Test ID:	1.3.6.1.4.1.25623.1.0.123082
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2015-1221)
Summary:	The remote host is missing an update for the 'kernel' package(s) announced via the ELSA-2015-1221 advisory.
Description:	Summary: The remote host is missing an update for the 'kernel' package(s) announced via the ELSA-2015-1221 advisory. Vulnerability Insight: [2.6.32-504.30.3] - [redhat] spec: Update dracut dependency to pull in drbg module (Frantisek Hrbata) [1241517 1241338] [2.6.32-504.30.2] - [crypto] rng: Remove krng (Herbert Xu) [1233512 1226418] - [crypto] drbg: Add stdrng alias and increase priority (Herbert Xu) [1233512 1226418] - [crypto] seqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418] - [crypto] eseqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418] - [crypto] chainiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418] [2.6.32-504.30.1] - [net] Fix checksum features handling in netif_skb_features() (Vlad Yasevich) [1231690 1220247] [2.6.32-504.29.1] - [net] gso: fix skb_segment for non-offset skb pointers (Jiri Benc) [1229586 1200533] [2.6.32-504.28.1] - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1202860 1185166] {CVE-2015-1805} - [net] ipv4: Missing sk_nulls_node_init in ping_unhash (Denys Vlasenko) [1218102 1218103] {CVE-2015-3636} - [net] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition (Jesper Brouer) [1227467 1227468 1212801 1200541] - [net] tcp: Restore RFC5961-compliant behavior for SYN packets (Jesper Brouer) [1227467 1227468 1212801 1200541] - [x86] kernel: ignore NMI IOCK when in kdump kernel (Jerry Snitselaar) [1225054 1196263] - [x86] asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Mateusz Guzik) [1209232 1209233] {CVE-2015-2830} - [fs] gfs2: try harder to obtain journal lock during recovery (Abhijith Das) [1222588 1110846] for core_pmu (Jiri Olsa) [1219149 1188336] - [x86] mm: Linux stack ASLR implementation (Jacob Tanenbaum) [1195682 1195683] {CVE-2015-1593} - [fs] xfs: DIO write completion size updates race (Brian Foster) [1218499 1198440] - [net] ipv6: Don't reduce hop limit for an interface (Denys Vlasenko) [1208492 1208493] - [net] vlan: more careful checksum features handling (Vlad Yasevich) [1221844 1212384] - [kernel] tracing: Export tracing clock functions (Jerry Snitselaar) [1217986 1212502] - [edac] sb_edac: fix corruption/crash on imbalanced Haswell home agents (Seth Jennings) [1213468 1210148] - [netdrv] tun: Fix csum_start with VLAN acceleration (Jason Wang) [1217189 1036482] - [netdrv] tun: unbreak truncated packet signalling (Jason Wang) [1217189 1036482] - [netdrv] tuntap: hardware vlan tx support (Jason Wang) [1217189 1036482] - [vhost] vhost-net: fix handle_rx buffer size (Jason Wang) [1217189 1036482] - [netdrv] ixgbe: fix X540 Completion timeout (John Greene) [1215855 1150343] - [char] tty: drop driver reference in tty_open fail path (Mateusz Guzik) [1201893 1201894] - [netdrv] macvtap: Fix csum_start when VLAN tags are present (Vlad Yasevich) [1215914 1123697] - [netdrv] macvtap: signal truncated packets (Vlad Yasevich) [1215914 1123697] - [netdrv] macvtap: restore vlan header on user read (Vlad Yasevich) [1215914 1123697] - [netdrv] macvlan: ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'kernel' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5321 RHSA-2015:1221 http://rhn.redhat.com/errata/RHSA-2015-1221.html [oss-security] 20150313 Re: CVE request: Linux kernel: tty: kobject reference leakage in tty_open http://www.openwall.com/lists/oss-security/2015/03/13/17 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c290f8358acaeffd8e0c551ddcc24d1206143376 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.1 https://bugzilla.redhat.com/show_bug.cgi?id=1201887 https://github.com/torvalds/linux/commit/c290f8358acaeffd8e0c551ddcc24d1206143376 Common Vulnerability Exposure (CVE) ID: CVE-2015-1593 BugTraq ID: 72607 http://www.securityfocus.com/bid/72607 Debian Security Information: DSA-3170 (Google Search) http://www.debian.org/security/2015/dsa-3170 http://hmarco.org/bugs/linux-ASLR-integer-overflow.html https://lkml.org/lkml/2015/1/7/811 http://www.openwall.com/lists/oss-security/2015/02/13/13 RedHat Security Advisories: RHSA-2015:1137 http://rhn.redhat.com/errata/RHSA-2015-1137.html RedHat Security Advisories: RHSA-2015:1138 http://rhn.redhat.com/errata/RHSA-2015-1138.html RedHat Security Advisories: RHSA-2015:1221 RedHat Security Advisories: RHSA-2019:3517 https://access.redhat.com/errata/RHSA-2019:3517 SuSE Security Announcement: SUSE-SU-2015:0736 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html SuSE Security Announcement: openSUSE-SU-2015:0714 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html http://www.ubuntu.com/usn/USN-2560-1 http://www.ubuntu.com/usn/USN-2561-1 http://www.ubuntu.com/usn/USN-2562-1 http://www.ubuntu.com/usn/USN-2563-1 http://www.ubuntu.com/usn/USN-2564-1 http://www.ubuntu.com/usn/USN-2565-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2830 Debian Security Information: DSA-3237 (Google Search) http://www.debian.org/security/2015/dsa-3237 http://www.openwall.com/lists/oss-security/2015/04/02/1 http://www.securitytracker.com/id/1032413 SuSE Security Announcement: SUSE-SU-2015:1478 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html SuSE Security Announcement: SUSE-SU-2015:1592 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html SuSE Security Announcement: SUSE-SU-2015:1611 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html http://www.ubuntu.com/usn/USN-2631-1 http://www.ubuntu.com/usn/USN-2632-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2922 BugTraq ID: 74315 http://www.securityfocus.com/bid/74315 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html http://www.openwall.com/lists/oss-security/2015/04/04/2 RedHat Security Advisories: RHSA-2015:1534 http://rhn.redhat.com/errata/RHSA-2015-1534.html RedHat Security Advisories: RHSA-2015:1564 http://rhn.redhat.com/errata/RHSA-2015-1564.html http://www.securitytracker.com/id/1032417 SuSE Security Announcement: SUSE-SU-2015:1224 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html SuSE Security Announcement: openSUSE-SU-2015:1382 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3636 BugTraq ID: 74450 http://www.securityfocus.com/bid/74450 Debian Security Information: DSA-3290 (Google Search) http://www.debian.org/security/2015/dsa-3290 http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157788.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html http://www.openwall.com/lists/oss-security/2015/05/02/5 RedHat Security Advisories: RHSA-2015:1583 http://rhn.redhat.com/errata/RHSA-2015-1583.html RedHat Security Advisories: RHSA-2015:1643 http://rhn.redhat.com/errata/RHSA-2015-1643.html http://www.securitytracker.com/id/1033186 SuSE Security Announcement: SUSE-SU-2015:1487 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html SuSE Security Announcement: SUSE-SU-2015:1488 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html SuSE Security Announcement: SUSE-SU-2015:1489 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html SuSE Security Announcement: SUSE-SU-2015:1491 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html http://www.ubuntu.com/usn/USN-2633-1 http://www.ubuntu.com/usn/USN-2634-1
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.