Oracle alert ELSA-2013-2503 (kernel)

From:
    	     
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
    	     
 
el-errata@oss.oracle.com 
Subject:
    	     
 
[El-errata] ELSA-2013-2503 Moderate: Oracle Linux 5 Unbreakable
 Enterprise kernel security update 
Date:
    	     
 
Thu, 07 Feb 2013 11:01:04 -0800
Message-ID:
    	     
 
<5113F9F0.1020708@oracle.com>
Archive-link:
    	     
 
Article, Thread
              
Oracle Linux Security Advisory ELSA-2013-2503

The following updated rpms for Oracle Linux 5 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-300.28.1.el5uek.i686.rpm
kernel-uek-debug-2.6.39-300.28.1.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-300.28.1.el5uek.i686.rpm
kernel-uek-devel-2.6.39-300.28.1.el5uek.i686.rpm
kernel-uek-doc-2.6.39-300.28.1.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-300.28.1.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-300.28.1.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-300.28.1.el5uek.noarch.rpm
kernel-uek-2.6.39-300.28.1.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-300.28.1.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-300.28.1.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-300.28.1.el5uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/kernel-uek-2.6.39...



Description of changes:

[2.6.39-300.28.1.el5uek]
- kmod: make __request_module() killable (Oleg Nesterov) [Orabug: 16286305]
   {CVE-2012-4398}
- kmod: introduce call_modprobe() helper (Oleg Nesterov) [Orabug: 16286305]
   {CVE-2012-4398}
- usermodehelper: implement UMH_KILLABLE (Oleg Nesterov) [Orabug: 16286305]
   {CVE-2012-4398}
- usermodehelper: introduce umh_complete(sub_info) (Oleg Nesterov) [Orabug:
   16286305] {CVE-2012-4398}
- KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set
   (CVE-2012-4461) (Jerry Snitselaar) [Orabug: 16286290] {CVE-2012-4461}
- exec: do not leave bprm->interp on stack (Kees Cook) [Orabug: 16286267]
   {CVE-2012-4530}
- exec: use -ELOOP for max recursion depth (Kees Cook) [Orabug: 16286267]
   {CVE-2012-4530}

[2.6.39-300.27.1.el5uek]
- xen-pciback: rate limit error messages from xen_pcibk_enable_msi{,x}() 
(Jan
   Beulich) [Orabug: 16243736] {CVE-2013-0231}
- Xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests.
   (Frediano Ziglio) [Orabug: 16274171] {CVE-2013-0190}
- netback: correct netbk_tx_err to handle wrap around. (Ian Campbell) 
[Orabug:
   16243309]
- xen/netback: free already allocated memory on failure in
   xen_netbk_get_requests (Ian Campbell) [Orabug: 16243309]
- xen/netback: don't leak pages on failure in xen_netbk_tx_check_gop. (Ian
   Campbell) [Orabug: 16243309]
- xen/netback: shutdown the ring if it contains garbage. (Ian Campbell)
   [Orabug: 16243309]
- ixgbevf fix typo in Makefile (Maxim Uvarov) [Orabug: 16179639 16168292]


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata