ID de Prueba:	1.3.6.1.4.1.25623.1.0.66174
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2009:1540
Resumen:	The remote host is missing updates to kernel-rt packages announced in;advisory RHSA-2009:1540.;;For details on the issues addressed in this update, please visit;the referenced security advisories.;;These updated packages also include bug fixes and enhancements. Users are;directed to the Realtime Security Update Release Notes for version 1.1 for;information on these changes, which will be available shortly from one of the referenced links.;;Users should upgrade to these updated packages, which contain backported;patches to correct these issues and add enhancements. The system must be;rebooted for this update to take effect.
Descripción:	Summary: The remote host is missing updates to kernel-rt packages announced in advisory RHSA-2009:1540. For details on the issues addressed in this update, please visit the referenced security advisories. These updated packages also include bug fixes and enhancements. Users are directed to the Realtime Security Update Release Notes for version 1.1 for information on these changes, which will be available shortly from one of the referenced links. Users should upgrade to these updated packages, which contain backported patches to correct these issues and add enhancements. The system must be rebooted for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1895 20090724 rPSA-2009-0111-1 kernel http://www.securityfocus.com/archive/1/505254/100/0/threaded 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components http://www.securityfocus.com/archive/1/507985/100/0/threaded 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel http://www.securityfocus.com/archive/1/512019/100/0/threaded 35647 http://www.securityfocus.com/bid/35647 35801 http://secunia.com/advisories/35801 36045 http://secunia.com/advisories/36045 36051 http://secunia.com/advisories/36051 36054 http://secunia.com/advisories/36054 36116 http://secunia.com/advisories/36116 36131 http://secunia.com/advisories/36131 36759 http://secunia.com/advisories/36759 37471 http://secunia.com/advisories/37471 55807 http://www.osvdb.org/55807 ADV-2009-1866 http://www.vupen.com/english/advisories/2009/1866 ADV-2009-3316 http://www.vupen.com/english/advisories/2009/3316 DSA-1844 http://www.debian.org/security/2009/dsa-1844 DSA-1845 http://www.debian.org/security/2009/dsa-1845 FEDORA-2009-8144 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html FEDORA-2009-8264 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html MDVSA-2011:051 http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 RHSA-2009:1193 http://www.redhat.com/support/errata/RHSA-2009-1193.html RHSA-2009:1438 http://www.redhat.com/support/errata/RHSA-2009-1438.html RHSA-2009:1540 https://rhn.redhat.com/errata/RHSA-2009-1540.html RHSA-2009:1550 https://rhn.redhat.com/errata/RHSA-2009-1550.html USN-807-1 http://www.ubuntu.com/usn/usn-807-1 http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6 http://patchwork.kernel.org/patch/32598/ http://wiki.rpath.com/Advisories:rPSA-2009-0111 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3 http://www.vmware.com/security/advisories/VMSA-2009-0016.html https://bugs.launchpad.net/bugs/cve/2009-1895 oval:org.mitre.oval:def:11768 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11768 oval:org.mitre.oval:def:7826 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7826 oval:org.mitre.oval:def:9453 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9453 Common Vulnerability Exposure (CVE) ID: CVE-2009-2691 BugTraq ID: 36019 http://www.securityfocus.com/bid/36019 Debian Security Information: DSA-2005 (Google Search) http://www.debian.org/security/2010/dsa-2005 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html http://lkml.org/lkml/2009/6/23/652 http://lkml.org/lkml/2009/6/23/653 http://marc.info/?l=linux-kernel&m=124718946021193 http://marc.info/?l=linux-kernel&m=124718949821250 http://www.openwall.com/lists/oss-security/2009/08/11/1 RedHat Security Advisories: RHSA-2009:1540 http://secunia.com/advisories/36265 http://secunia.com/advisories/36501 http://www.vupen.com/english/advisories/2009/2246 XForce ISS Database: linux-kernel-mmformaps-info-disclosure(52401) https://exchange.xforce.ibmcloud.com/vulnerabilities/52401 Common Vulnerability Exposure (CVE) ID: CVE-2009-2695 BugTraq ID: 36051 http://www.securityfocus.com/bid/36051 http://twitter.com/spendergrsec/statuses/3303390960 http://www.openwall.com/lists/oss-security/2009/08/17/4 http://lists.vmware.com/pipermail/security-announce/2010/000082.