Oracle Linux 5 : krb5 (ELSA-2012-0306)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0306 advisory. - add upstream patch for telnetd buffer overflow CVE-2011-4862, 770351 - ftpd: add backported patch to check for errors when calling setegid MITKRB5-SA-2011-005...

Oracle Linux 5 / 6 : firefox (ELSA-2013-0696)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0696 advisory. firefox 17.0.5-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.5-1 - Update to 17.0.5 ESR xulrunner...

Oracle Linux 5 : openssl (ELSA-2010-0162)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0162 advisory. - fix CVE-2009-3245 - add missing bnwexpand return checks 570924 - fix CVE-2010-0433 - do not pass NULL princ to krb5ktgetentry which in the RHEL-5 and...

Oracle Linux 6 : ruby (ELSA-2013-0612)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0612 advisory. - escaping vulnerability about Exceptiontos / NameErrortos ruby-1.8.7-p371-CVE-2012-4481.patch - Related: rhbz915379 Tenable has extracted the precedin...

Oracle Linux 5 : glibc (ELSA-2012-1207)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1207 advisory. 2.5-81.el58.7 - Fix out of bounds array access in strto exposed by 847929 patch. 2.5-81.el58.6 - Fix integer overflow leading to buffer overflow in strto 847929...

Fedora 18 : cgit-0.9.2-1.fc18 (2013-9498)

A directory traversal vulnerability was discovered in cgit. By default, cgit is not affected. However, if cgit is configured to use a readme file from a filesystem path instead of from the git repo itself then files outside of the repository can be read. Refer to the discussion on oss-security fo...

Fedora 18 : ReviewBoard-1.7.11-1.fc18 (2013-11646)

New upstream release 1.7.11 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.11/ - Bug Fixes : - Fixed compatibility with Python 2.5 - Fixed the drop-down arrow by Support and the account name on older versions of Internet Explorer - New upstream release 1.7.10 -...

Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2012-1037)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1037 advisory. - Update to PostgreSQL 8.4.12, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-12.html including the fixes for...

Oracle Linux 5 : python (ELSA-2011-0492)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0492 advisory. - ensure pyexpat.so gets built by explicitly listing all C modules in the payload in %files, rather than using dynfiles Resolves: CVE-2009-3720 Tenable...

Oracle Linux 5 : httpd (ELSA-2009-1075)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1075 advisory. 2.2.3-22.0.1.el53.1 - Replace index.html with oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-22.el53.1 - add securi...

Oracle Linux 5 : squirrelmail (ELSA-2009-0057)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-0057 advisory. 1.4.8-5.0.1.el52.3 - Remove Redhat splash screen images 1.4.8-5.3 - Update patch for CVE-2008-3663 to fix a session handling regression 480224 Tenable...

Oracle Linux 5 : kernel (ELSA-2012-0107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0107 advisory. - misc Move exitrobustlist to mmrelease, null lists on cleanup Laszlo Ersek 771774 750283 CVE-2012-0028 - scsi fix 32-on-64 block device ioctls Paolo...

Oracle Linux 5 : freeradius2 (ELSA-2013-0134)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0134 advisory. 2.1.12-5 - resolves: bug855308 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509...

Oracle Linux 5 : Moderate: / tk (ELSA-2008-0136)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0136 advisory. 8.4.13-5.EL51.1 - CVE-2008-0553 CVE-2007-5378 - GIF overflow and also GIF overflow Resolves: rhbz432514 Tenable has extracted the preceding description...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2038)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2038 advisory. - CVE-2012-3412 sfc: Fix maximum number of TSO segments and minimum TX queue size Ben Hutchings Orabug: 14769994 CVE-2012-3412 - dl2k: Clean up rioioctl...

Oracle Linux 6 : libguestfs (ELSA-2012-0774)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0774 advisory. 1:1.16.19-1 - Rebase to libguestfs 1.16.19 resolves: rhbz719879 - Rebuild against augeas 0.9.0-3.el6 related: rhbz808662 - Fix: Don't abort inspection if...

Oracle Linux 5 : Moderate: / httpd (ELSA-2008-0008)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0008 advisory. 2.2.3-12.el51.3.0.1 - use oracle index page oracleindex.html, update vstring and distro 2.2.3-12.el51.3 - further update to backport for CVE-2007-6421...

Oracle Linux 5 / 6 : systemtap (ELSA-2012-0376)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0376 advisory. 1.6-5.0.1.el62 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile - remove buildtime dependency on package...

Oracle Linux 5 : fetchmail (ELSA-2009-1427)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1427 advisory. 6.3.6-1.1.el53.1 - Fix fetchmail various flaws CVE-2007-4565, CVE-2008-2711, CVE-2009-2666 Resolves: 516269 Tenable has extracted the preceding...

Oracle Linux 5 : ruby (ELSA-2013-0129)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0129 advisory. - unintentional file creation caused by inserting an illegal NUL character...