ID de Prueba:	1.3.6.1.4.1.25623.1.0.123899
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2012-2020)
Resumen:	The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.27.1.el5uek, mlnx_en-2.6.32-300.27.1.el6uek, ofa-2.6.32-300.27.1.el5uek, ofa-2.6.32-300.27.1.el6uek' package(s) announced via the ELSA-2012-2020 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.27.1.el5uek, mlnx_en-2.6.32-300.27.1.el6uek, ofa-2.6.32-300.27.1.el5uek, ofa-2.6.32-300.27.1.el6uek' package(s) announced via the ELSA-2012-2020 advisory. Vulnerability Insight: kernel-uek: [2.6.32-300.27.1.el6uek] - net: sock: validate data_len before allocating skb (Jason Wang) [Bugdb: 13966]{CVE-2012-2136} - fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [Bugdb: 13966] {CVE-2012-2123} - Revert 'nfs: when attempting to open a directory, fall back on normal lookup (Todd Vierling) [Orabug 14141154] [2.6.32-300.26.1.el6uek] - mptsas: do not call __mptsas_probe in kthread (Maxim Uvarov) [Orabug: 14175509] - mm: check if any page in a pageblock is reserved before marking it MIGRATE_RESERVE (Maxim Uvarov) [Orabug: 14073214] - mm: reduce the amount of work done when updating min_free_kbytes (Mel Gorman) [Orabug: 14073214] - vmxnet3: Updated to el6-u2 (Guangyu Sun) [Orabug: 14027961] - xen: expose host uuid via sysfs. (Zhigang Wang) - sched: Fix cgroup movement of waking process (Daisuke Nishimura) [Orabug: 13946210] - sched: Fix cgroup movement of newly created process (Daisuke Nishimura) [Orabug: 13946210] - sched: Fix cgroup movement of forking process (Daisuke Nishimura) [Orabug: 13946210] - x86, boot: Wait for boot cpu to show up if nr_cpus limit is about to hit (Zhenzhong Duan) [Orabug: 13629087] - smp: Use nr_cpus= to set nr_cpu_ids early (Zhenzhong Duan) [Orabug: 13629087] - net: ipv4: relax AF_INET check in bind() (Maxim Uvarov) [Orabug: 14054411] ofa-2.6.32-300.27.1.el6uek: [1.5.1-4.0.58] - Add Patch 158-169 Affected Software/OS: 'kernel-uek, mlnx_en-2.6.32-300.27.1.el5uek, mlnx_en-2.6.32-300.27.1.el6uek, ofa-2.6.32-300.27.1.el5uek, ofa-2.6.32-300.27.1.el6uek' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2123 1027072 http://www.securitytracker.com/id?1027072 53166 http://www.securityfocus.com/bid/53166 DSA-2469 http://www.debian.org/security/2012/dsa-2469 RHSA-2012:0670 http://rhn.redhat.com/errata/RHSA-2012-0670.html RHSA-2012:0743 http://rhn.redhat.com/errata/RHSA-2012-0743.html [oss-security] 20120419 Re: CVE request: kernel: fcaps: clear the same personality flags as suid when fcaps are used http://www.openwall.com/lists/oss-security/2012/04/20/6 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d52fc5dde171f030170a6cb78034d166b13c9445 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=806722 https://github.com/torvalds/linux/commit/d52fc5dde171f030170a6cb78034d166b13c9445 linux-kernel-fcaps-sec-bypass(75043) https://exchange.xforce.ibmcloud.com/vulnerabilities/75043 Common Vulnerability Exposure (CVE) ID: CVE-2012-2136 50807 http://secunia.com/advisories/50807 53721 http://www.securityfocus.com/bid/53721 RHSA-2012:1087 http://rhn.redhat.com/errata/RHSA-2012-1087.html USN-1529-1 http://ubuntu.com/usn/usn-1529-1 USN-1535-1 http://www.ubuntu.com/usn/USN-1535-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 https://bugzilla.redhat.com/show_bug.cgi?id=816289 https://github.com/torvalds/linux/commit/cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.