Oracle alert ELSA-2014-3104 (kernel)

From:
    	     
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
    	     
 
el-errata@oss.oracle.com 
Subject:
    	     
 
[El-errata] ELSA-2014-3104 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update 
Date:
    	     
 
Thu, 11 Dec 2014 17:37:23 -0800
Message-ID:
    	     
 
<548A46D3.6030506@oracle.com>
Oracle Linux Security Advisory ELSA-2014-3104

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.215.14.el6uek.i686.rpm
kernel-uek-debug-2.6.39-400.215.14.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.215.14.el6uek.i686.rpm
kernel-uek-devel-2.6.39-400.215.14.el6uek.i686.rpm
kernel-uek-doc-2.6.39-400.215.14.el6uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.215.14.el6uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.215.14.el6uek.noarch.rpm
kernel-uek-doc-2.6.39-400.215.14.el6uek.noarch.rpm
kernel-uek-2.6.39-400.215.14.el6uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.215.14.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.215.14.el6uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.215.14.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.39...



Description of changes:

[2.6.39-400.215.14.el6uek]
- HID: magicmouse: sanity check report size in raw_event() callback 
(Jiri Kosina)  [Orabug: 19849355]  {CVE-2014-3181}
- ALSA: control: Protect user controls against concurrent access 
(Lars-Peter Clausen)  [Orabug: 20192542]  {CVE-2014-4652}
- target/rd: Refactor rd_build_device_space + rd_release_device_space 
(Nicholas Bellinger)  [Orabug: 20192517]  {CVE-2014-4027}
- media-device: fix infoleak in ioctl media_enum_entities() (Salva 
Peiró)  [Orabug: 20192501]  {CVE-2014-1739} {CVE-2014-1739}
- udf: Avoid infinite loop when processing indirect ICBs (Jan Kara) 
[Orabug: 20192449]  {CVE-2014-6410}
- ALSA: control: Make sure that id->index does not overflow (Lars-Peter 
Clausen)  [Orabug: 20192418]  {CVE-2014-4656}
- ALSA: control: Handle numid overflow (Lars-Peter Clausen)  [Orabug: 
20192376]  {CVE-2014-465}
- HID: picolcd: sanity check report size in raw_event() callback (Jiri 
Kosina)  [Orabug: 20192205]  {CVE-2014-3186}
- net: sctp: fix remote memory pressure from excessive queueing (Daniel 
Borkmann)  [Orabug: 20192059]  {CVE-2014-3688}


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata