[El-errata] ELSA-2017-3606 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Fri Aug 18 10:28:02 PDT 2017


Oracle Linux Security Advisory ELSA-2017-3606

http://linux.oracle.com/errata/ELSA-2017-3606.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.19.4.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-118.19.4.el7uek.noarch.rpm
kernel-uek-3.8.13-118.19.4.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.19.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.19.4.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.19.4.el7uek.x86_64.rpm
dtrace-modules-3.8.13-118.19.4.el7uek-0.4.5-3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-118.19.4.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-118.19.4.el7uek-0.4.5-3.el7.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.19.4.el7uek]
- l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume 
Nault)  [Orabug: 26586047]  {CVE-2016-10200}
- xfs: fix two memory leaks in xfs_attr_list.c error paths (Mateusz 
Guzik)  [Orabug: 26586022]  {CVE-2016-9685}
- KEYS: Disallow keyrings beginning with '.' to be joined as session 
keyrings (David Howells)  [Orabug: 26585994]  {CVE-2016-9604}
- ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet) 
[Orabug: 26578198]  {CVE-2017-9242}





More information about the El-errata mailing list