Oracle Linux 5 : httpd (ELSA-2009-1579)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1579 advisory. 2.2.3-31.0.1.el54.2 - replace index.html with Oracle's index page oracleindex.html - update vstring and distro in specfile 2.2.3-31.2 - add security...

Oracle Linux 5 : xerces-j2 (ELSA-2009-1615)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1615 advisory. 0:2.7.1-7jpp.2.2 - Specifies target=1.3 for compilation Resolves: rhbz526017 0:2.7.1-7jpp.2.1 - Add patch for CVE-2009-2625 Resolves: rhbz526017 Tenable has...

Oracle Linux 5 : kernel (ELSA-2009-1193)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1193 advisory. - fs ecryptfs: check tag 11 packet literal data buffer size Eric Sandeen 512862 512863 CVE-2009-2406 - fs ecryptfs: check tag 3 packet encrypted key si...

Oracle Linux 5 : ipa-client (ELSA-2013-0189)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0189 advisory. 2.1.3-5.2 - Add missing man page option --ca-cert-file. 878217 2.1.3-5.1 - Fix python syntax backport issue in CVE patch. 878217 2.1.3-5 - Use secure method to...

Oracle Linux 5 : firefox (ELSA-2009-1095)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1095 advisory. firefox: 3.0.11-2.0.1.el53 - Update firstrun and homepage URLs - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and remove...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2013-0957)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0957 advisory. 1.7.0.25-2.3.10.3.0.1.el64 - Update DISTRONAME in specfile 1.7.0.25-2.3.10.3.el6 - removed upstreamed patch1000 MBeanFix.patch - updated to newer...

Oracle Linux 5 / 6 : firefox (ELSA-2011-0310)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0310 advisory. firefox: 3.6.14-4.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.14-4 - Update to build3 3.6.14-3...

Oracle Linux 5 : freetype (ELSA-2010-0737)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0737 advisory. - Modify freetype-2.2.1-CVE-2010-3054.patch - Add freetype-2.2.1-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add...

Oracle Linux 5 / 6 : firefox (ELSA-2012-0387)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0387 advisory. firefox: 10.0.3-1.0.1.el62 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 10.0.3-1 - Update to 10.0.3 ESR xulrunne...

Fedora 18 : python-bugzilla-0.9.0-1.fc18 (2013-11419)

Rebased to version 0.9.0 - bugzilla: modify: add --dependson Don Zickus - bugzilla: new: add --groups option Paul Frields - bugzilla: modify: Allow setting nearly every bug parameter - NovellBugzilla implementation removed, can't get it to work - Gracefully handle private bugs bz 963979 - Raise...

Fedora 18 : ruby-1.9.3.448-31.fc18 (2013-12123)

A vulnerability was found in Ruby's SSL client that could allow man-in-the-middle attackers to spoof SSL servers via valid certificate issued by a trusted certification authority. This vulnerability has been assigned the CVE identifier CVE-2013-4073. This new update should solve this issue. Note...

Oracle Linux 6 : libxml2 (ELSA-2012-0018)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0018 advisory. - Make sure the parser returns when getting a Stop order CVE-2011-3905 - Fix an allocation error when copying entities CVE-2011-3919 Tenable has...

Oracle Linux 6 : libpng (ELSA-2011-1105)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1105 advisory. 2:1.2.46-1 - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 Resolves: 721305 Tenable has...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2013-0752)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0752 advisory. 1.7.0.19-2.3.9.1.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to Enterprise Linux 1.7.0.19-2.3.9.1.el5 - updated to updated IcedTea 2.3.9 wi...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2007)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2007 advisory. - regset: Return -EFAULT, not -EIO, on host-side memory fault H. Peter Anvin CVE-2012-1097 - regset: Prevent null pointer reference on readonly...

Oracle Linux 5 : kdelibs (ELSA-2009-1127)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1127 advisory. - Resolves: 505621, CVE-2009-1687, integer overflow in KJS JavaScript garbage collector CVE-2009-1698, KHTML CSS parser - incorrect handling CSS style...

Oracle Linux 5 : Important: / cups (ELSA-2008-0157)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0157 advisory. 1.2.4-11.14:.4 - Prevent double-free when a browsed class has the same name as a printer or vice versa bug 433766, STR 2656. 1.2.4-11.14:.3 - pdftops: Fix inval...

Oracle Linux 6 : xorg-x11-drv-qxl (ELSA-2013-0218)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0218 advisory. 0.0.14-14.el6 - backport of upstream commit 30b4b72cdbdf9f0e92a8d1c4e01779f60f15a741 support ASYNC io calls and interrupt handling busy wait Related: 888364...

Oracle Linux 5 / 6 : cups (ELSA-2013-0580)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0580 advisory. - Fix for CVE-2012-5519 patch: handle blacklisted lines that have no value part gracefully. - Added documentation for new CVE-2012-5519 option. - Applied...

Oracle Linux 5 : Critical: / pcre (ELSA-2007-0967)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0967 advisory. 6.6-2.1 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660 6.6-1.2 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660 Tenable has extracted the preceding...