[El-errata] ELSA-2014-3103 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2014-3103

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-55.1.1.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-55.1.1.el7uek.noarch.rpm
kernel-uek-3.8.13-55.1.1.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-55.1.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-55.1.1.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-55.1.1.el7uek.x86_64.rpm
dtrace-modules-3.8.13-55.1.1.el7uek-0.4.3-4.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-55.1.1.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-55.1.1.el7uek-0.4.3-4.el7.src.rpm



Description of changes:

kernel-uek
[3.8.13-55.1.1.el7uek]
- ALSA: control: Protect user controls against concurrent access 
(Lars-Peter Clausen)  [Orabug: 20192540]  {CVE-2014-4652}
- target/rd: Refactor rd_build_device_space + rd_release_device_space 
(Nicholas Bellinger)  [Orabug: 20192516]  {CVE-2014-4027}
- HID: logitech: perform bounds checking on device_id early enough (Jiri 
Kosina)  [Orabug: 20192477]  {CVE-2014-3182}
- udf: Avoid infinite loop when processing indirect ICBs (Jan Kara) 
[Orabug: 20192448]  {CVE-2014-6410}
- ALSA: control: Make sure that id->index does not overflow (Lars-Peter 
Clausen)  [Orabug: 20192416]  {CVE-2014-4656}
- ALSA: control: Handle numid overflow (Lars-Peter Clausen)  [Orabug: 
20192367]  {CVE-2014-4656}
- HID: picolcd: sanity check report size in raw_event() callback (Jiri 
Kosina)  [Orabug: 20192208]  {CVE-2014-3186}
- net: sctp: fix remote memory pressure from excessive queueing (Daniel 
Borkmann)  [Orabug: 20192058]  {CVE-2014-3688}