[El-errata] ELSA-2014-3082 Important: Oracle Linux 5 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2014-3082

The following updated rpms for Oracle Linux 5 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.215.11.el5uek.i686.rpm
kernel-uek-debug-2.6.39-400.215.11.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.215.11.el5uek.i686.rpm
kernel-uek-devel-2.6.39-400.215.11.el5uek.i686.rpm
kernel-uek-doc-2.6.39-400.215.11.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.215.11.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.215.11.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-400.215.11.el5uek.noarch.rpm
kernel-uek-2.6.39-400.215.11.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.215.11.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.215.11.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.215.11.el5uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/kernel-uek-2.6.39-400.215.11.el5uek.src.rpm



Description of changes:

[2.6.39-400.215.11.el5uek]
- ALSA: control: Don't access controls outside of protected regions 
(Lars-Peter Clausen)  [Orabug: 19817786]  {CVE-2014-4653} 
{CVE-2014-4654} {CVE-2014-4655}
- ALSA: control: Fix replacing user controls (Lars-Peter Clausen) 
[Orabug: 19817748]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655}
- kvm: iommu: fix the third parameter of kvm_iommu_put_pages 
(CVE-2014-3601) (Michael S. Tsirkin)  [Orabug: 19817647] {CVE-2014-3601}
- mm: try_to_unmap_cluster() should lock_page() before mlocking 
(Vlastimil Babka)  [Orabug: 19817323]  {CVE-2014-3122}
- vm: convert fb_mmap to vm_iomap_memory() helper (Linus Torvalds) 
[Orabug: 19816563]  {CVE-2013-2596}
- vm: add vm_iomap_memory() helper function (Linus Torvalds) [Orabug: 
19816563]  {CVE-2013-2596}
- net: sctp: inherit auth_capable on INIT collisions (Daniel Borkmann)  
[Orabug: 19816068]  {CVE-2014-5077}