Test Kennung:	1.3.6.1.4.1.25623.1.0.123167
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2015-0290)
Zusammenfassung:	The remote host is missing an update for the 'kernel' package(s) announced via the ELSA-2015-0290 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'kernel' package(s) announced via the ELSA-2015-0290 advisory. Vulnerability Insight: [3.10.0-229] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229] - [net] rtnetlink: allow to register ops without ops->setup set (Jiri Benc) [1186492] [3.10.0-228] - [fs] NFSv4.1: Fix an Oops in nfs41_walk_client_list (Steve Dickson) [1185784] - [misc] redhat: don't suppress Revert patches from changelog (Jarod Wilson) [1187353] - [infiniband] Revert: ipoib: Consolidate rtnl_lock tasks in workqueue (Doug Ledford) [1179740] - [infiniband] Revert: ipoib: Make the carrier_on_task race aware (Doug Ledford) [1179740] - [infiniband] Revert: ipoib: fix MCAST_FLAG_BUSY usage (Doug Ledford) [1179740] - [infiniband] Revert: ipoib: fix mcast_dev_flush/mcast_restart_task race (Doug Ledford) [1179740] - [infiniband] Revert: ipoib: change init sequence ordering (Doug Ledford) [1179740] - [infiniband] Revert: ipoib: Use dedicated workqueues per interface (Doug Ledford) [1179740] - [infiniband] Revert: ipoib: Make ipoib_mcast_stop_thread flush the workqueue (Doug Ledford) [1179740] - [infiniband] Revert: ipoib: No longer use flush as a parameter (Doug Ledford) [1179740] - [fs] fix deadlock in cifs_ioctl_clone() (Sachin Prabhu) [1183980] - [md] dm-cache: fix missing ERR_PTR returns and handling (Mike Snitzer) [1182665] - [fs] cifs: fix regression in cifs_create_mf_symlink() (Sachin Prabhu) [1186324] - [net] ipv4: try to cache dst_entries which would cause a redirect (Hannes Frederic Sowa) [1181819] - [fs] coredump: add new P variable in core_pattern (Jiri Olsa) [1186360] - [drm] fix fb-helper vs MST dangling connector ptrs (Rob Clark) [1184968] - [net] bridge: Program port vlan filters only if filtering is enabled in bridge (Vlad Yasevich) [1183958] - [fs] cifs: Complete oplock break jobs before closing file handle (Sachin Prabhu) [1177215] - [fs] LOCKD: Fix a race when initialising nlmsvc_timeout (Benjamin Coddington) [1144982] - [scsi] hpsa: add in P840ar controller model name (Joseph Szczypek) [1185467] - [scsi] hpsa: add in gen9 controller model names (Joseph Szczypek) [1185467] [3.10.0-227] - [fs] ext4: fix overwrite race condition (Jacob Tanenbaum) [1152607] {CVE-2014-8086} - [media] ttusb-dec: buffer overflow in ioctl (Alexander Gordeev) [1167116] {CVE-2014-8884} - [drm] i915: demote opregion excessive timeout WARN_ONCE to DRM_INFO_ONCE (Rob Clark) [1145627] - [md] Revert: raid56: Don't perform reads to support writes until stripe is ready (Jes Sorensen) [1153796] - [md] Revert: raid5: avoid livelock caused by non-aligned writes (Jes Sorensen) [1153796] - [drm] i915: further quiet i915 (Rob Clark) [1163074] - [scsi] megaraid_sas: endianness related bug fixes and code optimization (Tomas Henzl) [1179748] - [s390] crypto: kernel oops at insmod of the z90crypt device driver (Hendrik Brueckner) [1172136] - [drm] mgag200: Add command line option to specify preferred depth (Dave Airlie) [1044555] - [drm] mgag200: Consolidate depth/bpp handling (Dave Airlie) [1044555] - [fs] ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'kernel' package(s) on Oracle Linux 7. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3690 60174 http://secunia.com/advisories/60174 70691 http://www.securityfocus.com/bid/70691 DSA-3060 http://www.debian.org/security/2014/dsa-3060 MDVSA-2015:058 http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 RHSA-2015:0290 http://rhn.redhat.com/errata/RHSA-2015-0290.html RHSA-2015:0782 http://rhn.redhat.com/errata/RHSA-2015-0782.html RHSA-2015:0864 http://rhn.redhat.com/errata/RHSA-2015-0864.html SUSE-SU-2015:0178 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html SUSE-SU-2015:0481 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html SUSE-SU-2015:0736 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html USN-2417-1 http://www.ubuntu.com/usn/USN-2417-1 USN-2418-1 http://www.ubuntu.com/usn/USN-2418-1 USN-2419-1 http://www.ubuntu.com/usn/USN-2419-1 USN-2420-1 http://www.ubuntu.com/usn/USN-2420-1 USN-2421-1 http://www.ubuntu.com/usn/USN-2421-1 [oss-security] 20141021 CVE-2014-3690: KVM DoS triggerable by malicious host userspace http://www.openwall.com/lists/oss-security/2014/10/21/4 [oss-security] 20141029 Re: CVE-2014-3690: KVM DoS triggerable by malicious host userspace http://www.openwall.com/lists/oss-security/2014/10/29/7 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2 https://bugzilla.redhat.com/show_bug.cgi?id=1153322 https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a openSUSE-SU-2015:0566 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html Common Vulnerability Exposure (CVE) ID: CVE-2014-3940 BugTraq ID: 67786 http://www.securityfocus.com/bid/67786 https://lkml.org/lkml/2014/3/18/784 