ID de Prueba:	1.3.6.1.4.1.25623.1.0.123575
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2013-2546)
Resumen:	The remote host is missing an update for the 'kernel-uek' package(s) announced via the ELSA-2013-2546 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel-uek' package(s) announced via the ELSA-2013-2546 advisory. Vulnerability Insight: [2.6.39-400.209.1] - Revert 'stop mig handler when lockres in progress ,and return -EAGAIN' (Srinivas Eeda) [Orabug: 16924802] - ocfs2/dlm: Fix list traversal in dlm_process_recovery_data (Srinivas Eeda) [Orabug: 17432400] - ocfs2/dlm: ocfs2 dlm umount skip migrating lockres (Srinivas Eeda) [Orabug: 16859627] [2.6.39-400.208.1] - Btrfs: make the chunk allocator completely tree lockless (Josef Bacik) [Orabug: 17334251] - mpt2sas: protect mpt2sas_ioc_list access with lock (Jerry Snitselaar) [Orabug: 17383579] - mptsas: update to 4.28.20.02 (Jerry Snitselaar) [Orabug: 17294806] - RDS: protocol negotiation fails during reconnect (Bang Nguyen) [Orabug: 17375389] - config:remove LM80 modules to void blindly loading cause crash (ethan.zhao) [Orabug: 16976462] [2.6.39-400.207.0] - Update lpfc version for 8.3.7.26.3p driver release (Gairy Grannum) [Orabug: 17340816] - lpfc 8.3.36: Update DIF support for passthru/strip/insert (James Smart) [Orabug: 17340816] - Update lpfc version for 8.3.7.26.1p driver release (Gairy Grannum) [Orabug: 17376967] - lpfc: whitespace fix (Vaios Papadimitriou) [Orabug: 17376967] - Update copyrights for 8.3.41 modifications (James Smart) [Orabug: 17376967] - Add first burst support to driver (James Smart) [Orabug: 17376967] - Fixed the format of some log message fields (James Smart) [Orabug: 17376967] - Add first burst support to driver (James Smart) [Orabug: 17376967] - Fixed not able to perform PCI function reset when board was not in online mode (James Smart) [Orabug: 17376967] - Fixed failure in setting SLI3 board mode (James Smart) [Orabug: 17376967] - Fixed SLI3 failing FCP write on check-condition no-sense with residual zero (James Smart) [Orabug: 17376967] - Fixed support for 128 byte WQEs (James Smart) [Orabug: 17376967] - Ensure driver properly zeros unused fields in SLI4 mailbox commands (James Smart) [Orabug: 17376967] - Fixed max value of lpfc_lun_queue_depth (James Smart) [Orabug: 17376967] - Fixed Receive Queue varied frame size handling (James Smart) [Orabug: 17376967] - Fix mailbox byteswap issue on PPC (James Smart) [Orabug: 17376967] - lpfc 8.3.40: Update Copyrights to 2013 for 8.3.38, 8.3.39, and 8.3.40 modifications (James Smart) [Orabug: 17376967] - Fixed freeing of iocb when internal loopback times out (James Smart) [Orabug: 17376967] - lpfc 8.3.40: Fixed a race condition between SLI host and port failed FCF rediscovery (James Smart) [Orabug: 17376967] - lpfc 8.3.40: Fixed issue mailbox wait routine failed to issue dump memory mbox command (James Smart) [Orabug: 17376967] - treewide: Fix typos in kernel messages (Masanari Iida) [Orabug: 17376967] - lpfc 8.3.40: Fixed system panic due to unsafe walking and deleting linked list (James Smart) [Orabug: 17376967] - lpfc 8.3.40: Fixed FCoE connection list vlan identifier and add FCF list debug (James Smart) [Orabug: 17376967] - lpfc 8.3.40: Clarified the behavior of the lpfc_max_luns ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'kernel-uek' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6549 http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://www.openwall.com/lists/oss-security/2013/03/05/13 SuSE Security Announcement: openSUSE-SU-2013:1187 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html http://www.ubuntu.com/usn/USN-1809-1 http://www.ubuntu.com/usn/USN-1811-1 http://www.ubuntu.com/usn/USN-1812-1 