[El-errata] ELSA-2013-2537 Moderate: Oracle Linux 6 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Jul 18 13:30:18 PDT 2013


Oracle Linux Security Advisory ELSA-2013-2537

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.32-400.29.2.el6uek.i686.rpm
kernel-uek-debug-2.6.32-400.29.2.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.32-400.29.2.el6uek.i686.rpm
kernel-uek-headers-2.6.32-400.29.2.el6uek.i686.rpm
kernel-uek-devel-2.6.32-400.29.2.el6uek.i686.rpm
kernel-uek-doc-2.6.32-400.29.2.el6uek.noarch.rpm
kernel-uek-firmware-2.6.32-400.29.2.el6uek.noarch.rpm
ofa-2.6.32-400.29.2.el6uek-1.5.1-4.0.58.i686.rpm
ofa-2.6.32-400.29.2.el6uekdebug-1.5.1-4.0.58.i686.rpm
mlnx_en-2.6.32-400.29.2.el6uek-1.5.7-0.1.i686.rpm
mlnx_en-2.6.32-400.29.2.el6uekdebug-1.5.7-0.1.i686.rpm

x86_64:
kernel-uek-firmware-2.6.32-400.29.2.el6uek.noarch.rpm
kernel-uek-doc-2.6.32-400.29.2.el6uek.noarch.rpm
kernel-uek-2.6.32-400.29.2.el6uek.x86_64.rpm
kernel-uek-headers-2.6.32-400.29.2.el6uek.x86_64.rpm
kernel-uek-devel-2.6.32-400.29.2.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.32-400.29.2.el6uek.x86_64.rpm
kernel-uek-debug-2.6.32-400.29.2.el6uek.x86_64.rpm
ofa-2.6.32-400.29.2.el6uek-1.5.1-4.0.58.x86_64.rpm
ofa-2.6.32-400.29.2.el6uekdebug-1.5.1-4.0.58.x86_64.rpm
mlnx_en-2.6.32-400.29.2.el6uek-1.5.7-0.1.x86_64.rpm
mlnx_en-2.6.32-400.29.2.el6uekdebug-1.5.7-0.1.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.32-400.29.2.el6uek.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/ofa-2.6.32-400.29.2.el6uek-1.5.1-4.0.58.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/mlnx_en-2.6.32-400.29.2.el6uek-1.5.7-0.1.src.rpm



Description of changes:

kernel-uek
[2.6.32-400.29.2.el6uek]
- Bluetooth: RFCOMM - Fix missing msg_namelen update in 
rfcomm_sock_recvmsg() (Mathias Krause) [Orabug: 17173824] {CVE-2013-3225}
- Bluetooth: fix possible info leak in bt_sock_recvmsg() (Mathias 
Krause) [Orabug: 17173824] {CVE-2013-3224}
- atm: update msg_namelen in vcc_recvmsg() (Mathias Krause) [Orabug: 
17173824] {CVE-2013-3222}
- dcbnl: fix various netlink info leaks (Mathias Krause) [Orabug: 
17173824] {CVE-2013-2634}
- udf: avoid info leak on export (Mathias Krause) [Orabug: 17173824] 
{CVE-2012-6548}
- b43: stop format string leaking into error msgs (Kees Cook) [Orabug: 
17173824] {CVE-2013-2852}
- signal: always clear sa_restorer on execve (Kees Cook) [Orabug: 
17173824] {CVE-2013-0914}





More information about the El-errata mailing list