Oracle Linux 5 : krb5 (ELSA-2011-0199)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0199 advisory. - add upstream patch to fix hang or crash in the KDC when using the LDAP kdb backend CVE-2011-0281, CVE-2011-0282, 671096 Tenable has extracted the...

Oracle Linux 5 : libvirt (ELSA-2010-0615)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0615 advisory. - Explicitly set qcow2 backing store format CVE-2010-2239 - Remap privileged source ports from guests behind NAT CVE-2010-2242 Tenable has extracted th...

Oracle Linux 5 : freetype (ELSA-2010-0578)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0578 advisory. - Modify freetype-2.2.1-CVE-2010-2519.patch additional fix If the type of the POST fragment is 0, the segment is completely ignored - Add...

Oracle Linux 5 : kernel (ELSA-2010-0661)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0661 advisory. - mm accept an abutting stack segment Jiri Pirko 607857 607858 CVE-2010-2240 - mm pass correct mm when growing stack Jiri Pirko 607857 607858 CVE-2010-2240 - mm...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2016)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2016 advisory. - kernel: Fix unlimited socket backlog DoS CVE-2010-4251 - rds: prevent BUGON triggering on congestion map updates CVE-2011-1023 - epoll: prevent...

Oracle Linux 6 : libvirt (ELSA-2011-0479)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0479 advisory. 0.8.1-27.0.1.el60.6 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.6 - Properly initialize supplementary groups for qemu process rhbz668692 -...

Oracle Linux 5 : openssl (ELSA-2010-0162)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0162 advisory. - fix CVE-2009-3245 - add missing bnwexpand return checks 570924 - fix CVE-2010-0433 - do not pass NULL princ to krb5ktgetentry which in the RHEL-5 and...

Oracle Linux 5 : python (ELSA-2011-0492)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0492 advisory. - ensure pyexpat.so gets built by explicitly listing all C modules in the payload in %files, rather than using dynfiles Resolves: CVE-2009-3720 Tenable...

Oracle Linux 5 : lftp (ELSA-2010-0585)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0585 advisory. - Related: CVE-2010-2251 - document change of xfer:clobber default value in manpage, respect xfer:clobber on with xfer:auto-rename on old behaviour - Related:...

Oracle Linux 5 : glibc (ELSA-2012-0126)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0126 advisory. 2.5-65.el57.3 - Use correct type when casting dtag 767687 - Report write error in addmnt even for cached streams 767687 - ldd: Never run file directly...

Oracle Linux 5 : w3m (ELSA-2010-0565)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0565 advisory. 0.5.1-17 - Resolves:rh604861:Clear execstack requirement also for ia64 architecture 0.5.1-16 - Resolves:rh604861:CVE-2010-2074 w3m: doesn't handle NULL in Commo...

Oracle Linux 5 : gimp (ELSA-2012-1181)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1181 advisory. - fix overflow in GIF loader CVE-2012-3481 - fix overflows in PSD plugin CVE-2009-3909, CVE-2012-3402 - fix heap corruption and overflow in GIF plug-in...

Oracle Linux 5 : gzip (ELSA-2010-0061)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0061 advisory. 1.3.5-11.0.1.el54.1 - Updated description in specfile to be product neutral 1.3.5-11:.1 - Added fix for CVE-2010-0001: 64 bit Integer underflow by decompressing...

Fedora 18 : ReviewBoard-1.7.11-1.fc18 (2013-11646)

New upstream release 1.7.11 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.11/ - Bug Fixes : - Fixed compatibility with Python 2.5 - Fixed the drop-down arrow by Support and the account name on older versions of Internet Explorer - New upstream release 1.7.10 -...

Oracle Linux 6 : ruby (ELSA-2013-0612)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0612 advisory. - escaping vulnerability about Exceptiontos / NameErrortos ruby-1.8.7-p371-CVE-2012-4481.patch - Related: rhbz915379 Tenable has extracted the precedin...

Oracle Linux 5 : ruby (ELSA-2013-0611)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0611 advisory. 1.8.5-29 - Fix regression introduced by fix for entity expansion DOS vulnerability in REXML https://bugs.ruby-lang.org/issues/7961...

Oracle Linux 6 : evolution (ELSA-2013-0516)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0516 advisory. 2.28.3-30.el6 - Update patch for RH bug 707526 Prints QP-encoded email encoded 2.28.3-29.el6 - Add patch for RH bug 890642 Crash due to implicit function...

Oracle Linux 6 : mysql (ELSA-2013-0219)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0219 advisory. 5.1.67-1 - Update to 5.1.67, for assorted upstream bugfixes including CVEs announced in January 2013 Resolves: 901380 Tenable has extracted the precedi...

Oracle Linux 6 : ipa (ELSA-2013-0188)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0188 advisory. 2.2.0-17.el63.1 - Fix changelog issue. The dist tag was in each entry and changing the build release changed history. 878219 2.2.0-17.el63 - Use a secure method...

Oracle Linux 5 / 6 : firefox (ELSA-2013-0820)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0820 advisory. firefox 17.0.6-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.6-1 - Update to 17.0.6 ESR 17.0.5-2 ...