http://www.ubuntu.com/usn/USN-1813-1 http://www.ubuntu.com/usn/USN-1814-1 http://www.ubuntu.com/usn/USN-1829-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1772 [oss-security] 20130226 Re: CVE request -- Linux kernel: call_console_drivers() Function Log Prefix Stripping buffer overflow http://www.openwall.com/lists/oss-security/2013/02/26/9 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.33 https://bugzilla.redhat.com/show_bug.cgi?id=916075 https://github.com/torvalds/linux/commit/ce0030c00f95cf9110d9cdcd41e901e1fb814417 openSUSE-SU-2013:1187 Common Vulnerability Exposure (CVE) ID: CVE-2013-2140 USN-1938-1 http://www.ubuntu.com/usn/USN-1938-1 USN-1943-1 http://www.ubuntu.com/usn/USN-1943-1 USN-1944-1 http://www.ubuntu.com/usn/USN-1944-1 USN-1945-1 http://www.ubuntu.com/usn/USN-1945-1 USN-1946-1 http://www.ubuntu.com/usn/USN-1946-1 USN-1947-1 http://www.ubuntu.com/usn/USN-1947-1 USN-2038-1 http://www.ubuntu.com/usn/USN-2038-1 USN-2039-1 http://www.ubuntu.com/usn/USN-2039-1 [oss-security] 20130605 Re: xen/blkback: Check device permissions before allowing OP_DISCARD http://www.openwall.com/lists/oss-security/2013/06/05/21 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=604c499cbbcc3d5fe5fb8d53306aa0fae1990109 http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-2140.html http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.5 https://bugzilla.redhat.com/show_bug.cgi?id=971146 https://github.com/torvalds/linux/commit/604c499cbbcc3d5fe5fb8d53306aa0fae1990109 Common Vulnerability Exposure (CVE) ID: CVE-2013-2164 DSA-2766 http://www.debian.org/security/2013/dsa-2766 RHSA-2013:1166 http://rhn.redhat.com/errata/RHSA-2013-1166.html RHSA-2013:1645 http://rhn.redhat.com/errata/RHSA-2013-1645.html SUSE-SU-2013:1473 http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html SUSE-SU-2013:1474 http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html USN-1912-1 http://www.ubuntu.com/usn/USN-1912-1 USN-1913-1 http://www.ubuntu.com/usn/USN-1913-1 USN-1941-1 http://www.ubuntu.com/usn/USN-1941-1 USN-1942-1 http://www.ubuntu.com/usn/USN-1942-1 [oss-security] 20130610 Re: CVE Request: Linux Kernel - Leak information in cdrom driver. http://www.openwall.com/lists/oss-security/2013/06/10/9 http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2 https://bugzilla.redhat.com/show_bug.cgi?id=973100 openSUSE-SU-2013:1971 http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html Common Vulnerability Exposure (CVE) ID: CVE-2013-2234 [oss-security] 20130702 Re: CVE Request: information leak in AF_KEY notify messages http://www.openwall.com/lists/oss-security/2013/07/02/7 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 https://bugzilla.redhat.com/show_bug.cgi?id=980995 https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 Common Vulnerability Exposure (CVE) ID: CVE-2013-3076 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html http://www.openwall.com/lists/oss-security/2013/04/14/3 SuSE Security Announcement: SUSE-SU-2013:1182 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html http://www.ubuntu.com/usn/USN-1837-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-4163 54148 http://secunia.com/advisories/54148 61412 http://www.securityfocus.com/bid/61412 [oss-security] 20130723 Re: CVE request: Linux kernel: panic while appending data to a corked IPv6 socket in ip6_append_data_mtu http://www.openwall.com/lists/oss-security/2013/07/23/10 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=75a493e60ac4bbe2e977e7129d6d8cbb0dd236be https://bugzilla.redhat.com/show_bug.cgi?id=987633 https://github.com/torvalds/linux/commit/75a493e60ac4bbe2e977e7129d6d8cbb0dd236be
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.