Oracle Linux 6 : poppler (ELSA-2010-0859)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0859 advisory. - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add...

Oracle Linux 6 : kernel (ELSA-2012-0052)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0052 advisory. - fs Revert 'proc: enable writing to /proc/pid/mem' Johannes Weiner 782649 782650 CVE-2012-0056 Tenable has extracted the preceding description block directly...

Oracle Linux 6 : openjpeg (ELSA-2012-1068)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1068 advisory. - Apply patches for CVE-2009-5030, CVE-2012-3358 Resolves: 831561 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : xerces-j2 (ELSA-2011-0858)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0858 advisory. - Add xerces-j2-CVE-2009-2625.patch Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 6 : systemtap (ELSA-2011-1088)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1088 advisory. 1.4.6.0.1.el61.2 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile 1.4-6.2 - bz716476 patch - bz716489 patch...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-0135)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0135 advisory. 1:1.6.0.0-1.43.1.10.6 - Updated to IcedTea6 1.10.6 - Resolves: rhbz787144 - Security fixes - S7082299: Fix in AtomicReferenceArray - S7088367: Fix issu...

Oracle Linux 6 : krb5 (ELSA-2011-1379)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1379 advisory. 1.9-9.2 - apply upstream patch to fix a null pointer derference with the LDAP kdb backend CVE-2011-1527, an assertion failure with multiple kdb backend...

Oracle Linux 6 : gdm (ELSA-2011-0395)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0395 advisory. 2.30.4-21.0.2.el60.1 - Added oracle-enterprise.patch to show oracle-release contents. 2.30.4-21.1 - Fix CVE-2011-0727 Tenable has extracted the preceding...

Oracle Linux 6 : kernel (ELSA-2011-0836)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0836 advisory. - net dccp: handle invalid feature options length Jiri Pirko 703012 703013 CVE-2011-1770 - fs cifs: check for privatedata before trying to put it Jeff...

Oracle Linux 6 : kernel (ELSA-2013-0744)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0744 advisory. - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - virt kvm: do not GP on unaligned MSRKVMSYSTEMTIME writ...

Oracle Linux 6 : cifs-utils (ELSA-2012-0902)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0902 advisory. 4.8.1-10 - mount.cifs: don't allow unprivileged users to mount onto dirs they can't chdir into bz 812782 4.8.1-9 - cifs.upcall: use krb5snametoprincipal to...

Oracle Linux 6 : mesa (ELSA-2013-0897)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0897 advisory. - CVE-2013-1872: Updated patch with testing from upstream 963063 - CVE-2013-1872: Updated patch from upstream 963063 - CVE-2013-1872: Updated patch...

Oracle Linux 6 : kernel (ELSA-2012-1304)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1304 advisory. - net rds: set correct msgnamelen Weiping Pan 822729 822731 CVE-2012-3430 - mm hugetlb: fix resvmap leak in error path Motohiro Kosaki 824350 824351...

Oracle Linux 5 / 6 : firefox (ELSA-2013-0820)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0820 advisory. firefox 17.0.6-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.6-1 - Update to 17.0.6 ESR 17.0.5-2 ...

Oracle Linux 6 : pixman (ELSA-2013-0687)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0687 advisory. 0.26.2-5 - Fix bug 914474 CVE 2013-1591 - Remove openmp.patch Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : squid (ELSA-2013-0505)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0505 advisory. - Resolves: 888198 - CVE-2012-5643: improved upstream patch - Resolves: 888198 - CVE-2012-5643: patch - Resolves: 888198 - CVE-2012-5643: DoS excessive resource...

Oracle Linux 6 : 389-ds-base (ELSA-2013-0628)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0628 advisory. 1.2.11.15-12 - Resolves: Bug 910994 - PamConfig schema not updated during upgrade - Resolves: Bug 910995 - Valgrind reports memleak in...

Oracle Linux 6 : kernel (ELSA-2012-1156)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1156 advisory. - drm i915: fix integer overflow in i915gemexecbuffer2 Jacob Tanenbaum 824553 824555 CVE-2012-2383 - net bluetooth: fix scoconninfo infoleak Jacob...

Oracle Linux 6 : 389-ds-base (ELSA-2012-0997)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0997 advisory. 1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on...

Oracle Linux 6 : bzip2 (ELSA-2010-0858)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0858 advisory. 1.0.5-7 - Resolves: 632268 integer overflow flaw in BZ2decompress - CVE-2010-0405 upstream patch Tenable has extracted the preceding description block directly...