Oracle Linux 5 / 6 : apr-util (ELSA-2010-0950)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0950 advisory. 1.3.9-3.1 - add security fix for CVE-2010-1623 659253 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : nss, / nspr, / and / nss-util (ELSA-2012-1091)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1091 advisory. nspr 4.9.1-2 - Related: rhbz833762 - Update License to MPLv2.0 4.9.1-1 - Resolves: rhbz833762 - Update to NSPR491RTM nss 3.13.5-1.0.1.el63 - Added...

Oracle Linux 6 : tomcat6 (ELSA-2013-0964)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0964 advisory. - Related: CVE-2013-2067 Session fixation Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 6 : libvirt (ELSA-2011-0479)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0479 advisory. 0.8.1-27.0.1.el60.6 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.6 - Properly initialize supplementary groups for qemu process rhbz668692 -...

Oracle Linux 6 : libguestfs (ELSA-2012-0774)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0774 advisory. 1:1.16.19-1 - Rebase to libguestfs 1.16.19 resolves: rhbz719879 - Rebuild against augeas 0.9.0-3.el6 related: rhbz808662 - Fix: Don't abort inspection if...

Oracle Linux 5 / 6 : openssl (ELSA-2012-0518)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0518 advisory. - fix for CVE-2012-2110 - memory corruption in asn1d2ireadbio 814185 openssl098e: Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : qemu-kvm (ELSA-2012-0050)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0050 advisory. - Resolves: bz772081 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-6.2.z - CVE: CVE-2011-4127 - Resolves: bz7677...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2524)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2524 advisory. 2.6.39-400.24.1 - perf: Treat attr.config as u64 in perfsweventinit Tommi Rantala Orabug: 16808734 CVE-2013-2094 Tenable has extracted the preceding...

Oracle Linux 6 : thunderbird (ELSA-2011-0311)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0311 advisory. 3.1.8-4.0.2.el60 - Replace clean.gif in tarball 3.1.8-4.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.j...

Oracle Linux 6 : dhcp (ELSA-2013-0504)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0504 advisory. - Reducing the expiration time for an IPv6 lease may cause the server to crash CVE-2012-3955, 858130 - An error in the handling of malformed client identifiers...

Oracle Linux 5 / 6 : thunderbird (ELSA-2012-1351)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-1351 advisory. 10.0.8-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.8-1 -...

Oracle Linux 6 : qemu-kvm (ELSA-2013-0896)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0896 advisory. - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch bz957056 - Resolves: bz957056 CVE-2013-2007 qemu: guest agent creates files with insecure...

Oracle Linux 5 / 6 : pango (ELSA-2011-0180)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0180 advisory. - Prevent heap corruption with malformed fonts. CVE-2011-0020 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : librsvg2 (ELSA-2011-1289)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1289 advisory. 2.26.0-5.el61.1 - Store node type separately in RsvgNode CVE-2011-3146 Resolves: 735266 Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2010)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2010 advisory. - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2041)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2041 advisory. 2.6.32-300.38.1 - net/sfc limit number of segments per skb on tx Maxim Uvarov Orabug: 14769994 CVE-2012-3412 Tenable has extracted the preceding description...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-1384)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1384 advisory. 1:1.6.0.0-1.50.1.11.5 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865045 1:1.6.0.0-1.49.1.11.5 - Updated to IcedTea6 1.11.5 -...

Oracle Linux 5 / 6 : bind (ELSA-2011-1458)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1458 advisory. - update to 9.7.3-P3 CVE-2011-2464 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 6 : util-linux-ng (ELSA-2013-0517)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0517 advisory. - fix 892471 - CVE-2013-0157 mount folder existence information disclosure Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : rsync (ELSA-2011-0390)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0390 advisory. 3.0.6-5.1 - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 684932 Tenable has...