[El-errata] ELSA-2014-3105 Important: Oracle Linux 5 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2014-3105

The following updated rpms for Oracle Linux 5 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.32-400.36.12.el5uek.i686.rpm
kernel-uek-debug-2.6.32-400.36.12.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.32-400.36.12.el5uek.i686.rpm
kernel-uek-headers-2.6.32-400.36.12.el5uek.i686.rpm
kernel-uek-devel-2.6.32-400.36.12.el5uek.i686.rpm
kernel-uek-doc-2.6.32-400.36.12.el5uek.noarch.rpm
kernel-uek-firmware-2.6.32-400.36.12.el5uek.noarch.rpm
ofa-2.6.32-400.36.12.el5uek-1.5.1-4.0.58.i686.rpm
ofa-2.6.32-400.36.12.el5uekdebug-1.5.1-4.0.58.i686.rpm
mlnx_en-2.6.32-400.36.12.el5uek-1.5.7-2.i686.rpm
mlnx_en-2.6.32-400.36.12.el5uekdebug-1.5.7-2.i686.rpm

x86_64:
kernel-uek-firmware-2.6.32-400.36.12.el5uek.noarch.rpm
kernel-uek-doc-2.6.32-400.36.12.el5uek.noarch.rpm
kernel-uek-2.6.32-400.36.12.el5uek.x86_64.rpm
kernel-uek-headers-2.6.32-400.36.12.el5uek.x86_64.rpm
kernel-uek-devel-2.6.32-400.36.12.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.32-400.36.12.el5uek.x86_64.rpm
kernel-uek-debug-2.6.32-400.36.12.el5uek.x86_64.rpm
ofa-2.6.32-400.36.12.el5uek-1.5.1-4.0.58.x86_64.rpm
ofa-2.6.32-400.36.12.el5uekdebug-1.5.1-4.0.58.x86_64.rpm
mlnx_en-2.6.32-400.36.12.el5uek-1.5.7-2.x86_64.rpm
mlnx_en-2.6.32-400.36.12.el5uekdebug-1.5.7-2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/kernel-uek-2.6.32-400.36.12.el5uek.src.rpm
http://oss.oracle.com/ol5/SRPMS-updates/ofa-2.6.32-400.36.12.el5uek-1.5.1-4.0.58.src.rpm
http://oss.oracle.com/ol5/SRPMS-updates/mlnx_en-2.6.32-400.36.12.el5uek-1.5.7-2.src.rpm



Description of changes:

kernel-uek
[2.6.32-400.36.12.el5uek]
- HID: fix a couple of off-by-ones (Jiri Kosina)  [Orabug: 19849320] 
{CVE-2014-3184}
- ALSA: control: Protect user controls against concurrent access 
(Lars-Peter Clausen)  [Orabug: 20192545]  {CVE-2014-4652}
- udf: Avoid infinite loop when processing indirect ICBs (Jan Kara) 
[Orabug: 20192451]  {CVE-2014-6410}
- ALSA: control: Make sure that id->index does not overflow (Lars-Peter 
Clausen)  [Orabug: 20192420]  {CVE-2014-4656}
- ALSA: control: Handle numid overflow (Lars-Peter Clausen)  [Orabug: 
20192379]  {CVE-2014-4656}
- net: sctp: fix remote memory pressure from excessive queueing (Daniel 
Borkmann)  [Orabug: 20192060]  {CVE-2014-3688}