ID de Prueba:	1.3.6.1.4.1.25623.1.0.122359
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2010-0398)
Resumen:	The remote host is missing an update for the 'kernel, ocfs2-2.6.18-194.3.1.0.1.el5, oracleasm-2.6.18-194.3.1.0.1.el5' package(s) announced via the ELSA-2010-0398 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel, ocfs2-2.6.18-194.3.1.0.1.el5, oracleasm-2.6.18-194.3.1.0.1.el5' package(s) announced via the ELSA-2010-0398 advisory. Vulnerability Insight: [2.6.18-194.3.1.0.1.el5] - [xen] check to see if hypervisor supports memory reservation change (Chuck Anderson) [orabug 7556514] - Add entropy support to igb (John Sobecki) [orabug 7607479] - [nfs] convert ENETUNREACH to ENOTCONN [orabug 7689332] - [NET] Add xen pv/bonding netconsole support (Tina Yang) [orabug 6993043] [bz 7258] - [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839] - fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042] - [nfsd] fix failure of file creation from hpux client (Wen gang Wang) [orabug 7579314] - [nfs] -revert return code check to avoid EIO (Chuck Lever, Guru Anbalagane) [Orabug 9448515] - [qla] fix qla not to query hccr (Guru Anbalagane) [Orabug 8746702] - [net] bonding: fix xen+bonding+netconsole panic issue (Joe Jin) [orabug 9504524] - [mm] Set hugepages dirty bit so vm.drop_caches does not corrupt (John Sobecki) [orabug 9461825] - [rds] Patch rds to 1.4.2-14 (Andy Grover) [orabug 9471572, 9344105] RDS: Fix BUG_ONs to not fire when in a tasklet ipoib: Fix lockup of the tx queue RDS: Do not call set_page_dirty() with irqs off (Sherman Pun) RDS: Properly unmap when getting a remote access error (Tina Yang) RDS: Fix locking in rds_send_drop_to() [2.6.18-194.3.1.el5] - [net] bnx2: fix lost MSI-X problem on 5709 NICs (John Feeney) [587799 511368] [2.6.18-194.2.1.el5] - [cpu] fix boot crash in 32-bit install on AMD cpus (Bhavna Sarathy) [580846 575799] [2.6.18-194.1.1.el5] - [xen] arpl on MMIO area crashes the guest (Paolo Bonzini) [572979 572982] {CVE-2010-0730} - [mm] fix boot on s390x after bootmem overlap patch (Amerigo Wang) [580838 550974] - [net] bnx2: avoid restarting cnic in some contexts (Andy Gospodarek) [581148 554706] - [iscsi] fix slow failover times (Mike Christie) [580840 570681] - [misc] kernel: fix elf load DoS on x86_64 (Danny Feng) [560552 560553] {CVE-2010-0307} - [netlink] connector: delete buggy notification code (Jiri Olsa) [561684 561685] {CVE-2010-0410} - [sound] hda_intel: avoid divide by zero in azx devices (Jaroslav Kysela) [567171 567172] {CVE-2010-1085} - [dvb] fix endless loop when decoding ULE at dvb-core (Mauro Carvalho Chehab) [569241 569242] {CVE-2010-1086} - [scsi] fnic: fix tx queue handling (Mike Christie) [580829 576709] - [fusion] mptsas: fix event_data alignment (Tomas Henzl) [580832 570000] - [edac] fix internal error message in amd64_edac driver (Bhavna Sarathy) [580836 569938] - [x86_64] fix floating point state corruption after signal (Oleg Nesterov) [580841 560891] - [mm] don't let reserved memory overlap bootmem_map (Amerigo Wang) [580838 550974] - [s390] kernel: correct TLB flush of page table entries (Hendrik Brueckner) [580839 545527] - [xen] iommu: clear IO-APIC pins on boot and shutdown (Paolo Bonzini) [580199 548201] - [xen] vtd: fix ioapic pin array (Don Dugger) [581150 563546] Affected Software/OS: 'kernel, ocfs2-2.6.18-194.3.1.0.1.el5, oracleasm-2.6.18-194.3.1.0.1.el5' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0307 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 38027 http://www.securityfocus.com/bid/38027 38492 http://secunia.com/advisories/38492 38779 http://secunia.com/advisories/38779 38922 http://secunia.com/advisories/38922 39649 http://secunia.com/advisories/39649 43315 http://secunia.com/advisories/43315 ADV-2010-0638 http://www.vupen.com/english/advisories/2010/0638 DSA-1996 http://www.debian.org/security/2010/dsa-1996 FEDORA-2010-1787 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html MDVSA-2010:066 http://www.mandriva.com/security/advisories?name=MDVSA-2010:066 