Oracle Linux 6 : nss, / nspr, / and / nss-util (ELSA-2013-1829)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1829 advisory. - Resolves: rhbz1032485 - CVE-2013-5607 MFSA 2013-103 Avoid unsigned integer wrapping in PLArenaAllocate MFSA 2013-103 nss - Resolves: Bug 1032470 -...

Oracle Linux 5 / 6 : firefox (ELSA-2013-1812)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-1812 advisory. 24.2.0-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Build with nspr-devel = 4.10.0 to fix build...

Oracle Linux 6 : libjpeg-turbo (ELSA-2013-1803)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1803 advisory. - Resolves: 1031955 apply patch for CVE-2013-6630 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Low: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.0 update

Updated Red Hat JBoss Enterprise Application Platform 6.2.0 packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common...

Oracle Linux 6 : python (ELSA-2013-1582)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1582 advisory. - Added fix for CVE-2013-4238 Resolves: rhbz998784 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 / 6 : Unbreakable Enterprise Kernel (ELSA-2013-2585)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2585 advisory. - afkey: fix info leaks in notify messages Mathias Krause Orabug: 17837974 CVE-2013-2234 - drivers/cdrom/cdrom.c: use kzalloc for failing hardware...

Oracle Linux 6 : qemu-kvm (ELSA-2013-1553)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1553 advisory. - Resolves: bz1007330 CVE-2013-4344 qemu: buffer overflow in scsitargetemulatereportluns Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : xorg-x11-server (ELSA-2013-1620)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1620 advisory. - CVE-2013-1940: Fix xf86FlushInput to drain evdev events too 950438 - CVE-2013-4396: Fix use-after free in ImageText requests 1014561 Tenable has extracted the...

Oracle Linux 6 : Unbreakable Enterprise Kernel (ELSA-2013-2583)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2583 advisory. - HID: pantherlord: validate output report details Kees Cook Orabug: 17841973 CVE-2013-2892 - HID: zeroplus: validate output report details Kees Cook...

Oracle Linux 6 : openssh (ELSA-2013-1591)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1591 advisory. - change default value of MaxStartups - CVE-2010-5107 - 908707 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : samba (ELSA-2013-1542)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1542 advisory. - resolves: 1015359 - Fix CVE-2013-0213 and CVE-2013-0214 in SWAT. - resolves: 984808 - CVE-2013-4124: DoS via integer overflow when reading an EA list...

Oracle Linux 6 : 389-ds-base (ELSA-2013-1752)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1752 advisory. - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-sla...

Oracle Linux 6 : kernel (ELSA-2013-1645)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1645 advisory. - net ipv6: udp packets following an UFO enqueued packet need also be handled by UFO Jiri Pirko 1011930 CVE-2013-4387 - fs compatioctl:...

Oracle Linux 6 : php (ELSA-2013-1615)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1615 advisory. - add security fix for CVE-2013-4248 - rename patch to math CVE-2010-3709 name - add security fixes for CVE-2006-7243, CVE-2013-1643 Tenable has...

Oracle Linux 6 : rdma / stack (ELSA-2013-1661)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1661 advisory. ibutils 1.5.7-8 - Add the -output patch to have programs use /var/cache/ibutils instead of /tmp Resolves: bz958569 infinipath-psm Thu Jan 24 2013 Jay...

Oracle Linux 6 : sudo (ELSA-2013-1701)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1701 advisory. - added patches for CVE-2013-1775 CVE-2013-2777 CVE-2013-2776 Resolves: rhbz1015355 Tenable has extracted the preceding description block directly from...

Oracle Linux 6 : coreutils (ELSA-2013-1652)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1652 advisory. - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various segmentation faults in sort, uniq and join1015019 Tenable has extracted the preceding...

Oracle Linux 6 : dracut (ELSA-2013-1674)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1674 advisory. 004-336.0.1 - do not strip modules with signatures. orabug 17458249 Jerry Snitselaar - scsiwait module removed in 3.8. Mute errors. orabug 16977193 Maxim Uvarov...

Oracle Linux 6 : glibc (ELSA-2013-1605)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1605 advisory. - Fix getaddrinfo stack overflow resulting in application crash CVE-2013-1914, 951213. - Fix multibyte character processing crash in regexp...

Oracle Linux 6 : augeas (ELSA-2013-1537)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1537 advisory. 1.0.0-5 - Don't package lenses in tests/ subdirectory. related: rhbz817753 1.0.0-4 - Rebase to Augeas 1.0.0 resolves: rhbz817753 - Add dependency on...