Test Kennung:	1.3.6.1.4.1.25623.1.0.122004
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2012-2001)
Zusammenfassung:	The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.7.1.el6uek, ofa-2.6.32-300.7.1.el5uek, ofa-2.6.32-300.7.1.el6uek' package(s) announced via the ELSA-2012-2001 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.7.1.el6uek, ofa-2.6.32-300.7.1.el5uek, ofa-2.6.32-300.7.1.el6uek' package(s) announced via the ELSA-2012-2001 advisory. Vulnerability Insight: [2.6.32-300.7.1.el6uek] - Revert 'proc: enable writing to /proc/pid/mem' [orabug 13619701] {CVE-2012-0056} - [PATCH] x86, tsc: Skip TSC synchronization checks for tsc=reliable (Suresh Siddha) [2.6.32-300.6.1.el6uek] - tracing: Fix null pointer deref with SEND_SIG_FORCED (Oleg Nesterov) [orabug 13611655] [2.6.32-300.5.1.el6uek] - sched, x86: Avoid unnecessary overflow in sched_clock (Salman Qazi) [orabug 13604567] - [x86]: Don't resume/restore cpu if not of the expected cpu (Joe Jin) [orabug 13492670] - drm/i915: Rephrase pwrite bounds checking to avoid any potential overflow (Chris Wilson) [CVE-2010-296] - x2apic: Enable the bios request for x2apic optout (Suresh Siddha) [orabug 13565303] - fuse: split queues to scale I/O throughput (Srinivas Eeda) [orabug 10004611] - fuse: break fc spinlock (Srinivas Eeda) [orabug 10004611] Affected Software/OS: 'kernel-uek, mlnx_en-2.6.32-300.7.1.el6uek, ofa-2.6.32-300.7.1.el5uek, ofa-2.6.32-300.7.1.el6uek' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2962 BugTraq ID: 44067 http://www.securityfocus.com/bid/44067 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html http://www.redhat.com/support/errata/RHSA-2010-0842.html http://www.redhat.com/support/errata/RHSA-2010-0958.html http://secunia.com/advisories/42745 http://secunia.com/advisories/42758 SuSE Security Announcement: SUSE-SA:2010:050 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html SuSE Security Announcement: SUSE-SA:2010:051 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00004.html SuSE Security Announcement: SUSE-SA:2011:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html http://www.ubuntu.com/usn/USN-1041-1 http://www.vupen.com/english/advisories/2010/3321 http://www.vupen.com/english/advisories/2011/0070 http://www.vupen.com/english/advisories/2011/0298 Common Vulnerability Exposure (CVE) ID: CVE-2012-0056 47708 http://secunia.com/advisories/47708 51625 http://www.securityfocus.com/bid/51625 RHSA-2012:0052 http://www.redhat.com/support/errata/RHSA-2012-0052.html RHSA-2012:0061 http://www.redhat.com/support/errata/RHSA-2012-0061.html USN-1336-1 http://ubuntu.com/usn/usn-1336-1 VU#470151 http://www.kb.cert.org/vuls/id/470151 [oss-security] 20120117 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/18/2 [oss-security] 20120118 CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/18/1 [oss-security] 20120119 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/19/4 [oss-security] 20120122 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/22/4 http://blog.zx2c4.com/749 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2 https://bugzilla.redhat.com/show_bug.cgi?id=782642
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.