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882 RedHat Security Advisories: RHSA-2009:1548 https://rhn.redhat.com/errata/RHSA-2009-1548.html http://www.redhat.com/support/errata/RHSA-2009-1672.html http://secunia.com/advisories/37105 http://secunia.com/advisories/38794 http://secunia.com/advisories/38834 http://www.ubuntu.com/usn/USN-852-1 http://www.vupen.com/english/advisories/2010/0528 Common Vulnerability Exposure (CVE) ID: CVE-2009-2849 http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/ http://www.openwall.com/lists/oss-security/2009/07/24/1 http://www.openwall.com/lists/oss-security/2009/07/26/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10396 http://www.securitytracker.com/id?1022961 XForce ISS Database: kernel-mddriver-dos(52858) https://exchange.xforce.ibmcloud.com/vulnerabilities/52858 Common Vulnerability Exposure (CVE) ID: CVE-2009-2910 36576 http://www.securityfocus.com/bid/36576 36927 http://secunia.com/advisories/36927 37075 http://secunia.com/advisories/37075 37351 http://secunia.com/advisories/37351 FEDORA-2009-10525 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html RHSA-2009:1671 http://www.redhat.com/support/errata/RHSA-2009-1671.html RHSA-2010:0046 https://rhn.redhat.com/errata/RHSA-2010-0046.html RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html SUSE-SA:2009:054 http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html SUSE-SA:2009:056 http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html SUSE-SA:2010:012 http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html USN-864-1 http://www.ubuntu.com/usn/usn-864-1 [linux-kernel] 20091001 [tip:x86/urgent] x86: Don't leak 64-bit kernel register values to 32-bit processes http://lkml.org/lkml/2009/10/1/164 [oss-security] 20091001 CVE Request (kernel) http://marc.info/?l=oss-security&m=125442304214452&w=2 [oss-security] 20091001 Re: CVE Request (kernel) http://www.openwall.com/lists/oss-security/2009/10/02/1 [oss-security] 20091002 Re: CVE Request (kernel) http://marc.info/?l=oss-security&m=125444390112831&w=2 [oss-security] 20091009 Re: CVE Request (kernel) http://marc.info/?l=oss-security&m=125511635004768&w=2 http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6 http://support.avaya.com/css/P8/documents/100073666 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4 https://bugzilla.redhat.com/show_bug.cgi?id=526788 oval:org.mitre.oval:def:10823 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823 oval:org.mitre.oval:def:7359 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359 Common Vulnerability Exposure (CVE) ID: CVE-2009-3002 BugTraq ID: 36150 http://www.securityfocus.com/bid/36150 Bugtraq: 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel (Google Search) http://www.exploit-db.com/exploits/9521 http://www.openwall.com/lists/oss-security/2009/08/27/1 http://www.openwall.com/lists/oss-security/2009/08/27/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11611 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11741 RedHat Security Advisories: RHSA-2009:1550 http://secunia.com/advisories/36438 SuSE Security Announcement: SUSE-SA:2009:054 (Google Search) SuSE Security Announcement: SUSE-SA:2009:056 (Google Search) SuSE Security Announcement: SUSE-SA:2010:012 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2009-3228 http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 http://www.openwall.com/lists/oss-security/2009/09/03/1 http://www.openwall.com/lists/oss-security/2009/09/05/2 http://www.openwall.com/lists/oss-security/2009/09/06/2 http://www.openwall.com/lists/oss-security/2009/09/07/2 http://www.openwall.com/lists/oss-security/2009/09/17/1 http://www.openwall.com/lists/oss-security/2009/09/17/9 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6757 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9409 http://www.redhat.com/support/errata/RHSA-2009-1522.html http://www.securitytracker.com/id?1023073 http://secunia.com/advisories/37084 Common Vulnerability Exposure (CVE) ID: CVE-2009-3547 36901 http://www.securityfocus.com/bid/36901 38017 http://secunia.com/advisories/38017 38794 38834 ADV-2010-0528 FEDORA-2009-11038 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html MDVSA-2009:329 http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 RHSA-2009:1541 https://rhn.redhat.com/errata/RHSA-2009-1541.html RHSA-2009:1548 RHSA-2009:1672 SUSE-SA:2010:001 http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html [linux-kernel] 20091014 fs/pipe.c null pointer dereference http://lkml.org/lkml/2009/10/14/184 [linux-kernel] 20091021 Re: [PATCH v4 1/1]: fs: pipe.c null pointer dereference + really sign off + unmangled diffs http://lkml.org/lkml/2009/10/21/42 [oss-security] 20091103 CVE-2009-3547 kernel: fs: pipe.c null pointer dereference http://marc.info/?l=oss-security&m=125724568017045&w=2 