[El-errata] ELSA-2013-2537 Moderate: Oracle Linux 5 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2013-2537

The following updated rpms for Oracle Linux 5 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-debug-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-headers-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-devel-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-doc-2.6.32-400.29.2.el5uek.noarch.rpm
kernel-uek-firmware-2.6.32-400.29.2.el5uek.noarch.rpm
ofa-2.6.32-400.29.2.el5uek-1.5.1-4.0.58.i686.rpm
ofa-2.6.32-400.29.2.el5uekdebug-1.5.1-4.0.58.i686.rpm
mlnx_en-2.6.32-400.29.2.el5uek-1.5.7-2.i686.rpm
mlnx_en-2.6.32-400.29.2.el5uekdebug-1.5.7-2.i686.rpm

x86_64:
kernel-uek-firmware-2.6.32-400.29.2.el5uek.noarch.rpm
kernel-uek-doc-2.6.32-400.29.2.el5uek.noarch.rpm
kernel-uek-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-headers-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-devel-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-debug-2.6.32-400.29.2.el5uek.x86_64.rpm
ofa-2.6.32-400.29.2.el5uek-1.5.1-4.0.58.x86_64.rpm
ofa-2.6.32-400.29.2.el5uekdebug-1.5.1-4.0.58.x86_64.rpm
mlnx_en-2.6.32-400.29.2.el5uek-1.5.7-2.x86_64.rpm
mlnx_en-2.6.32-400.29.2.el5uekdebug-1.5.7-2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/kernel-uek-2.6.32-400.29.2.el5uek.src.rpm
http://oss.oracle.com/ol5/SRPMS-updates/ofa-2.6.32-400.29.2.el5uek-1.5.1-4.0.58.src.rpm
http://oss.oracle.com/ol5/SRPMS-updates/mlnx_en-2.6.32-400.29.2.el5uek-1.5.7-2.src.rpm



Description of changes:

kernel-uek
[2.6.32-400.29.2.el5uek]
- Bluetooth: RFCOMM - Fix missing msg_namelen update in 
rfcomm_sock_recvmsg() (Mathias Krause) [Orabug: 17173824] {CVE-2013-3225}
- Bluetooth: fix possible info leak in bt_sock_recvmsg() (Mathias 
Krause) [Orabug: 17173824] {CVE-2013-3224}
- atm: update msg_namelen in vcc_recvmsg() (Mathias Krause) [Orabug: 
17173824] {CVE-2013-3222}
- dcbnl: fix various netlink info leaks (Mathias Krause) [Orabug: 
17173824] {CVE-2013-2634}
- udf: avoid info leak on export (Mathias Krause) [Orabug: 17173824] 
{CVE-2012-6548}
- b43: stop format string leaking into error msgs (Kees Cook) [Orabug: 
17173824] {CVE-2013-2852}
- signal: always clear sa_restorer on execve (Kees Cook) [Orabug: 
17173824] {CVE-2013-0914}