http://www.openwall.com/lists/oss-security/2014/06/02/5 RedHat Security Advisories: RHSA-2015:0290 RedHat Security Advisories: RHSA-2015:1272 http://rhn.redhat.com/errata/RHSA-2015-1272.html http://secunia.com/advisories/59011 http://secunia.com/advisories/61310 Common Vulnerability Exposure (CVE) ID: CVE-2014-7825 70972 http://www.securityfocus.com/bid/70972 RHSA-2014:1943 http://rhn.redhat.com/errata/RHSA-2014-1943.html [oss-security] 20141106 Exploitable issues in Linux perf/ftrace subsystems http://www.openwall.com/lists/oss-security/2014/11/06/11 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=086ba77a6db00ed858ff07451bedee197df868c9 https://bugzilla.redhat.com/show_bug.cgi?id=1161565 https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9 linux-kernel-cve20147825-dos(98557) https://exchange.xforce.ibmcloud.com/vulnerabilities/98557 Common Vulnerability Exposure (CVE) ID: CVE-2014-7826 70971 http://www.securityfocus.com/bid/70971 linux-kernel-cve20147826-dos(98556) https://exchange.xforce.ibmcloud.com/vulnerabilities/98556 Common Vulnerability Exposure (CVE) ID: CVE-2014-8086 BugTraq ID: 70376 http://www.securityfocus.com/bid/70376 http://www.spinics.net/lists/linux-ext4/msg45685.html http://www.spinics.net/lists/linux-ext4/msg45683.html https://lkml.org/lkml/2014/10/8/545 https://lkml.org/lkml/2014/10/9/129 http://www.openwall.com/lists/oss-security/2014/10/09/25 RedHat Security Advisories: RHSA-2015:0694 http://rhn.redhat.com/errata/RHSA-2015-0694.html SuSE Security Announcement: SUSE-SU-2015:1478 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html XForce ISS Database: linux-kernel-cve20148086-dos(96922) https://exchange.xforce.ibmcloud.com/vulnerabilities/96922 Common Vulnerability Exposure (CVE) ID: CVE-2014-8160 72061 http://www.securityfocus.com/bid/72061 DSA-3170 http://www.debian.org/security/2015/dsa-3170 MDVSA-2015:057 http://www.mandriva.com/security/advisories?name=MDVSA-2015:057 RHSA-2015:0284 http://rhn.redhat.com/errata/RHSA-2015-0284.html RHSA-2015:0674 http://rhn.redhat.com/errata/RHSA-2015-0674.html SUSE-SU-2015:0529 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html SUSE-SU-2015:0652 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html USN-2513-1 http://www.ubuntu.com/usn/USN-2513-1 USN-2514-1 http://www.ubuntu.com/usn/USN-2514-1 USN-2515-1 http://www.ubuntu.com/usn/USN-2515-1 USN-2516-1 http://www.ubuntu.com/usn/USN-2516-1 USN-2517-1 http://www.ubuntu.com/usn/USN-2517-1 USN-2518-1 http://www.ubuntu.com/usn/USN-2518-1 [netfilter-devel] 20140925 [PATCH nf] netfilter: conntrack: disable generic protocol tracking http://www.spinics.net/lists/netfilter-devel/msg33430.html [oss-security] 20150114 CVE-2014-8160 Linux Kernel: SCTP firewalling fails until SCTP module is loaded http://www.openwall.com/lists/oss-security/2015/01/14/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db29a9508a9246e77087c5531e45b2c88ec6988b https://bugzilla.redhat.com/show_bug.cgi?id=1182059 https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988b openSUSE-SU-2015:0714 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8172 RHSA-2015:0694 [oss-security] 20150309 CVE-2014-8172 http://www.openwall.com/lists/oss-security/2015/03/09/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eee5cc2702929fd41cce28058dc6d6717f723f87 https://bugzilla.redhat.com/show_bug.cgi?id=1198503 https://github.com/torvalds/linux/commit/eee5cc2702929fd41cce28058dc6d6717f723f87 Common Vulnerability Exposure (CVE) ID: CVE-2014-8173 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee53664bda169f519ce3c6a22d378f0b946c8178 https://bugzilla.redhat.com/show_bug.cgi?id=1198457 https://github.com/torvalds/linux/commit/ee53664bda169f519ce3c6a22d378f0b946c8178 Common Vulnerability Exposure (CVE) ID: CVE-2014-8709 BugTraq ID: 70965 http://www.securityfocus.com/bid/70965 http://www.openwall.com/lists/oss-security/2014/11/09/1 http://www.securitytracker.com/id/1037968 SuSE Security Announcement: SUSE-SU-2015:0481 (Google Search) SuSE Security Announcement: SUSE-SU-2015:0652 (Google Search) SuSE Security Announcement: openSUSE-SU-2015:0566 (Google Search) XForce ISS Database: linux-kernel-cve20148709-info-disclsoure(98922) https://exchange.xforce.ibmcloud.com/vulnerabilities/98922 Common Vulnerability Exposure (CVE) ID: CVE-2014-8884 Debian Security Information: DSA-3093 (Google Search) http://www.debian.org/security/2014/dsa-3093 http://www.openwall.com/lists/oss-security/2014/11/14/7 RedHat Security Advisories: RHSA-2015:0782 RedHat Security Advisories: RHSA-2015:0864 http://secunia.com/advisories/62305 Common Vulnerability Exposure (CVE) ID: CVE-2015-0274 1031853 http://www.securitytracker.com/id/1031853 USN-2543-1 http://www.ubuntu.com/usn/USN-2543-1 USN-2544-1 http://www.ubuntu.com/usn/USN-2544-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59 https://bugzilla.redhat.com/show_bug.cgi?id=1195248 https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.