-2010-0585)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0585 advisory. - Related: CVE-2010-2251 - document change of xfer:clobber default value in manpage, respect xfer:clobber on with xfer:auto-rename on old behaviour - Related:...

Oracle Linux 5 : w3m (ELSA-2010-0565)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0565 advisory. 0.5.1-17 - Resolves:rh604861:Clear execstack requirement also for ia64 architecture 0.5.1-16 - Resolves:rh604861:CVE-2010-2074 w3m: doesn't handle NULL in Commo...

Oracle Linux 6 : glibc (ELSA-2012-0393)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0393 advisory. 2.12-1.47.el62.9 - Always use another area after a failed allocation in the main arena 795328 - Remove sse3 memcpy 695812 changes 799259 2.12-1.47.el62.8 - Avoi...

Oracle Linux 6 : sssd (ELSA-2013-0663)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0663 advisory. 1.9.2-82.4 - Resolves: rhbz911298 - sssd: simple access provider flaw prevents intended ACL use when client to an AD provider 1.9.2-82.3 - Fix...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2523 advisory. - block: default SCSI command filter does not accomodate commands overlap across device classes Jamie Iles Orabug: 16387137 CVE-2012-4542 - KVM: x86: Conver...

Oracle Linux 5 : firefox (ELSA-2009-0449)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0449 advisory. firefox: 3.0.10-1.0.1.el5 - Update firstrun and homepage URLs - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the...

Oracle Linux 5 / 6 : ecryptfs-utils (ELSA-2011-1241)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1241 advisory. - privilege escalation via mountpoint race conditions CVE-2011-1831, CVE-2011-1832 - race condition when checking source during mount CVE-2011-1833...

Fedora 17 : haproxy-1.4.24-1.fc17 (2013-11234)

Update to upstream stable release 1.4.24. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Oracle Linux 5 / 6 : firefox (ELSA-2012-1210)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1210 advisory. firefox 10.0.7-1.0.1.el63 - Replace firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js 10.0.7-1 - Update to 10.0.7 ESR xulrunner...