[El-errata] ELSA-2017-1723 Important: Oracle Linux 6 kernel security and bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2017-1723

http://linux.oracle.com/errata/ELSA-2017-1723.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-2.6.32-696.6.3.el6.i686.rpm
kernel-abi-whitelists-2.6.32-696.6.3.el6.noarch.rpm
kernel-debug-2.6.32-696.6.3.el6.i686.rpm
kernel-debug-devel-2.6.32-696.6.3.el6.i686.rpm
kernel-devel-2.6.32-696.6.3.el6.i686.rpm
kernel-doc-2.6.32-696.6.3.el6.noarch.rpm
kernel-firmware-2.6.32-696.6.3.el6.noarch.rpm
kernel-headers-2.6.32-696.6.3.el6.i686.rpm
perf-2.6.32-696.6.3.el6.i686.rpm
python-perf-2.6.32-696.6.3.el6.i686.rpm

x86_64:
kernel-2.6.32-696.6.3.el6.x86_64.rpm
kernel-abi-whitelists-2.6.32-696.6.3.el6.noarch.rpm
kernel-debug-2.6.32-696.6.3.el6.x86_64.rpm
kernel-debug-devel-2.6.32-696.6.3.el6.i686.rpm
kernel-debug-devel-2.6.32-696.6.3.el6.x86_64.rpm
kernel-devel-2.6.32-696.6.3.el6.x86_64.rpm
kernel-doc-2.6.32-696.6.3.el6.noarch.rpm
kernel-firmware-2.6.32-696.6.3.el6.noarch.rpm
kernel-headers-2.6.32-696.6.3.el6.x86_64.rpm
perf-2.6.32-696.6.3.el6.x86_64.rpm
python-perf-2.6.32-696.6.3.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-2.6.32-696.6.3.el6.src.rpm



Description of changes:

[2.6.32-696.6.3.el6.OL6]
- Update genkey [bug 25599697]

[2.6.32-696.6.3.el6]
- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) 
[1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]

[2.6.32-696.6.2.el6]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] 
{CVE-2017-1000364 CVE-2017-1000366}

[2.6.32-696.6.1.el6]
- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce 
Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) 
[1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce 
Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) 
[1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() 
(Herton R. Krzesinski) [1444351 1431508]

[2.6.32-696.5.1.el6]
- [fs] sunrpc: Ensure that we wait for connections to complete before 
retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie 
Bainbridge) [1450870 1441909]

[2.6.32-696.4.1.el6]
- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() 
(Carlos Maiolino) [1445179 1440361]