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6 https://bugzilla.redhat.com/show_bug.cgi?id=530490 oval:org.mitre.oval:def:11513 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513 oval:org.mitre.oval:def:7608 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608 oval:org.mitre.oval:def:9327 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327 Common Vulnerability Exposure (CVE) ID: CVE-2009-3612 37086 http://secunia.com/advisories/37086 37909 http://secunia.com/advisories/37909 RHSA-2009:1670 http://www.redhat.com/support/errata/RHSA-2009-1670.html SUSE-SA:2009:061 http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html SUSE-SA:2009:064 http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html [oss-security] 20091014 CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 http://www.openwall.com/lists/oss-security/2009/10/14/2 [oss-security] 20091014 Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 http://www.openwall.com/lists/oss-security/2009/10/15/1 [oss-security] 20091014 Re: CVE request: kernel: tc: uninitialised kernel memory leak http://www.openwall.com/lists/oss-security/2009/10/14/1 [oss-security] 20091015 Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 http://www.openwall.com/lists/oss-security/2009/10/15/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad61df918c44316940404891d5082c63e79c256a http://patchwork.ozlabs.org/patch/35412/ http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5 https://bugzilla.redhat.com/show_bug.cgi?id=528868 oval:org.mitre.oval:def:10395 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10395 oval:org.mitre.oval:def:7557 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7557 Common Vulnerability Exposure (CVE) ID: CVE-2009-3613 36706 http://www.securityfocus.com/bid/36706 [oss-security] 20091015 Re: CVE request kernel: flood ping cause http://marc.info/?l=oss-security&m=125561712529352&w=2 http://bugzilla.kernel.org/show_bug.cgi?id=9468 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f849810079442a20be118ce905 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.22 https://bugzilla.redhat.com/show_bug.cgi?id=529137 oval:org.mitre.oval:def:10209 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10209 oval:org.mitre.oval:def:7377 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7377 Common Vulnerability Exposure (CVE) ID: CVE-2009-3620 36707 http://secunia.com/advisories/36707 36824 http://www.securityfocus.com/bid/36824 MDVSA-2010:088 http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 MDVSA-2010:198 RHSA-2010:0882 http://www.redhat.com/support/errata/RHSA-2010-0882.html SUSE-SA:2010:013 http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html [linux-kernel] 20090921 [git pull] drm tree. http://article.gmane.org/gmane.linux.kernel/892259 [oss-security] 20091019 CVE request: kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised http://www.openwall.com/lists/oss-security/2009/10/19/1 [oss-security] 20091019 Re: CVE request: kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised http://www.openwall.com/lists/oss-security/2009/10/19/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7dc482dfeeeefcfd000d4271c4626937406756d7 http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.31-git11.log https://bugzilla.redhat.com/show_bug.cgi?id=529597 oval:org.mitre.oval:def:6763 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6763 oval:org.mitre.oval:def:9891 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9891 Common Vulnerability Exposure (CVE) ID: CVE-2009-3621 [linux-kernel] 20091019 Re: [PATCH] AF_UNIX: Fix deadlock on connecting to shutdown socket http://lkml.org/lkml/2009/10/19/50 [oss-security] 20091019 CVE request: kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket http://www.openwall.com/lists/oss-security/2009/10/19/2 [oss-security] 20091019 Re: CVE request: kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket http://www.openwall.com/lists/oss-security/2009/10/19/4 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675 http://patchwork.kernel.org/patch/54678/ https://bugzilla.redhat.com/show_bug.cgi?id=529626 oval:org.mitre.oval:def:6895 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895 oval:org.mitre.oval:def:9921 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921 Common Vulnerability Exposure (CVE) ID: CVE-2009-3001 BugTraq ID: 36126 http://www.securityfocus.com/bid/36126 http://www.exploit-db.com/exploits/9513 http://jon.oberheide.org/files/llc-getsockname-leak.c http://www.openwall.com/lists/oss-security/2009/08/26/1 XForce ISS Database: linux-kernel-afllcgetsockname-info-disc(52732) https://exchange.xforce.ibmcloud.com/vulnerabilities/52732
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.