Test ID:	1.3.6.1.4.1.25623.1.0.71929
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2010:0907
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2010:0907. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: * Buffer overflow flaws were found in the Linux kernel's implementation of the server-side External Data Representation (XDR) for the Network File System (NFS) version 4. An attacker on the local network could send a specially-crafted large compound request to the NFSv4 server, which could possibly result in a kernel panic (denial of service) or, potentially, code execution. (CVE-2010-2521, Important) This update also fixes the following bugs: * A race condition existed when generating new process IDs with the result that the wrong process could have been signaled or killed accidentally, leading to various application faults. This update detects and disallows the reuse of PID numbers. (BZ#638865) * In a two node cluster, moving 100 files between two folders using the lock master was nearly instantaneous. However, not using the lock master resulted in considerably worse performance on both GFS1 (Global File System 1) and GFS2 (Global File System 2) file systems. With this update, not using the lock master does not lead to worsened performance on either of the aforementioned file systems. (BZ#639071) * The device naming changed after additional devices were added to the system and caused various problems. With this update, device naming remains constant after adding any additional devices. (BZ#646764) * On some bnx2-based devices, frames could drop unexpectedly. This was shown by the increasing rx_fw_discards values in the ethtool --statistics output. With this update, frames are no longer dropped and all bnx2-based devices work as expected. (BZ#649254) Users should upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2010-0907.html http://www.redhat.com/security/updates/classification/#important Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2521 1024286 http://securitytracker.com/id?1024286 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 42249 http://www.securityfocus.com/bid/42249 43315 http://secunia.com/advisories/43315 ADV-2010-3050 http://www.vupen.com/english/advisories/2010/3050 DSA-2094 http://www.debian.org/security/2010/dsa-2094 MDVSA-2010:198 http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 MDVSA-2011:051 http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 RHSA-2010:0606 https://rhn.redhat.com/errata/RHSA-2010-0606.html RHSA-2010:0610 http://www.redhat.com/support/errata/RHSA-2010-0610.html RHSA-2010:0893 http://www.redhat.com/support/errata/RHSA-2010-0893.html RHSA-2010:0907 http://www.redhat.com/support/errata/RHSA-2010-0907.html SUSE-SA:2010:040 http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html USN-1000-1 http://www.ubuntu.com/usn/USN-1000-1 [oss-security] 20100707 CVE request - kernel: nfsd4: bug in read_buf http://www.openwall.com/lists/oss-security/2010/07/07/1 [oss-security] 20100708 Re: CVE request - kernel: nfsd4: bug in read_buf http://www.openwall.com/lists/oss-security/2010/07/09/2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2bc3c1179c781b359d4f2f3439cb3df72afc17fc http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc6 http://www.vmware.com/security/advisories/VMSA-2011-0003.html https://bugzilla.redhat.com/show_bug.cgi?id=612028
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.