ID de Prueba:	1.3.6.1.4.1.25623.1.0.123522
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2013-1674)
Resumen:	The remote host is missing an update for the 'dracut' package(s) announced via the ELSA-2013-1674 advisory.
Descripción:	Summary: The remote host is missing an update for the 'dracut' package(s) announced via the ELSA-2013-1674 advisory. Vulnerability Insight: [004-336.0.1] - do not strip modules with signatures. [orabug 17458249] (Jerry Snitselaar) - scsi_wait module removed in 3.8. Mute errors. [orabug 16977193] (Maxim Uvarov) find firmware in /lib/modules/firmware/2.6.32-400.1.1.el5uek first and /lib/modules/firmware second ( Resolves: Orabug: 13351090 - Fix btrfs discovery [orabug 13388545] [004-336] - install /etc/system-fips in the initramfs Resolves: rhbz#1012626 [004-335] - fixed interface renaming Resolves: rhbz#1019104 [004-334] - fcoe: add --link-retry=100 to fipvlan call Resolves: rhbz#1012316 - ldd: redirect error to /dev/null - do not turn off biosdevname, if not given on kernel cmdline Resolves: rhbz#1011508 - network: fixed ibft parsing Resolves: rhbz#1011508 [004-330] - changed /etc/redhat-fips to /etc/system-fips Resolves: rhbz#1012626 [004-329] - add /etc/redhat-fips Resolves: rhbz#1012626 [004-328] - fixed crypt: add support for keyfiles in the initramfs Resolves: rhbz#886194 [004-327] - fixed crypt: add support for keyfiles in the initramfs Resolves: rhbz#886194 - fixed booting with iSCSI and without network config Resolves: rhbz#910605 [004-322] - fixed crypt: add support for keyfiles in the initramfs Resolves: rhbz#886194 - fixed FIPS module checking Resolves: rhbz#947729 [004-316] - create the initramfs non-world readable - unset LD_LIBRARY_PATH and GREP_OPTIONS Resolves: rhbz#912299 - add mkinitrd man page Resolves: rhbz#610462 - add bonding Resolves: rhbz#851666 - lvm: add '--yes' to lvchange Resolves: rhbz#720684 - crypt: add support for keyfiles in the initramfs Resolves: rhbz#886194 - start iscsi regardless of network, if requested Resolves: rhbz#813687 - install multipath module only, when root is multipath in generic mode Resolves: rhbz#916144 - fips: handle checksum checks for RHEV kernels Resolves: rhbz#947729 - add xhci-hcd driver Resolves: rhbz#960729 Affected Software/OS: 'dracut' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4453 55713 http://www.securityfocus.com/bid/55713 RHSA-2013:1674 http://rhn.redhat.com/errata/RHSA-2013-1674.html [oss-security] 20120927 Re: dracut creates non-world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/4 [oss-security] 20120927 Re: dracut creates world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/6 [oss-security] 20120927 dracut creates non-world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/3 dracut-initramfs-information-disclosure(79258) https://exchange.xforce.ibmcloud.com/vulnerabilities/79258 http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71 https://bugzilla.redhat.com/show_bug.cgi?id=859448
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.