Oracle alert ELSA-2013-2537 (kernel)

From:
    	     
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
    	     
 
el-errata@oss.oracle.com 
Subject:
    	     
 
[El-errata] ELSA-2013-2537 Moderate: Oracle Linux 5 Unbreakable
 Enterprise kernel security update 
Date:
    	     
 
Thu, 18 Jul 2013 13:29:16 -0700
Message-ID:
    	     
 
<51E8501C.7010109@oracle.com>
Archive-link:
    	     
 
Article, Thread
              
Oracle Linux Security Advisory ELSA-2013-2537

The following updated rpms for Oracle Linux 5 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-debug-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-headers-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-devel-2.6.32-400.29.2.el5uek.i686.rpm
kernel-uek-doc-2.6.32-400.29.2.el5uek.noarch.rpm
kernel-uek-firmware-2.6.32-400.29.2.el5uek.noarch.rpm
ofa-2.6.32-400.29.2.el5uek-1.5.1-4.0.58.i686.rpm
ofa-2.6.32-400.29.2.el5uekdebug-1.5.1-4.0.58.i686.rpm
mlnx_en-2.6.32-400.29.2.el5uek-1.5.7-2.i686.rpm
mlnx_en-2.6.32-400.29.2.el5uekdebug-1.5.7-2.i686.rpm

x86_64:
kernel-uek-firmware-2.6.32-400.29.2.el5uek.noarch.rpm
kernel-uek-doc-2.6.32-400.29.2.el5uek.noarch.rpm
kernel-uek-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-headers-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-devel-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.32-400.29.2.el5uek.x86_64.rpm
kernel-uek-debug-2.6.32-400.29.2.el5uek.x86_64.rpm
ofa-2.6.32-400.29.2.el5uek-1.5.1-4.0.58.x86_64.rpm
ofa-2.6.32-400.29.2.el5uekdebug-1.5.1-4.0.58.x86_64.rpm
mlnx_en-2.6.32-400.29.2.el5uek-1.5.7-2.x86_64.rpm
mlnx_en-2.6.32-400.29.2.el5uekdebug-1.5.7-2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/kernel-uek-2.6.32...
http://oss.oracle.com/ol5/SRPMS-updates/ofa-2.6.32-400.29...
http://oss.oracle.com/ol5/SRPMS-updates/mlnx_en-2.6.32-40...



Description of changes:

kernel-uek
[2.6.32-400.29.2.el5uek]
- Bluetooth: RFCOMM - Fix missing msg_namelen update in 
rfcomm_sock_recvmsg() (Mathias Krause) [Orabug: 17173824] {CVE-2013-3225}
- Bluetooth: fix possible info leak in bt_sock_recvmsg() (Mathias 
Krause) [Orabug: 17173824] {CVE-2013-3224}
- atm: update msg_namelen in vcc_recvmsg() (Mathias Krause) [Orabug: 
17173824] {CVE-2013-3222}
- dcbnl: fix various netlink info leaks (Mathias Krause) [Orabug: 
17173824] {CVE-2013-2634}
- udf: avoid info leak on export (Mathias Krause) [Orabug: 17173824] 
{CVE-2012-6548}
- b43: stop format string leaking into error msgs (Kees Cook) [Orabug: 
17173824] {CVE-2013-2852}
- signal: always clear sa_restorer on execve (Kees Cook) [Orabug: 
17173824] {CVE-2013-0914}


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata