Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2537)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2537 advisory. - Bluetooth: RFCOMM - Fix missing msgnamelen update in rfcommsockrecvmsg Mathias Krause Orabug: 17173824 CVE-2013-3225 - Bluetooth: fix possible in...

Oracle Linux 6 : kernel (ELSA-2013-1051)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1051 advisory. - wireless b43: stop format string leaking into error msgs John Linville 971387 971389 CVE-2013-2852 - net rtnl: fix info leak on RTMGETLINK request fo...

CVE-2013-2188: Undefined Security Weakness

A certain Red Hat patch to the dofilpopen function in fs/namei.c in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux RHEL 6 does not properly handle failure to obtain write permissions, which allows local users to cause a denial of service system crash by leveraging acces...

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

Oracle Linux 6 : libvirt (ELSA-2012-0748)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0748 advisory. libvirt-0.9.10-21.0.1.el6 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el6 - qemu: Rollback on used USB devices rhbz743671 - qemu: Dont...

Oracle Linux 5 / 6 : firefox (ELSA-2012-1407)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1407 advisory. firefox 10.0.10-1.0.1.el63 - Replaced firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js 10.0.10-1 - Update to 10.0.10 ESR 10.0.8...

Oracle Linux 5 / 6 : firefox (ELSA-2013-0820)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0820 advisory. firefox 17.0.6-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.6-1 - Update to 17.0.6 ESR 17.0.5-2 ...

Oracle Linux 6 : kernel (ELSA-2011-1350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1350 advisory. - Revert: net ipv6: make fragment identifications less predictable Jiri Pirko 723432 723433 CVE-2011-2699 - x86 perf, x86: Fix Intel fixed counters bas...

Oracle Linux 6 : kernel (ELSA-2013-0496)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0496 advisory. - virt xen: Fix stack corruption in xenfailsafecallback for 32bit PVOPS guests Andrew Jones 896050 CVE-2013-0190 - block sgio: use different default...

Oracle Linux 6 : krb5 (ELSA-2011-0200)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0200 advisory. - add upstream patches to fix standalone kpropd exiting if the per-client child process exits with an error, and hang or crash in the KDC when using th...

Oracle Linux 6 : icedtea-web (ELSA-2013-0753)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0753 advisory. - Updated to latest ustream release of 1.2 branch - 1.2.3 - Security Updates - CVE-2013-1927, RH884705 - fixed gifar vulnerability - CVE-2013-1926,...

Oracle Linux 6 : libvirt (ELSA-2011-0479)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0479 advisory. 0.8.1-27.0.1.el60.6 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.6 - Properly initialize supplementary groups for qemu process rhbz668692 -...

Oracle Linux 5 / 6 : postgresql (ELSA-2011-0197)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0197 advisory. - Update to PostgreSQL 8.4.7, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-7.html...

Oracle Linux 6 : kdelibs (ELSA-2011-1364)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1364 advisory. 6:4.3.4-11.4 - Resolves: bz743951, use ca-certificates' ca-bundle.crt 6:4.3.4-11.3 - Resolves: bz743515, CVE-2011-3365 - input validation failure Tenable has...

Oracle Linux 6 : sos (ELSA-2012-0958)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0958 advisory. 2.2-29.0.1.el6 - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 - Disable --upload option as it will not work with Oracle support - Check...

Oracle Linux 6 : policycoreutils (ELSA-2011-0414)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0414 advisory. policycoreutils: 2.0.83-19.8 - Fix seunshare to work with /tmp content when SELinux context is not provided Resolves: 679689 2.0.83-19.7 - put back correct chco...

Oracle Linux 6 : pam (ELSA-2013-0521)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0521 advisory. - fix environment file handling problems - CVE-2011-3148 746619 and CVE-2011-3148 746620 Tenable has extracted the preceding description block directly...

Oracle Linux 6 : libguestfs (ELSA-2012-0774)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0774 advisory. 1:1.16.19-1 - Rebase to libguestfs 1.16.19 resolves: rhbz719879 - Rebuild against augeas 0.9.0-3.el6 related: rhbz808662 - Fix: Don't abort inspection if...

Oracle Linux 6 : nss, / nspr, / and / nss-util (ELSA-2012-1091)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1091 advisory. nspr 4.9.1-2 - Related: rhbz833762 - Update License to MPLv2.0 4.9.1-1 - Resolves: rhbz833762 - Update to NSPR491RTM nss 3.13.5-1.0.1.el63 - Added...

Oracle Linux 6 : kernel (ELSA-2012-1366)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1366 advisory. - netdrv sfc: Fix maximum number of TSO segments and minimum TX queue size Nikolay Aleksandrov 845556 845557 CVE-2012-3412 Tenable has extracted the preceding...