Test ID:	1.3.6.1.4.1.25623.1.0.123573
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2013-1268)
Summary:	The remote host is missing an update for the 'firefox, xulrunner' package(s) announced via the ELSA-2013-1268 advisory.
Description:	Summary: The remote host is missing an update for the 'firefox, xulrunner' package(s) announced via the ELSA-2013-1268 advisory. Vulnerability Insight: firefox [17.0.9-1.0.1.el6_4] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones [17.0.9-1] - Update to 17.0.9 ESR [17.0.8-4] - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane pref again in the Add-ons Manager UI, a part of rhbz#818636 fix. [17.0.8-3] - Fixed rhbz#818636 - Firefox allows install of addons, disregarding xpinstall.enabled flag set as false. [17.0.8-2] - Updated manual page xulrunner [17.0.9-1.0.1.el6_4] - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js - Removed XULRUNNER_VERSION from SOURCE21 [17.0.9-1] - Update to 17.0.9 ESR [17.0.8-5] - Fixed mozbz#633001 - Cannot open ipv6 address with self-signed certificate [17.0.8-4] - Fixed rhbz#818636 - Firefox allows install of addons, disregarding xpinstall.enabled flag set as false. Affected Software/OS: 'firefox, xulrunner' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1718 BugTraq ID: 62463 http://www.securityfocus.com/bid/62463 Debian Security Information: DSA-2762 (Google Search) http://www.debian.org/security/2013/dsa-2762 http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18939 RedHat Security Advisories: RHSA-2013:1268 http://rhn.redhat.com/errata/RHSA-2013-1268.html RedHat Security Advisories: RHSA-2013:1269 http://rhn.redhat.com/errata/RHSA-2013-1269.html SuSE Security Announcement: openSUSE-SU-2013:1491 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html SuSE Security Announcement: openSUSE-SU-2013:1493 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html SuSE Security Announcement: openSUSE-SU-2013:1495 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html SuSE Security Announcement: openSUSE-SU-2013:1496 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html SuSE Security Announcement: openSUSE-SU-2013:1499 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html SuSE Security Announcement: openSUSE-SU-2013:1633 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html http://www.ubuntu.com/usn/USN-1951-1 http://www.ubuntu.com/usn/USN-1952-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1722 BugTraq ID: 62460 http://www.securityfocus.com/bid/62460 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19031 Common Vulnerability Exposure (CVE) ID: CVE-2013-1725 BugTraq ID: 62467 http://www.securityfocus.com/bid/62467 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19025 Common Vulnerability Exposure (CVE) ID: CVE-2013-1730 BugTraq ID: 62473 http://www.securityfocus.com/bid/62473 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19022 Common Vulnerability Exposure (CVE) ID: CVE-2013-1732 BugTraq ID: 62469 http://www.securityfocus.com/bid/62469 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18520 Common Vulnerability Exposure (CVE) ID: CVE-2013-1735 BugTraq ID: 62479 http://www.securityfocus.com/bid/62479 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18443 Common Vulnerability Exposure (CVE) ID: CVE-2013-1736 BugTraq ID: 62478 http://www.securityfocus.com/bid/62478 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18856 Common Vulnerability Exposure (CVE) ID: CVE-2013-1737 BugTraq ID: 62475 http://www.securityfocus.com/bid/62475 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18789
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.