RHSA-2010:0146 https://rhn.redhat.com/errata/RHSA-2010-0146.html RHSA-2010:0398 http://www.redhat.com/support/errata/RHSA-2010-0398.html RHSA-2010:0771 http://www.redhat.com/support/errata/RHSA-2010-0771.html SUSE-SA:2010:014 http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html USN-914-1 http://www.ubuntu.com/usn/USN-914-1 [linux-mm] 20100128 DoS on x86_64 http://marc.info/?l=linux-mm&m=126466407724382&w=2 [oss-security] 20100201 CVE request - kernel: DoS on x86_64 http://www.openwall.com/lists/oss-security/2010/02/01/1 [oss-security] 20100201 Re: CVE request - kernel: DoS on x86_64 http://www.openwall.com/lists/oss-security/2010/02/01/5 [oss-security] 20100203 Re: CVE request - kernel: DoS on x86_64 http://www.openwall.com/lists/oss-security/2010/02/04/1 [oss-security] 20100204 Re: CVE request - kernel: DoS on x86_64 http://www.openwall.com/lists/oss-security/2010/02/04/9 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=221af7f87b97431e3ee21ce4b0e77d5411cf1549 http://marc.info/?t=126466700200002&r=1&w=2 http://support.avaya.com/css/P8/documents/100088287 http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20100202%2C15754.html http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 http://www.vmware.com/security/advisories/VMSA-2011-0003.html https://bugzilla.redhat.com/show_bug.cgi?id=560547 oval:org.mitre.oval:def:10870 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10870 Common Vulnerability Exposure (CVE) ID: CVE-2010-0410 38058 http://www.securityfocus.com/bid/38058 38557 http://secunia.com/advisories/38557 39033 http://secunia.com/advisories/39033 39742 http://secunia.com/advisories/39742 DSA-2005 http://www.debian.org/security/2010/dsa-2005 FEDORA-2010-1804 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html MDVSA-2010:088 http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 RHSA-2010:0161 http://www.redhat.com/support/errata/RHSA-2010-0161.html SUSE-SA:2010:018 http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html SUSE-SA:2010:019 http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html SUSE-SA:2010:023 http://www.novell.com/linux/security/advisories/2010_23_kernel.html [oss-security] 20100203 CVE request: kernel OOM/crash in drivers/connector http://www.openwall.com/lists/oss-security/2010/02/03/1 [oss-security] 20100203 Re: CVE request: kernel OOM/crash in drivers/connector http://www.openwall.com/lists/oss-security/2010/02/03/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f98bfbd78c37c5946cc53089da32a5f741efdeb7 https://bugzilla.redhat.com/show_bug.cgi?id=561682 oval:org.mitre.oval:def:10903 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10903 Common Vulnerability Exposure (CVE) ID: CVE-2010-0730 39979 http://www.securityfocus.com/bid/39979 [oss-security] 20100507 CVE-2010-0730 xen: emulator instruction decoding inconsistency http://www.openwall.com/lists/oss-security/2010/05/07/1 https://bugzilla.redhat.com/show_bug.cgi?id=572971 oval:org.mitre.oval:def:11430 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11430 Common Vulnerability Exposure (CVE) ID: CVE-2010-1085 BugTraq ID: 38348 http://www.securityfocus.com/bid/38348 Bugtraq: 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (Google Search) http://nctritech.net/bugreport.txt http://lkml.org/lkml/2010/2/5/322 http://www.openwall.com/lists/oss-security/2010/02/22/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10027 http://www.redhat.com/support/errata/RHSA-2010-0394.html Common Vulnerability Exposure (CVE) ID: CVE-2010-1086 BugTraq ID: 38479 http://www.securityfocus.com/bid/38479 Debian Security Information: DSA-2053 (Google Search) http://www.debian.org/security/2010/dsa-2053 http://www.openwall.com/lists/oss-security/2010/03/01/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10569 http://secunia.com/advisories/39830 SuSE Security Announcement: SUSE-SA:2010:019 (Google Search) SuSE Security Announcement: SUSE-SA:2010:023 (Google Search)
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.