RHEL 5 / 6 : flash-plugin (RHSA-2011:0451)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0451 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes one vulnerability in Ado...

RHEL 6 : krb5 (RHSA-2011:0447)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0447 advisory. - krb5: kadmind invalid pointer free MITKRB5-SA-004 CVE-2011-0285 Note that Nessus has not tested for this issue but has instead relied only on the...

java security update

CentOS Errata and Security Advisory CESA-2011:0176 Updated java-1.6.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

kernel security update

CentOS Errata and Security Advisory CESA-2011:0429 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.28.11.el6 - fs/partitions: Validate mapcount in Mac partition tables CVE-2011-1010 - nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab v3 CVE-2011-1090 2.6.32-100.28.10.el6 - Use cciss for some Smart Array controller for OL5 orabug 11899706 - CVEs from...

RHEL 5 : kernel (RHSA-2011:0429)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0429 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

RHEL 6 : dhcp (RHSA-2011:0428)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0428 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

RHEL 4 / 5 : postfix (RHSA-2011:0422)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0422 advisory. - postfix improper mailbox permissions CVE-2008-2937 - postfix: SMTP commands injection during plaintext to TLS session switch...

RHEL 6 : policycoreutils (RHSA-2011:0414)

Updated policycoreutils packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

RHEL 5 : glibc (RHSA-2011:0412)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0412 advisory. - glibc: Improper encoding of names with certain special character in utilities for writing to mtab table CVE-2010-0296 - glibc: CVE-2010-38...

Red Hat Enterprise Linux logrotate任意执行命令及信息泄露漏洞

CVE ID: CVE-2011-1155,CVE-2011-1154,CVE-2011-1098 logrotate程序可简化多个日志文件的管理，允许日志文件的自动循环、压缩、删除和 邮寄。 logrotate处理shred指令时存在shell命令注入漏洞，特制日志文件可造成logrotate 以运行logrotate默认root的用户权限执行任意命令。注意：默认没有启用shred指令。 logrotate在创建新日志文件时应用权限的方式中存在竞争条件漏洞，在一些特定配置 中，本地攻击者可利用此漏洞在logrotate应用最终权限之前打开新的日志文件，可导 致泄露敏感信息。...

RHEL 6 : quagga (RHSA-2011:0406)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0406 advisory. Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon implements the BGP Border Gateway Protocol routing protocol. A denia...

libtiff security update

CentOS Errata and Security Advisory CESA-2011:0392 Updated libtiff packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability...

RHEL 5 / 6 : libvirt (RHSA-2011:0391)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0391 advisory. - libvirt: several API calls do not honour read-only connection CVE-2011-1146 Note that Nessus has not tested for this issue but has instead reli...

RHEL 4 / 5 / 6 : libtiff (RHSA-2011:0392)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0392 advisory. - libtiff: heap-based buffer overflow in thunder decoder ZDI-11-107 CVE-2011-1167 Note that Nessus has not tested for this issue but has...

RHEL 6 : gdm (RHSA-2011:0395)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0395 advisory. The GNOME Display Manager GDM provides the graphical login screen, shown shortly after boot up, log out, and when user-switching. A race condition fl...

RHEL 5 / 6 : flash-plugin (RHSA-2011:0372)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0372 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes one vulnerability in Ado...

RHEL 6 : wireshark (RHSA-2011:0369)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0369 advisory. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. A heap-based buffer overflow flaw was fou...

RHEL 6 : java-1.6.0-ibm (RHSA-2011:0357)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0357 advisory. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes severa...

Important: Red Hat Security Advisory: tomcat5 security update

Updated tomcat5 packages that fix one security issue are now available for JBoss Enterprise Web Server 1.0. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...