[El-errata] ELSA-2016-2766 Important: Oracle Linux 6 kernel security and bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2016-2766

http://linux.oracle.com/errata/ELSA-2016-2766.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-2.6.32-642.11.1.el6.i686.rpm
kernel-abi-whitelists-2.6.32-642.11.1.el6.noarch.rpm
kernel-debug-2.6.32-642.11.1.el6.i686.rpm
kernel-debug-devel-2.6.32-642.11.1.el6.i686.rpm
kernel-devel-2.6.32-642.11.1.el6.i686.rpm
kernel-doc-2.6.32-642.11.1.el6.noarch.rpm
kernel-firmware-2.6.32-642.11.1.el6.noarch.rpm
kernel-headers-2.6.32-642.11.1.el6.i686.rpm
perf-2.6.32-642.11.1.el6.i686.rpm
python-perf-2.6.32-642.11.1.el6.i686.rpm

x86_64:
kernel-2.6.32-642.11.1.el6.x86_64.rpm
kernel-abi-whitelists-2.6.32-642.11.1.el6.noarch.rpm
kernel-debug-2.6.32-642.11.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-642.11.1.el6.i686.rpm
kernel-debug-devel-2.6.32-642.11.1.el6.x86_64.rpm
kernel-devel-2.6.32-642.11.1.el6.x86_64.rpm
kernel-doc-2.6.32-642.11.1.el6.noarch.rpm
kernel-firmware-2.6.32-642.11.1.el6.noarch.rpm
kernel-headers-2.6.32-642.11.1.el6.x86_64.rpm
perf-2.6.32-642.11.1.el6.x86_64.rpm
python-perf-2.6.32-642.11.1.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-2.6.32-642.11.1.el6.src.rpm



Description of changes:

[2.6.32-642.11.1.el6]
- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] 
{CVE-2016-5195}

[2.6.32-642.10.1.el6]
- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined 
by mid-layer (Maurizio Lombardi) [1382620 1341298]

[2.6.32-642.9.1.el6]
- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve 
Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH 
(Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) 
[1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) 
[1341546 1316461] {CVE-2016-2143}

[2.6.32-642.8.1.el6]
- [fs] lockd: unregister notifier blocks if the service fails to come up 
completely (Scott Mayhew) [1375637 1346317]

[2.6.32-642.7.1.el6]
- [net] netfilter: ip(6)t_REJECT: fix wrong transport header pointer in 
TCP reset (William Townsend) [1372266 1343816]