[El-errata] ELSA-2016-3617 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2016-3617

http://linux.oracle.com/errata/ELSA-2016-3617.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:


x86_64:
kernel-uek-firmware-3.8.13-118.11.2.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-118.11.2.el7uek.noarch.rpm
kernel-uek-3.8.13-118.11.2.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.11.2.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.11.2.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.11.2.el7uek.x86_64.rpm
dtrace-modules-3.8.13-118.11.2.el7uek-0.4.5-3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-118.11.2.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-118.11.2.el7uek-0.4.5-3.el7.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.11.2.el7uek]
- Btrfs: fix truncation of compressed and inlined extents (Ashish 
Samant)  [Orabug: 22307285]  {CVE-2015-8374}
- Btrfs: fix file corruption and data loss after cloning inline extents 
(Divya Indi)  [Orabug: 22307285]  {CVE-2015-8374}
- netfilter: x_tables: make sure e->next_offset covers remaining blob 
size (Florian Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998}
- netfilter: x_tables: validate e->target_offset early (Florian 
Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998}

[3.8.13-118.11.1.el7uek]
- rds: schedule local connection activity in proper workqueue (Ajaykumar 
Hotchandani)  [Orabug: 24624195]
- ib_core: make wait_event uninterruptible in ib_flush_fmr_pool() 
(Avinash Repaka)  [Orabug: 24655952]
- net/mlx4: Support shutdown() interface (Gavin Shan)  [Orabug: 24624181]
- tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 
24010012] [Orabug: 2401010]  {CVE-2016-5696}

[3.8.13-118.10.1.el7uek]
- ocfs2: call ocfs2_journal_access_di() before ocfs2_journal_dirty() in 
ocfs2_write_end_nolock() (yangwenfang)  [Orabug: 19601200]
- ocfs2: improve recovery performance (Junxiao Bi)  [Orabug: 24395691]