Oracle Linux 5 : xulrunner (ELSA-2010-0809)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0809 advisory. 1.9.2.11-4.0.1.el55 - Added xulrunner-oracle-default-prefs.js and removed the corresponding RedHat one. 1.9.2.11-4.el55 - Add upstream patch for CVE-2010-3765...

Oracle Linux 5 : glibc (ELSA-2010-0787)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0787 advisory. 2.5-49.el55.6 - Never expand in privileged programs 643818, CVE-2010-3847 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : squirrelmail (ELSA-2009-1490)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1490 advisory. - fix: CVE-2009-2964 : CSRF issues in all forms - extend to all forms - fix: CVE-2009-2964 : CSRF issues in all forms - add missing parts Tenable has extracted...

Oracle Linux 5 : Moderate: / tomcat (ELSA-2007-0569)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0569 advisory. 5.5.23-0jpp.1.0.4.el5 - Remove erroneous rebuild-gcj-db for javadoc subpackage - Add fixes for CVE-2007-2449 and CVE-2007-2450 - resolves: bug 244846,...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2044)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2044 advisory. - hugepages: fix use after free bug in 'quota' handling 15842385 CVE-2012-2133 - mm: Hold a file reference in madviseremove 15842884 CVE-2012-3511 ...

Oracle Linux 5 : ruby (ELSA-2009-1140)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1140 advisory. - CVE-2007-1558: APOP password disclosure vulnerability. - CVE-2009-0642: Incorrect checks for validity of X.509 certificates. Tenable has extracted th...

Oracle Linux 5 : gstreamer-plugins-good (ELSA-2009-0271)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0271 advisory. 0.10.9-1.el5.1 - Add patch for CVE-2009-0386 CVE-2009-0387 CVE-2009-0397 Related: rhbz 483220 Tenable has extracted the preceding description block...

Oracle Linux 5 : curl (ELSA-2009-1209)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1209 advisory. 7.15.5-2.1.el53.5 - fix CVE-2009-2417 516257 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 : Important: / flac (ELSA-2007-0975)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0975 advisory. 1.1.0-7.el4.2 - Add RHEL-5 patch to remove execstack requirement Related: rhbz 332591 1.1.0-7.el4.1 - Add patch from Takashi Iwai to fix CVE-2007-4619...

Oracle Linux 5 : httpd (ELSA-2010-0168)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0168 advisory. 2.2.3-31.0.1.el54.4 - Replace index.html with Oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-31.4 - require and BR ...

Oracle Linux 5 : kernel (ELSA-2012-1323)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1323 advisory. - net sfc: Fix max no of TSO segments and min TX queue size Michal Schmidt 845554 845555 CVE-2012-3412 - kernel xacctaddtsk: fix pure theoretical -mm...

Oracle Linux 5 : tomcat5 (ELSA-2013-0870)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0870 advisory. - Related: CVE-2013-1976 It was found during additional testing - Resolves: CVE-2013-1976 Improper TOMCATLOG management in Tenable has extracted the preceding...

Oracle Linux 5 : sudo (ELSA-2010-0361)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0361 advisory. 1.7.2p1-6 - added second patch for CVE-2010-0426 580441 Resolves: 580525 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : bind (ELSA-2010-0976)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0976 advisory. 30:9.3.6-4.P1.3 - fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 6 : kernel (ELSA-2011-1189)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1189 advisory. - net nl80211: missing check for valid SSID size in scan operation Stanislaw Gruszka 718157 718158 CVE-2011-2517 - net bluetooth: l2cap and rfcomm: fix...

Oracle Linux 5 : Low: / wireshark (ELSA-2007-0066)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0066 advisory. 0.99.5-EL4.1.0.1 - Add patch oracle-ocfs2-network.patch 0.99.5-1 - multiple security issues fixed 225689 - CVE-2007-0459 - The TCP dissector could hang...

Oracle Linux 5 : kernel (ELSA-2012-1061)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1061 advisory. - xen x8664: check address on trap handlers or guest callbacks Paolo Bonzini 813430 813431 CVE-2012-0217 - xen x8664: Do not execute sysret with a non-canonical...

Oracle Linux 5 / 6 : libexif (ELSA-2012-1255)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1255 advisory. 0.6.21-5 - Update to version 0.6.21 fixing many bugs and CVEs - Remove upstreamed patches - Resolves: 839915 Tenable has extracted the preceding...

Oracle Linux 5 : gnupg2 (ELSA-2010-0603)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0603 advisory. 2.0.10-3.1 - fix use after free when importing certain X509 certificates CVE-2010-2547 618156 Tenable has extracted the preceding description block directly fro...

Oracle Linux 5 : hplip (ELSA-2008-0818)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0818 advisory. 1.6.7-4.1.el52.4 - Applied patch to make hpssd message parser more robust bug 457052. - Applied patches to fix insecure alert emails bug 455235. Tenabl...