Oracle Linux 5 : krb5 (ELSA-2012-0306)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0306 advisory. - add upstream patch for telnetd buffer overflow CVE-2011-4862, 770351 - ftpd: add backported patch to check for errors when calling setegid MITKRB5-SA-2011-005...

Oracle Linux 5 : kernel (ELSA-2011-0927)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0927 advisory. - Revert: xen hvm: svm support cleanups Andrew Jones 703715 702657 CVE-2011-1780 - Revert: xen hvm: secure svmcraccess Andrew Jones 703715 702657...

Oracle Linux 4 : krb5 (ELSA-2008-0180)

From Red Hat Security Advisory 2008:0180 : Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system whi...

Oracle Linux 6 : gimp (ELSA-2012-1180)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1180 advisory. 2:2.6.9-4.3 - fix overflow in GIF loader 847303 2:2.6.9-4.2 - fix overflows in GIF, CEL loaders 727800, 839020 Tenable has extracted the preceding...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2012-1385)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1385 advisory. 1:1.6.0.0-1.28.1.10.10.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.28.1.10.10 - Updated to IcedTea6 1.10.10 - Resolves rhbzs 856124, 865346,...

Oracle Linux 5 : OpenIPMI (ELSA-2013-0123)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0123 advisory. 2.0.16-16.el5 - ipmitool: fix ipmi command retry shifts replies 863310 2.0.16-15.el5 - ipmitool: added -b, -B, -l and -T options to ipmitool man page 846596 -...

Oracle Linux 5 / 6 : openssl (ELSA-2012-0518)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0518 advisory. - fix for CVE-2012-2110 - memory corruption in asn1d2ireadbio 814185 openssl098e: Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 : hypervkvpd (ELSA-2013-0807)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0807 advisory. - Validate Netlink source address CVE-2012-5532 rhbz953560 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2020)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2020 advisory. - net: sock: validate datalen before allocating skb Jason Wang Bugdb: 13966CVE-2012-2136 - fcaps: clear the same personality flags as suid when fca...

Oracle Linux 5 : firefox (ELSA-2010-0332)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0332 advisory. firefox: 3.0.19-1.0.1.el55 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added...

Oracle Linux 5 : kernel (ELSA-2012-0107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0107 advisory. - misc Move exitrobustlist to mmrelease, null lists on cleanup Laszlo Ersek 771774 750283 CVE-2012-0028 - scsi fix 32-on-64 block device ioctls Paolo...

Oracle Linux 5 : krb5 (ELSA-2010-0343)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0343 advisory. - add upstream patch to fix a few use-after-free bugs, including one in kadmind CVE-2010-0629, 578185 Tenable has extracted the preceding description block...

Oracle Linux 5 : systemtap (ELSA-2011-1089)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1089 advisory. 1.3-9 - bz716489 patch Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested f...

Oracle Linux 5 : firefox (ELSA-2010-0547)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0547 advisory. firefox: 3.6.7-2.0.1.el5 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones...

Oracle Linux 5 : ntp (ELSA-2009-1039)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1039 advisory. - fix buffer overflow when parsing Autokey association message 500783, CVE-2009-1252 Tenable has extracted the preceding description block directly fro...

Oracle Linux 5 / 6 : rpm (ELSA-2012-0451)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0451 advisory. - Proper region tag validation on package/header read CVE-2012-0060 - Double-check region size against header size CVE-2012-0061 Tenable has...

Oracle Linux 5 : kernel (ELSA-2010-0661)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0661 advisory. - mm accept an abutting stack segment Jiri Pirko 607857 607858 CVE-2010-2240 - mm pass correct mm when growing stack Jiri Pirko 607857 607858 CVE-2010-2240 - mm...

Oracle Linux 6 : wireshark (ELSA-2012-0509)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0509 advisory. 1.2.15-2.0.1.el62.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.2.15-2.1 - security patches - Resolves: CVE-2011-1143...

Oracle Linux 6 : glibc (ELSA-2012-0393)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0393 advisory. 2.12-1.47.el62.9 - Always use another area after a failed allocation in the main arena 795328 - Remove sse3 memcpy 695812 changes 799259 2.12-1.47.el62.8 - Avoi...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2012-0730)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0730 advisory. 1.6.0.0-1.27.1.10.8.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.27.1.10.8 - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patc...