Oracle Linux 6 : pidgin (ELSA-2012-1102)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1102 advisory. - Add patch for CVE-2011-2485 RH bug 837561. - Add patch for CVE-2012-1178 RH bug 837560. - Add patch for CVE-2012-2318 RH bug 837560. - Add patch for...

Fedora 17 : haproxy-1.4.24-1.fc17 (2013-11234)

Update to upstream stable release 1.4.24. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2039)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2039 advisory. 2.6.39-200.33.1 - sfc: Replace some literal constants with EFXPAGESIZE/EFXBUFSIZE Ben Hutchings Orabug: 14769994 - CVE-2012-3412 sfc: Fix maximum number of...

Oracle Linux 5 / 6 : dbus (ELSA-2011-1132)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1132 advisory. - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 Tenable has extracted...

Oracle Linux 5 : kernel (ELSA-2011-1212)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1212 advisory. - xen fix off-by-one shift in x8664 addrok Laszlo Ersek 728043 719850 CVE-2011-2901 - wireless nl80211: check for valid SSID size in scan operation...

Oracle Linux 5 / 6 : expat (ELSA-2012-0731)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0731 advisory. - use symbol version for XMLSetHashSalt CVE-2012-0876, 816306 - add security fix for CVE-2012-1148 811825 Tenable has extracted the preceding...

Oracle Linux 5 / 6 : libexif (ELSA-2012-1255)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1255 advisory. 0.6.21-5 - Update to version 0.6.21 fixing many bugs and CVEs - Remove upstreamed patches - Resolves: 839915 Tenable has extracted the preceding...

Oracle Linux 6 : sblim-cim-client2 (ELSA-2012-0987)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0987 advisory. 2.1.3-2 - Fix possible XML Hash DoS Resolves: 803391 2.1.3 - Update to sblim-cim-client2-2.1.3 2.0.9.2-1 - Initial support Tenable has extracted the preceding...

Oracle Linux 5 : kernel (ELSA-2012-1061)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1061 advisory. - xen x8664: check address on trap handlers or guest callbacks Paolo Bonzini 813430 813431 CVE-2012-0217 - xen x8664: Do not execute sysret with a non-canonical...

Oracle Linux 5 : postgresql84 (ELSA-2010-0430)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0430 advisory. 8.4.4-1.el55.1 - Update to PostgreSQL 8.4.4, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-4.html including fixe...

Oracle Linux 5 : libvorbis (ELSA-2008-0270)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0270 advisory. 1.1.2-3.el5.2 - fix release tag Related: 444707 1.1.2-3.el5.1 - fix CVE-2008-1420, CVE-2008-1419, CVE-2008-1423 Resolves: 444707 Tenable has extracted...

Fedora 17 : wordpress-3.5.2-1.fc17 (2013-11649)

WordPress 3.5.2 is now available. This is the second maintenance release of 3.5, fixing 12 bugs. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. The WordPress security team resolved seven security issues, and this release also...

Oracle Linux 5 : openssl (ELSA-2012-0060)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0060 advisory. - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes 771770 - fix for CVE-2011-4109 - double free ...

Oracle Linux 5 : kernel (ELSA-2010-0046)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0046 advisory. - firewire ohci: handle receive packets with zero data Jay Fenlason 547241 547242 CVE-2009-4138 - fs respect flag in docoredump Danny Feng 544188 54418...

Oracle Linux 6 : krb5 (ELSA-2013-0656)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0656 advisory. - incorporate upstream patch to fix a NULL pointer dereference when the client supplies an otherwise-normal-looking PKINIT request CVE-2013-1415, 91790...

Oracle Linux 5 : firefox (ELSA-2010-0556)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0556 advisory. firefox: 3.6.7-3.0.1.el5 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones 3.6.7-3 -...

Oracle Linux 5 : Moderate: / tomcat (ELSA-2007-0569)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0569 advisory. 5.5.23-0jpp.1.0.4.el5 - Remove erroneous rebuild-gcj-db for javadoc subpackage - Add fixes for CVE-2007-2449 and CVE-2007-2450 - resolves: bug 244846,...

Oracle Linux 6 : openoffice.org (ELSA-2012-0705)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0705 advisory. - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in the Powerpoint documents...

Oracle Linux 5 : ruby (ELSA-2009-1140)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1140 advisory. - CVE-2007-1558: APOP password disclosure vulnerability. - CVE-2009-0642: Incorrect checks for validity of X.509 certificates. Tenable has extracted th...

Oracle Linux 6 : mesa (ELSA-2013-0897)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0897 advisory. - CVE-2013-1872: Updated patch with testing from upstream 963063 - CVE-2013-1872: Updated patch from upstream 963063 - CVE-2013-1872: Updated patch...