Oracle Linux 6 : openssh (ELSA-2013-1591)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1591 advisory. - change default value of MaxStartups - CVE-2010-5107 - 908707 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : 389-ds-base (ELSA-2013-1752)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1752 advisory. - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-sla...

Oracle Linux 6 : php (ELSA-2013-1615)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1615 advisory. - add security fix for CVE-2013-4248 - rename patch to math CVE-2010-3709 name - add security fixes for CVE-2006-7243, CVE-2013-1643 Tenable has...

Oracle Linux 6 : kernel (ELSA-2013-1645)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1645 advisory. - net ipv6: udp packets following an UFO enqueued packet need also be handled by UFO Jiri Pirko 1011930 CVE-2013-4387 - fs compatioctl:...

Oracle Linux 6 : dracut (ELSA-2013-1674)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1674 advisory. 004-336.0.1 - do not strip modules with signatures. orabug 17458249 Jerry Snitselaar - scsiwait module removed in 3.8. Mute errors. orabug 16977193 Maxim Uvarov...

Oracle Linux 6 : augeas (ELSA-2013-1537)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1537 advisory. 1.0.0-5 - Don't package lenses in tests/ subdirectory. related: rhbz817753 1.0.0-4 - Rebase to Augeas 1.0.0 resolves: rhbz817753 - Add dependency on...

Oracle Linux 6 : wireshark (ELSA-2013-1569)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1569 advisory. - Resolves: CVE-2013-4927 CVE-2013-4931 CVE-2013-4932 CVE-2013-4933 CVE-2013-4934 CVE-2013-4935 CVE-2013-3557 Tenable has extracted the preceding...

Oracle Linux 6 : sudo (ELSA-2013-1701)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1701 advisory. - added patches for CVE-2013-1775 CVE-2013-2777 CVE-2013-2776 Resolves: rhbz1015355 Tenable has extracted the preceding description block directly from...

Oracle Linux 5 / 6 : java-1.6.0-openjdk (ELSA-2013-1505)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1505 advisory. 1:1.6.0.0-1.68.1.11.14 - updated to icedtea6-1.11.14.tar.gz - added and applied 1.11.14-fixes.patch, patch10 to fix build issues - adapted patch8...

Oracle Linux 6 : gc (ELSA-2013-1500)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1500 advisory. - Related: CVE-2012-2673 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 5 / 6 : thunderbird (ELSA-2013-1480)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-1480 advisory. 17.0.10-1.0.1.el64 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 17.0.10-1 - Update to 17.0.10 ESR Tenabl...

Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2013-1475)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1475 advisory. 8.4.18-1 - Update to PostgreSQL 8.4.18, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-14.html...

Oracle Linux 6 : spice-server (ELSA-2013-1473)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1473 advisory. - Fix issue with error-handling of RSAprivatedecrypt in previous patch Related: CVE-2013-4282 Tenable has extracted the preceding description block directly fro...

Oracle Linux 5 / 6 : firefox (ELSA-2013-1476)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1476 advisory. firefox 17.0.10-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 17.0.10-1 - Update to 17.0.10 ESR xulrunn...

Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2013-2577)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2577 advisory. kernel-uek 3.8.13-16.1.1.el6uek - dm snapshot: fix data corruption Mikulas Patocka Orabug: 17617582 CVE-2013-4299 Tenable has extracted the preceding descriptio...

Oracle Linux 5 / 6 : libgcrypt (ELSA-2013-1457)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1457 advisory. - fix CVE-2013-4242 GnuPG/libgcrypt susceptible to cache side-channel attack Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 : gnupg (ELSA-2013-1458)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-1458 advisory. - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation - fix...

Oracle Linux 5 / 6 : gnupg2 (ELSA-2013-1459)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1459 advisory. - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation...

Oracle Linux 5 : kernel (ELSA-2013-1449)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1449 advisory. - xen x86: check segment descriptor read result in 64-bit OUTS emulation Radim Krcmar 1012958 1012959 CVE-2013-4368 - md dm snapshot: fix data corrupti...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2013-1451)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1451 advisory. 1.7.0.45-2.4.3.2.0.1.el6 - Update DISTRONAME in specfile 1.7.0.40-2.4.3.1.el6 - sync with rhel 6.5 to icedtea 2.4 because of pernament tck failures - n...