[Ksplice][RHEL6-Updates] New Ksplice updates for RHEL 6 (RHSA-2017:0307-01)

Oracle Ksplice ksplice-support_ww at oracle.com
Fri Feb 24 13:30:00 PST 2017


Synopsis: RHSA-2017:0307-01 can now be patched using Ksplice
CVEs: CVE-2016-9555

Systems running Red Hat Enterprise Linux 6 can now use Ksplice to
patch against the latest Red Hat Security Advisory, RHSA-2017:0307-01.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running RHEL 6 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2016-9555: Remote denial-of-service due to SCTP state machine memory corruption.

A missing bound-check in one of the state functions caused memory use
beyond what has been allocated. This could lead to memory corruption and
other undefined behaviors.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.





More information about the Ksplice-RHEL6-Updates mailing list