Test Kennung:	1.3.6.1.4.1.25623.1.0.123528
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2013-1645)
Zusammenfassung:	The remote host is missing an update for the 'kernel' package(s) announced via the ELSA-2013-1645 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'kernel' package(s) announced via the ELSA-2013-1645 advisory. Vulnerability Insight: [2.6.32-431] - [md] Disabling of TRIM on RAID5 for RHEL6.5 was too aggressive (Jes Sorensen) [1028426] [2.6.32-430] - [x86] Revert 'efi: be more paranoid about available space when creating variables' (Rafael Aquini) [1012370 1023173] - [x86] Revert 'efivars: firmware bug workarounds should be in platform code' (Rafael Aquini) [1012370 1023173] - [x86] Revert 'efi: Export efi_query_variable_store() for efivars.ko' (Rafael Aquini) [1012370 1023173] - [x86] Revert 'efi: Check max_size only if it is non-zero' (Rafael Aquini) [1012370 1023173] - [x86] Revert 'efi: Distinguish between 'remaining space' and actually used space' (Rafael Aquini) [1012370 1023173] - [x86] Revert 'efi: Implement efi_no_storage_paranoia parameter' (Rafael Aquini) [1012370 1023173] - [x86] Revert 'Modify UEFI anti-bricking code' (Rafael Aquini) [1012370 1023173] - [x86] Revert 'efi: Fix dummy variable buffer allocation' (Rafael Aquini) [1012370 1023173] [2.6.32-429] - [fs] revert xfs: prevent deadlock trying to cover an active log (Eric Sandeen) [1014867] [2.6.32-428] - [fs] Revert 'vfs: allow umount to handle mountpoints without revalidating them' (Rafael Aquini) [1024607] - [fs] Revert 'vfs: massage umount_lookup_last() a bit to reduce nesting' (Rafael Aquini) [1024607] - [fs] Revert 'vfs: rename user_path_umountat() to user_path_mountpoint_at()' (Rafael Aquini) [1024607] - [fs] Revert 'vfs: introduce kern_path_mountpoint()' (Rafael Aquini) [1024607] - [fs] Revert 'autofs4: fix device ioctl mount lookup' (Rafael Aquini) [1024607] [2.6.32-427] - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806] - [pci] Revert 'make SRIOV resources optional' (Myron Stowe) [1022270] - [pci] Revert 'ability to relocate assigned pci-resources' (Myron Stowe) [1022270] - [pci] Revert 'honor child buses add_size in hot plug configuration' (Myron Stowe) [1022270] - [pci] Revert 'make cardbus-bridge resources optional' (Myron Stowe) [1022270] - [pci] Revert 'code and comments cleanup' (Myron Stowe) [1022270] - [pci] Revert 'make re-allocation try harder by reassigning ranges higher in the heirarchy' (Myron Stowe) [1022270] - [pci] Revert 'Calculate right add_size' (Myron Stowe) [1022270] [2.6.32-426] - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997] - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876] - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705] - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103] - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387} - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347] - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343] - [net] Loosen constraints for recalculating checksum in ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'kernel' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 6.2 CVSS Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6542 http://www.openwall.com/lists/oss-security/2013/03/05/13 RedHat Security Advisories: RHSA-2013:1645 http://rhn.redhat.com/errata/RHSA-2013-1645.html http://www.ubuntu.com/usn/USN-1805-1 http://www.ubuntu.com/usn/USN-1808-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-6545 Common Vulnerability Exposure (CVE) ID: CVE-2013-0343 RHSA-2013:1449 http://rhn.redhat.com/errata/RHSA-2013-1449.html RHSA-2013:1490 http://rhn.redhat.com/errata/RHSA-2013-1490.html RHSA-2013:1645 USN-1976-1 http://www.ubuntu.com/usn/USN-1976-1 USN-1977-1 http://www.ubuntu.com/usn/USN-1977-1 USN-2019-1 http://www.ubuntu.com/usn/USN-2019-1 USN-2020-1 http://www.ubuntu.com/usn/USN-2020-1 USN-2021-1 http://www.ubuntu.com/usn/USN-2021-1 USN-2022-1 http://www.ubuntu.com/usn/USN-2022-1 USN-2023-1 http://www.ubuntu.com/usn/USN-2023-1 USN-2024-1 http://www.ubuntu.com/usn/USN-2024-1 USN-2038-1 http://www.ubuntu.com/usn/USN-2038-1 USN-2039-1 http://www.ubuntu.com/usn/USN-2039-1 USN-2050-1 http://www.ubuntu.com/usn/USN-2050-1 [oss-security] 20121205 Re: Linux kernel handling of