Oracle Linux 5 / 6 : ruby (ELSA-2013-1090)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1090 advisory. - Fix regression introduced by CVE-2013-4073 https://bugs.ruby-lang.org/issues/8575...

Oracle Linux 5 : Moderate: / tk (ELSA-2008-0136)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0136 advisory. 8.4.13-5.EL51.1 - CVE-2008-0553 CVE-2007-5378 - GIF overflow and also GIF overflow Resolves: rhbz432514 Tenable has extracted the preceding description...

Oracle Linux 6 : libvirt (ELSA-2011-0479)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0479 advisory. 0.8.1-27.0.1.el60.6 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.6 - Properly initialize supplementary groups for qemu process rhbz668692 -...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-0135)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0135 advisory. 1:1.6.0.0-1.43.1.10.6 - Updated to IcedTea6 1.10.6 - Resolves: rhbz787144 - Security fixes - S7082299: Fix in AtomicReferenceArray - S7088367: Fix issu...

Oracle Linux 5 : Moderate: / vixie-cron (ELSA-2007-0345)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0345 advisory. 4.1-47.EL4 - removed patches for 192783, 178836 because of frozen errata - added only patch for CVE-2007-1856 crontab denial of service - Resolves: rhbz235880...

Oracle Linux 6 : tomcat6 (ELSA-2013-0869)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0869 advisory. - Related: rhbz955976 CVE-2013-1976. Changed log location - Resolves: rhbz956771 Related: CVE-2012-3439 digest - Resolves: rhbz955976 CVE-2013-1976...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2013-0752)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0752 advisory. 1.7.0.19-2.3.9.1.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to Enterprise Linux 1.7.0.19-2.3.9.1.el5 - updated to updated IcedTea 2.3.9 wi...

Fedora 18 : tomcat-7.0.40-1.fc18 (2013-7993)

Updated to 7.0.40 - Resolves: rhbz 956569 added missing commons-pool link Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 17 : tomcat-7.0.40-1.fc17 (2013-7999)

Updated to 7.0.40 - Resolves: rhbz 956569 added missing commons-pool link Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 17 : rubygem-rdoc-3.12-5.fc17 (2013-2143)

Patch cross site scripting vulnerability CVE-2013-0256 rhbz908358. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

java-1.7.0-openjdk security update

1.7.0.9-2.3.8.0.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.9-2.3.8.0.el59 - Updated to icedtea7-forest-2.3 - Resolves: rhbz917181...

xen security update

3.0.3-142.el59.2 - e1000: discard packets that are too long if !SBP and !LPE rhbz 910843 - e1000: discard oversized packets based on SBP|LPE rhbz 910843...

java-1.6.0-openjdk security update

1:1.6.0.0-1.36.1.11.9.0.1.el59 - Add oracle-enterprise.patch 1:1.6.0.0-1.36.1.11.9 - Updated to icedtea6 1.11.9 - Resolves: rhbz917176...

java-1.6.0-openjdk security update

1:1.6.0.0-1.57.1.11.9 - Updated to icedtea6 1.11.9 - Resolves: rhbz917179...

java-1.6.0-openjdk security update

1:1.6.0.0-1.56.1.11.8 - Rebuild with updated sources - Resolves: rhbz911524 1:1.6.0.0-1.55.1.11.8 - Updated to icedtea6 1.11.8 - Removed patch9 7201064.patch - Removed patch10 8005615.patch - Removed not-applied patch 6664509.patch - Removed mauve as deadly outdated and run on QA - jtreg kept,...

Fedora 17 : android-tools-20130123git98d0789-1.fc17 (2013-1742)

Update to upstream git commit 98d0789 - Resolves: rhbz 903074 Move udev rule to docs as example - Resolves: rhbz 879585 Introduce adb.service with PrivateTmp Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

mingw32-libxml2 security update

2.7.6-6 - Synchronize patch-set with mainline-version. - Bump version to 5, 6. Related: rhbz891477 2.7.6-4 - Change release number to 4. - Added patch libxml2-Fix-an-off-by-one-pointer-access.patch - Added patch libxml2-Fix-a-segfault-on-XSD-validation-on-pattern-error.patch - Added patch...

Fedora 17 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17 (2013-0868)

This update fixes rhbz895035 , which consists of a set of flaws that potentially allow arbitrary code execution including remotely via applets. It is strongly recommended that all Java users in Fedora immediately update to this release. Note that Tenable Network Security has extracted the precedi...

java-1.7.0-openjdk security update

1.7.0.9-2.3.4.1.0.1.el63 - Update DISTRONAME in specfile 1.7.0.9-2.3.4.1.el6 - Rewerted to IcedTea 2.3.4 - rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch - removed jxmd and idlj to alternatives - make NOT executed with DISABLEINTREEEC=true and UNLIMITEDCRYPTO=true - re-applied...

ruby security and bug fix update

1.8.5-27 - unintentional file creation caused by inserting an illegal NUL character ruby-1.8.6-CVE-2012-4522-io.c-pipeopen-command-name-should-not-contain-null-.patch - Related: rhbz867750 1.8.5-26 - escaping vulnerability about Exceptiontos / NameErrortos ruby-1.8.7-p371-CVE-2012-4481.patch -...