[El-errata] ELSA-2013-2538 Moderate: Oracle Linux 5 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Jul 18 19:44:04 PDT 2013


Oracle Linux Security Advisory ELSA-2013-2538

The following updated rpms for Oracle Linux 5 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.109.3.el5uek.i686.rpm
kernel-uek-debug-2.6.39-400.109.3.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.109.3.el5uek.i686.rpm
kernel-uek-devel-2.6.39-400.109.3.el5uek.i686.rpm
kernel-uek-doc-2.6.39-400.109.3.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.109.3.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.109.3.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-400.109.3.el5uek.noarch.rpm
kernel-uek-2.6.39-400.109.3.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.109.3.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.109.3.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.109.3.el5uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/kernel-uek-2.6.39-400.109.3.el5uek.src.rpm



Description of changes:

[2.6.39-400.109.3.el5uek]
- Revert "be2net: enable interrupts in probe" (Jerry Snitselaar) 
[Orabug: 17179597]

[2.6.39-400.109.2.el5uek]
- be2net: enable interrupts in probe (Jerry Snitselaar) [Orabug: 
17080364] - Bluetooth: RFCOMM - Fix missing msg_namelen update in 
rfcomm_sock_recvmsg() (Mathias Krause) [Orabug: 17173830] {CVE-2013-3225}
- Bluetooth: fix possible info leak in bt_sock_recvmsg() (Mathias 
Krause) [Orabug: 17173830] {CVE-2013-3224}
- atm: update msg_namelen in vcc_recvmsg() (Mathias Krause) [Orabug: 
17173830] {CVE-2013-3222}
- rtnl: fix info leak on RTM_GETLINK request for VF devices (Mathias 
Krause) [Orabug: 17173830] {CVE-2013-2635}
- dcbnl: fix various netlink info leaks (Mathias Krause) [Orabug: 
17173830] {CVE-2013-2634}
- udf: avoid info leak on export (Mathias Krause) [Orabug: 17173830] 
{CVE-2012-6548}
- tracing: Fix possible NULL pointer dereferences (Namhyung Kim) 
[Orabug: 17173830] {CVE-2013-3301}
- b43: stop format string leaking into error msgs (Kees Cook) [Orabug: 
17173830] {CVE-2013-2852}
- signal: always clear sa_restorer on execve (Kees Cook) [Orabug: 
17173830] {CVE-2013-0914}





More information about the El-errata mailing list