[El-errata] ELSA-2014-0159 Important: Oracle Linux 6 kernel security and bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2014-0159

https://rhn.redhat.com/errata/RHSA-2014-0159.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-2.6.32-431.5.1.el6.i686.rpm
kernel-abi-whitelists-2.6.32-431.5.1.el6.noarch.rpm
kernel-debug-2.6.32-431.5.1.el6.i686.rpm
kernel-debug-devel-2.6.32-431.5.1.el6.i686.rpm
kernel-devel-2.6.32-431.5.1.el6.i686.rpm
kernel-doc-2.6.32-431.5.1.el6.noarch.rpm
kernel-firmware-2.6.32-431.5.1.el6.noarch.rpm
kernel-headers-2.6.32-431.5.1.el6.i686.rpm
perf-2.6.32-431.5.1.el6.i686.rpm
python-perf-2.6.32-431.5.1.el6.i686.rpm

x86_64:
kernel-2.6.32-431.5.1.el6.x86_64.rpm
kernel-abi-whitelists-2.6.32-431.5.1.el6.noarch.rpm
kernel-debug-2.6.32-431.5.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-431.5.1.el6.x86_64.rpm
kernel-devel-2.6.32-431.5.1.el6.x86_64.rpm
kernel-doc-2.6.32-431.5.1.el6.noarch.rpm
kernel-firmware-2.6.32-431.5.1.el6.noarch.rpm
kernel-headers-2.6.32-431.5.1.el6.x86_64.rpm
perf-2.6.32-431.5.1.el6.x86_64.rpm
python-perf-2.6.32-431.5.1.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-2.6.32-431.5.1.el6.src.rpm


Description of changes:

[2.6.32-431.5.1.el6]
- [net] sctp: fix checksum marking for outgoing packets (Daniel 
Borkmann) [1046041 1040385]
- [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
- [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 
1036312]
- [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and 
state recovery (Steve Dickson) [1045094 1034487]
- [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete 
(Steve Dickson) [1051395 1034348]
- [fs] nfs: wait on recovery for async session errors (Steve Dickson) 
[1051393 1030049]
- [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve 
Dickson) [1051393 1030049]
- [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve 
Dickson) [1051393 1030049]
- [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 
1039487] {CVE-2013-2929}
- [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
- [net] ipv6: remove the unnecessary statement in find_match() (Jiri 
Benc) [1043779 1029585]
- [net] ipv6: fix route selection if kernel is not compiled with 
CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
- [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n 
(Jiri Benc) [1043779 1029585]
- [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) 
[1040826 1030094]
- [net] ndisc: Update neigh->updated with write lock (Jiri Benc) 
[1040826 1030094]
- [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
- [net] netfilter: push reasm skb through instead of original frag skbs 
(Jiri Pirko) [1049590 1011214]
- [net] ip6_output: fragment outgoing reassembled skb properly (Jiri 
Pirko) [1049590 1011214]
- [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling 
(Jiri Pirko) [1049590 1011214]
- [net] ipv4: fix path MTU discovery with connection tracking (Jiri 
Pirko) [1049590 1011214]
- [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
- [edac] Add error decoding support for AMD Fam16h processors (Prarit 
Bhargava) [1051394 1020290]
- [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) 
[1040498 1029203]
- [netdrv] bnx2x: handle known but unsupported VF messages (Michal 
Schmidt) [1040498 1029203]
- [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) 
[1040497 1029200]
- [net] ipv6: fix leaking uninitialized port number of offender sockaddr 
(Florian Westphal) [1035882 1035883] {CVE-2013-6405}
- [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error 
functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
- [net] inet: prevent leakage of uninitialized memory to user in recv 
syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
- [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) 
[1030817 1030818] {CVE-2013-4588}
- [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) 
[1038935 1034266]
- [md] fix calculation of stacking limits on level change (Jes Sorensen) 
[1035347 1026864]
- [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) 
[1035339 1017105]
- [ata] libata: implement cross-port EH exclusion (David Milburn) 
[1035339 1017105]
- [ata] libata add ap to ata_wait_register and intro ata_msleep (David 
Milburn) [1035339 1017105]
- [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) 
[1032389 1019578]

[2.6.32-431.4.1.el6]
- [powerpc] signals: Improved mark VSX not saved with small contexts fix 
(Seth Jennings) [1044566 1044117]
- [powerpc] signals: Mark VSX not saved with small contexts (Seth 
Jennings) [1044566 1044117]