[El-errata] ELSA-2017-3607 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Fri Aug 18 10:29:51 PDT 2017


Oracle Linux Security Advisory ELSA-2017-3607

http://linux.oracle.com/errata/ELSA-2017-3607.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.297.6.el6uek.i686.rpm
kernel-uek-debug-2.6.39-400.297.6.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.297.6.el6uek.i686.rpm
kernel-uek-devel-2.6.39-400.297.6.el6uek.i686.rpm
kernel-uek-doc-2.6.39-400.297.6.el6uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.297.6.el6uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.297.6.el6uek.noarch.rpm
kernel-uek-doc-2.6.39-400.297.6.el6uek.noarch.rpm
kernel-uek-2.6.39-400.297.6.el6uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.297.6.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.297.6.el6uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.297.6.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.39-400.297.6.el6uek.src.rpm



Description of changes:

[2.6.39-400.297.6.el6uek]
- l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume 
Nault)  [Orabug: 26586050]  {CVE-2016-10200}
- xfs: fix two memory leaks in xfs_attr_list.c error paths (Mateusz 
Guzik)  [Orabug: 26586024]  {CVE-2016-9685}
- KEYS: Disallow keyrings beginning with '.' to be joined as session 
keyrings (David Howells)  [Orabug: 26586002]  {CVE-2016-9604}
- ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet) 
[Orabug: 26578202]  {CVE-2017-9242}





More information about the El-errata mailing list