Oracle Linux 5 : Moderate: / freetype (ELSA-2007-0403)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0403 advisory. 2.1.9-6.el4 - Add freetype-2.1.9-ttf-overflow.patch - Resolves: 240574 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : Important: / nfs-utils-lib (ELSA-2007-0951)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0951 advisory. 1.0.8-7.2.z2 - Updated libnfsidmap to -17 to fix a security issue bz 254041 1.0.8-7.2.z1 - Fixed RPC library buffer overflow bz 265061 Tenable has...

Oracle Linux 5 : gimp (ELSA-2012-1181)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1181 advisory. - fix overflow in GIF loader CVE-2012-3481 - fix overflows in PSD plugin CVE-2009-3909, CVE-2012-3402 - fix heap corruption and overflow in GIF plug-in...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2513)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2513 advisory. - wakeupprocess should be never used to wakeup a TASKSTOPPED/TRACED task Oleg Nesterov Orabug: 16405869 CVE-2013-0871 - ptrace: ensure...

Oracle Linux 5 : kernel (ELSA-2010-0704)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0704 advisory. 2.6.18-194.11.4.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John...

Oracle Linux 5 / 6 : dbus (ELSA-2011-1132)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1132 advisory. - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 Tenable has extracted...

Oracle Linux 5 : Moderate: / wireshark (ELSA-2008-0058)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0058 advisory. wireshark-0.99.7-1.el5.0.1: 0.99.7-1.el5.0.1 - Add oracle-ocfs2-network.patch 0.99.7-1 - upgrade to 0.99.7 - switch to libsmi from net-snmp - disable...

Oracle Linux 5 : kernel (ELSA-2008-0519)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0519 advisory. - x8664 copyuser doesn't zero tail bytes on page fault Vitaly Mayatskikh 451275 451276 CVE-2008-2729 - x8664 fix possible data leaks in copyfromuser...

Oracle Linux 5 : bzip2 (ELSA-2010-0703)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0703 advisory. 1.0.3-6 - Related: 632173 use the upstream patch 1.0.3-5 - Resolves: 632173 integer overflow flaw in BZ2decompress - CVE-2010-0405 Tenable has extracted the...

Oracle Linux 5 : bluez-libs / and / bluez-utils (ELSA-2008-0581)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0581 advisory. - Fix CVE-2008-2374 Resolves: 452880 bluez-utils: Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 : net-snmp (ELSA-2008-0971)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0971 advisory. 5.3.1-24.2 - fix crash in bulk request processing 469373 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 : httpd (ELSA-2010-0659)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0659 advisory. - add security fixes for CVE-2010-1452, CVE-2010-2791 623210 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : krb5 (ELSA-2010-0029)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0029 advisory. 1.6.1-36.el54.1 - add candidate patch to correct KDC integer overflows which could be triggered by malformed RC4 and AES ciphertexts CVE-2009-4212, 546347 Tenab...

Oracle Linux 5 : firefox (ELSA-2009-0315)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0315 advisory. firefox: 3.0.7-1.0.1 - Update firstrun and homepage URLs - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the...

Oracle Linux 5 : kvm (ELSA-2010-0627)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0627 advisory. - Resolves: bz619412 CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpageregister rhel-5.5.z -...

Oracle Linux 5 : kvm (ELSA-2013-0727)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0727 advisory. - Resolves: bz917018 CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSRKVMSYSTEMTIME rhel-5.9.z - Resolves: bz917022 CVE-2013-1797 kernel:...

Oracle Linux 5 : kernel (ELSA-2010-0839)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0839 advisory. - net rds: fix local privilege escalation Eugene Teo 642897 642898 CVE-2010-3904 - misc futex: replace LOCKPREFIX in futex.h Peter Zijlstra 633175 6331...

Oracle Linux 5 : avahi (ELSA-2009-0013)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0013 advisory. 0.6.16-1.el5.1 - Resolves: CVE-2008-5081 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 5 : postgresql / and / postgresql84 (ELSA-2010-0742)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0742 advisory. - Update to PostgreSQL 8.1.22, for various fixes described at http://www.postgresql.org/docs/8.1/static/release.html including the fix for CVE-2010-3433 Resolve...

Oracle Linux 5 : firefox (ELSA-2009-1674)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1674 advisory. firefox: 3.0.16-1.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added...