IPv6 temporary addresses http://openwall.com/lists/oss-security/2012/12/05/4 [oss-security] 20130116 Re: Linux kernel handling of IPv6 temporary addresses http://openwall.com/lists/oss-security/2013/01/16/7 [oss-security] 20130121 Re: Linux kernel handling of IPv6 temporary addresses http://openwall.com/lists/oss-security/2013/01/21/11 [oss-security] 20130222 Re: Linux kernel handling of IPv6 temporary addresses http://www.openwall.com/lists/oss-security/2013/02/22/6 https://bugzilla.redhat.com/show_bug.cgi?id=914664 openSUSE-SU-2014:0204 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2013-1928 SUSE-SU-2013:0856 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00000.html USN-1829-1 http://www.ubuntu.com/usn/USN-1829-1 [oss-security] 20130405 Re: CVE Request: kernel information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE http://www.openwall.com/lists/oss-security/2013/04/06/2 [oss-security] 20130409 Re: CVE Request: kernel information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE http://www.openwall.com/lists/oss-security/2013/04/09/6 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12176503366885edd542389eed3aaf94be163fdb http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.5 https://bugzilla.redhat.com/show_bug.cgi?id=949567 https://github.com/torvalds/linux/commit/12176503366885edd542389eed3aaf94be163fdb openSUSE-SU-2013:0847 http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html Common Vulnerability Exposure (CVE) ID: CVE-2013-1929 FEDORA-2013-5368 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101836.html MDVSA-2013:176 http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 SUSE-SU-2013:1473 http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html SUSE-SU-2013:1474 http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html USN-1834-1 http://www.ubuntu.com/usn/USN-1834-1 USN-1835-1 http://www.ubuntu.com/usn/USN-1835-1 USN-1836-1 http://www.ubuntu.com/usn/USN-1836-1 USN-1838-1 http://www.ubuntu.com/usn/USN-1838-1 [oss-security] 20130405 Re: CVE Request: tg3 VPD firmware -> driver injection http://www.openwall.com/lists/oss-security/2013/04/06/3 http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.pdf http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=715230a44310a8cf66fbfb5a46f9a62a9b2de424 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6 https://bugzilla.redhat.com/show_bug.cgi?id=949932 https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424 openSUSE-SU-2013:1971 http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html Common Vulnerability Exposure (CVE) ID: CVE-2013-2164 DSA-2766 http://www.debian.org/security/2013/dsa-2766 RHSA-2013:1166 http://rhn.redhat.com/errata/RHSA-2013-1166.html USN-1912-1 http://www.ubuntu.com/usn/USN-1912-1 USN-1913-1 http://www.ubuntu.com/usn/USN-1913-1 USN-1941-1 http://www.ubuntu.com/usn/USN-1941-1 USN-1942-1 http://www.ubuntu.com/usn/USN-1942-1 [oss-security] 20130610 Re: CVE Request: Linux Kernel - Leak information in cdrom driver. http://www.openwall.com/lists/oss-security/2013/06/10/9 http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2 https://bugzilla.redhat.com/show_bug.cgi?id=973100 Common Vulnerability Exposure (CVE) ID: CVE-2013-2234 USN-1938-1 http://www.ubuntu.com/usn/USN-1938-1 USN-1943-1 http://www.ubuntu.com/usn/USN-1943-1 USN-1944-1 http://www.ubuntu.com/usn/USN-1944-1 USN-1945-1 http://www.ubuntu.com/usn/USN-1945-1 USN-1946-1 http://www.ubuntu.com/usn/USN-1946-1 USN-1947-1 http://www.ubuntu.com/usn/USN-1947-1 [oss-security] 20130702 Re: CVE Request: information leak in AF_KEY notify messages http://www.openwall.com/lists/oss-security/2013/07/02/7 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 https://bugzilla.redhat.com/show_bug.cgi?id=980995 https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 Common Vulnerability Exposure (CVE) ID: CVE-2013-2851 Debian Security Information: DSA-2766 (Google Search) http://marc.info/?l=linux-kernel&m=137055204522556&w=2 http://www.openwall.com/lists/oss-security/2013/06/06/13 RedHat Security Advisories: RHSA-2013:1783 http://rhn.redhat.com/errata/RHSA-2013-1783.html RedHat Security Advisories: RHSA-2014:0284 http://rhn.redhat.com/errata/RHSA-2014-0284.html SuSE Security Announcement: SUSE-SU-2013:1473 (Google Search) SuSE Security Announcement: SUSE-SU-2013:1474 (Google Search) SuSE Security Announcement: openSUSE-SU-2013:1971 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2013-2888 http://marc.info/?l=linux-input&m=137772180514608&w=1 http://openwall.com/lists/oss-security/2013/08/28/13 RedHat Security Advisories: RHSA-2013:1490 http://www.ubuntu.com/usn/USN-1995-1 http://www.ubuntu.com/usn/USN-1998-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-2889 BugTraq ID: 62042 http://www.securityfocus.com/bid/62042 http://marc.info/?l=linux-input&m=137772182014614&w=1 http://www.ubuntu.com/usn/USN-2015-1 http://www.ubuntu.com/usn/USN-2016-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-2892 BugTraq ID: 62049 http://www.securityfocus.com/bid/62049 http://marc.info/?l=linux-input&m=137772185414625&w=1 Common Vulnerability Exposure (CVE) ID: CVE-2013-3231 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html https://lkml.org/lkml/2013/4/14/107 http://www.openwall.com/lists/oss-security/2013/04/14/3 SuSE Security Announcement: SUSE-SU-2013:1182 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html SuSE Security Announcement: openSUSE-SU-2013:1187 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html http://www.ubuntu.com/usn/USN-1837-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-4345 62740 http://www.securityfocus.com/bid/62740 USN-2064-1 http://www.ubuntu.com/usn/USN-2064-1 USN-2065-1 http://www.ubuntu.com/usn/USN-2065-1 USN-2068-1 http://www.ubuntu.com/usn/USN-2068-1 USN-2070-1 http://www.ubuntu.com/usn/USN-2070-1 USN-2071-1 http://www.ubuntu.com/usn/USN-2071-1 USN-2072-1 http://www.ubuntu.com/usn/USN-2072-1 USN-2074-1 http://www.ubuntu.com/usn/USN-2074-1 USN-2075-1 http://www.ubuntu.com/usn/USN-2075-1 USN-2076-1 http://www.ubuntu.com/usn/USN-2076-1 USN-2109-1 http://www.ubuntu.com/usn/USN-2109-1 USN-2110-1 http://www.ubuntu.com/usn/USN-2110-1 USN-2158-1 http://www.ubuntu.com/usn/USN-2158-1 [linux-crypto] 20130917 [PATCH] ansi_cprng: Fix off by one error in non-block size request http://marc.info/?l=linux-crypto-vger&m=137942122902845&w=2 https://bugzilla.redhat.com/show_bug.cgi?id=1007690 Common Vulnerability Exposure (CVE) ID: CVE-2013-4387 RHSA-2014:0284 USN-2041-1 http://www.ubuntu.com/usn/USN-2041-1 USN-2045-1 http://www.ubuntu.com/usn/USN-2045-1 USN-2049-1 http://www.ubuntu.com/usn/USN-2049-1 [oss-security] 20130928 Re: linux kernel memory corruption with ipv6 udp offloading http://www.openwall.com/lists/oss-security/2013/09/29/1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47 https://bugzilla.redhat.com/show_bug.cgi?id=1011927 https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 Common Vulnerability Exposure (CVE) ID: CVE-2013-4591 63791 http://www.securityfocus.com/bid/63791 [oss-security] 20131118 CVE-2013-4591 -- Linux kernel: kernel: nfs: missing check for buffer length in __nfs4_get_acl_uncached http://www.openwall.com/lists/oss-security/2013/11/18/2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d3e91a89b7adbc2831334def9e494dd9892f9af http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 https://bugzilla.redhat.com/show_bug.cgi?id=1031678 https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af Common Vulnerability Exposure (CVE) ID: CVE-2013-4592 USN-2066-1 http://www.ubuntu.com/usn/USN-2066-1 USN-2067-1 http://www.ubuntu.com/usn/USN-2067-1 USN-2111-1 http://www.ubuntu.com/usn/USN-2111-1 USN-2112-1 http://www.ubuntu.com/usn/USN-2112-1 USN-2114-1 http://www.ubuntu.com/usn/USN-2114-1 USN-2115-1 http://www.ubuntu.com/usn/USN-2115-1 USN-2116-1 http://www.ubuntu.com/usn/USN-2116-1 [oss-security] 20131118 CVE-2013-4592 -- Linux kernel: kvm: memory leak when memory slot is moved with assigned device http://www.openwall.com/lists/oss-security/2013/11/18/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40f193f5bb022e927a57a4f5d5194e4f12ddb74 https://bugzilla.redhat.com/show_bug.cgi?id=1031702 https://github.com/torvalds/linux/commit/12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 https://github.com/torvalds/linux/commit/e40f193f5bb022e927a57a4f5d5194e4f12ddb74 https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.9.bz2 openSUSE-SU-2014:0247 http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.