ID de Prueba:	1.3.6.1.4.1.25623.1.0.123496
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2013-1829)
Resumen:	The remote host is missing an update for the 'nspr, nss, nss-util' package(s) announced via the ELSA-2013-1829 advisory.
Descripción:	Summary: The remote host is missing an update for the 'nspr, nss, nss-util' package(s) announced via the ELSA-2013-1829 advisory. Vulnerability Insight: nspr [4.10.0-2] - Rebase to nspr-4.10.2 - Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103) nss [3.15.3-2.0.1] - Added nss-vendor.patch to change vendor [3.15.3-2] - Enable patch with fix for deadlock in trust domain lock and object lock - Resolves: Bug 1036477 - deadlock in trust domain lock and object lock - Disable hw gcm on rhel-5 based build environments where OS lacks support - Rollback changes to build nss without softokn until Bug 689919 is approved - Cipher suite was run as part of the nss-softokn build [3.15.3-1] - Update to NSS_3_15_3_RTM - Resolves: Bug 1032470 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss-util [3.15.3-1] - Update to NSS_3_15_3_RTM - Resolves: rhbz#1032470 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 Affected Software/OS: 'nspr, nss, nss-util' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1739 BugTraq ID: 62966 http://www.securityfocus.com/bid/62966 Bugtraq: 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/534161/100/0/threaded Debian Security Information: DSA-2790 (Google Search) http://www.debian.org/security/2013/dsa-2790 http://seclists.org/fulldisclosure/2014/Dec/23 http://security.gentoo.org/glsa/glsa-201406-19.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19254 RedHat Security Advisories: RHSA-2013:1791 http://rhn.redhat.com/errata/RHSA-2013-1791.html RedHat Security Advisories: RHSA-2013:1829 http://rhn.redhat.com/errata/RHSA-2013-1829.html SuSE Security Announcement: SUSE-SU-2013:1678 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html SuSE Security Announcement: openSUSE-SU-2013:1539 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html SuSE Security Announcement: openSUSE-SU-2013:1542 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-10/msg00016.html http://www.ubuntu.com/usn/USN-2030-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1741 http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html BugTraq ID: 63736 http://www.securityfocus.com/bid/63736 Debian Security Information: DSA-2994 (Google Search) http://www.debian.org/security/2014/dsa-2994 https://security.gentoo.org/glsa/201504-01 SuSE Security Announcement: SUSE-SU-2013:1807 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html SuSE Security Announcement: openSUSE-SU-2013:1732 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html http://www.ubuntu.com/usn/USN-2031-1 http://www.ubuntu.com/usn/USN-2032-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-5605 BugTraq ID: 63738 http://www.securityfocus.com/bid/63738 Debian Security Information: DSA-2800 (Google Search) http://www.debian.org/security/2013/dsa-2800 RedHat Security Advisories: RHSA-2013:1840 http://rhn.redhat.com/errata/RHSA-2013-1840.html RedHat Security Advisories: RHSA-2013:1841 http://rhn.redhat.com/errata/RHSA-2013-1841.html RedHat Security Advisories: RHSA-2014:0041 http://rhn.redhat.com/errata/RHSA-2014-0041.html SuSE Security Announcement: openSUSE-SU-2013:1730 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00078.html Common Vulnerability Exposure (CVE) ID: CVE-2013-5606 BugTraq ID: 63737 http://www.securityfocus.com/bid/63737 Common Vulnerability Exposure (CVE) ID: CVE-2013-5607 BugTraq ID: 63802 http://www.securityfocus.com/bid/63802 Debian Security Information: DSA-2820 (Google Search) http://www.debian.org/security/2013/dsa-2820 https://groups.google.com/forum/message/raw?msg=mozilla.dev.tech.nspr/_8AcygMEjSA/mm_cqQzLPFQJ http://www.ubuntu.com/usn/USN-2087-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.