Oracle Linux 5 / 6 : libxfont (ELSA-2014-0018)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0018 advisory. 1.4.5-3 - cve-2013-6462.patch: sscanf overflow bug 1049684 - sscanf-hardening.patch: Some other sscanf hardening fixes 1049684 Tenable has extracted the...

Oracle Linux 6 : openssl (ELSA-2014-0015)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0015 advisory. - fix CVE-2013-4353 - Invalid TLS handshake crash - fix CVE-2013-6450 - possible MiTM attack on DTLS1 Tenable has extracted the preceding description...

Oracle Linux 5 : gnupg (ELSA-2014-0016)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0016 advisory. 1.4.5-18.1 - fix CVE-2013-4576 acoustic side channel attack on RSA private keys Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2589)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2589 advisory. - kernel/signal.c: stop info leak via the tkill and the tgkill syscalls Emese Revfy Orabug: 17951083 CVE-2013-2141 - ipoutput: do skb ufo init for...

Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2013-2587)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2587 advisory. - ipoutput: do skb ufo init for peeked non ufo skb as well Jiri Pirko Orabug: 17951078 CVE-2013-4470 - ip6output: do skb ufo init for peeked non ufo sk...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2588)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2588 advisory. - ip6output: do skb ufo init for peeked non ufo skb as well Jiri Pirko Orabug: 17951806 CVE-2013-4470 - ipoutput: do skb ufo init for peeked non uf...

Oracle Linux 6 : nss, / nspr, / and / nss-util (ELSA-2013-1829)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1829 advisory. - Resolves: rhbz1032485 - CVE-2013-5607 MFSA 2013-103 Avoid unsigned integer wrapping in PLArenaAllocate MFSA 2013-103 nss - Resolves: Bug 1032470 -...

Oracle Linux 6 : kernel (ELSA-2013-1801)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1801 advisory. - x86 kvm: fix cross page vapicaddr access Paolo Bonzini 1032214 1032215 CVE-2013-6368 - x86 kvm: fix division by zero in apicgettmcct Paolo Bonzini...

Oracle Linux 5 : php (ELSA-2013-1814)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1814 advisory. 5.1.6-43 - drop unneeded patch 5.1.6-42 - add security fixes for CVE-2012-2688, CVE-2011-1398, CVE-2013-1643, CVE-2013-6420 Tenable has extracted the...

Oracle Linux 5 / 6 : thunderbird (ELSA-2013-1823)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-1823 advisory. 24.2.0-1.0.1.el65 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Make sure build with nspr-devel = 4.10....

Oracle Linux 5 / 6 : php53 / and / php (ELSA-2013-1813)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1813 advisory. 5.3.3-27 - add security fix for CVE-2013-6420 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 6 : samba4 (ELSA-2013-1805)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1805 advisory. - resolves: 1018039 - Fix CVE-2013-4408. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 5 / 6 : gimp (ELSA-2013-1778)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1778 advisory. - fix overflow in XWD loader CVE-2013-1913, CVE-2013-1978 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : evolution (ELSA-2013-1540)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1540 advisory. - Add patch for RH bug 990380 CVE-2013-4166 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 / 6 : Unbreakable Enterprise Kernel (ELSA-2013-2585)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2585 advisory. - afkey: fix info leaks in notify messages Mathias Krause Orabug: 17837974 CVE-2013-2234 - drivers/cdrom/cdrom.c: use kzalloc for failing hardware...

Oracle Linux 6 : qemu-kvm (ELSA-2013-1553)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1553 advisory. - Resolves: bz1007330 CVE-2013-4344 qemu: buffer overflow in scsitargetemulatereportluns Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : ruby (ELSA-2013-1764)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1764 advisory. 1.8.7.352-13 - Workaround build issues against OpenSSL with enabled ECC curves. - Make DRb compatible with OpenSSL 1.0.1...

Oracle Linux 6 : openssh (ELSA-2013-1591)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1591 advisory. - change default value of MaxStartups - CVE-2010-5107 - 908707 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 5 / 6 : Unbreakable Enterprise Kernel (ELSA-2013-2584)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2584 advisory. - fs/compatioctl.c: VIDEOSETSPUPALETTE missing error check Kees Cook Orabug: 17842208 CVE-2013-1928 - Bluetooth: RFCOMM - Fix info leak via...

Oracle Linux 6 : xorg-x11-server (ELSA-2013-1620)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1620 advisory. - CVE-2013-1940: Fix xf86FlushInput to drain evdev events too 950438 - CVE-2013-4396: Fix use-after free in ImageText requests 1014561 Tenable has extracted the...