| Description: | Summary:
The remote host is missing an update for the 'dtrace-modules-4.1.12-32.1.2.el6uek, dtrace-modules-4.1.12-32.1.2.el7uek, kernel-uek' package(s) announced via the ELSA-2016-3510 advisory.
Vulnerability Insight:
kernel-uek
[4.1.12-32.1.2]
- KEYS: Fix keyring ref leak in join_session_keyring() (Yevgeny Pats) [Orabug: 22563965] {CVE-2016-0728}
[4.1.12-32.1.1]
- ocfs2: return non-zero st_blocks for inline data (John Haxby) [Orabug: 22218243]
- xen/events/fifo: Consume unprocessed events when a CPU dies (Ross Lagerwall) [Orabug: 22498877]
- Revert 'xen/fb: allow xenfb initialization for hvm guests' (Konrad Rzeszutek Wilk)
- xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set. (Konrad Rzeszutek Wilk)
- xen/pciback: For XEN_PCI_OP_disable_msi[x] only disable if device has MSI(X) enabled. (Konrad Rzeszutek Wilk)
- xen/pciback: Do not install an IRQ handler for MSI interrupts. (Konrad Rzeszutek Wilk)
- xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI or MSI-X enabled (Konrad Rzeszutek Wilk)
- xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled (Konrad Rzeszutek Wilk)
- xen/pciback: Save xen_pci_op commands before processing it (Konrad Rzeszutek Wilk)
- xen-scsiback: safely copy requests (David Vrabel)
- xen-blkback: read from indirect descriptors only once (Roger Pau Monne)
- xen-blkback: only read request operation from shared ring once (Roger Pau Monne)
- xen-netback: use RING_COPY_REQUEST() throughout (David Vrabel)
- xen-netback: don't use last request to determine minimum Tx credit (David Vrabel)
- xen: Add RING_COPY_REQUEST() (David Vrabel)
Affected Software/OS:
'dtrace-modules-4.1.12-32.1.2.el6uek, dtrace-modules-4.1.12-32.1.2.el7uek, kernel-uek' package(s) on Oracle Linux 6, Oracle Linux 7.
Solution:
Please install the updated package(s).
CVSS Score:
7.2
CVSS Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
