Oracle alert ELSA-2016-3646 (kernel 2.6.39)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2016-3646 Important: Oracle Linux 5 Unbreakable Enterprise kernel security update | |
| Date: | Mon, 21 Nov 2016 08:52:31 -0800 | |
| Message-ID: | <5833264F.4020506@oracle.com> |
Oracle Linux Security Advisory ELSA-2016-3646 http://linux.oracle.com/errata/ELSA-2016-3646.html The following updated rpms for Oracle Linux 5 have been uploaded to the Unbreakable Linux Network: i386: kernel-uek-2.6.39-400.290.2.el5uek.i686.rpm kernel-uek-debug-2.6.39-400.290.2.el5uek.i686.rpm kernel-uek-debug-devel-2.6.39-400.290.2.el5uek.i686.rpm kernel-uek-devel-2.6.39-400.290.2.el5uek.i686.rpm kernel-uek-doc-2.6.39-400.290.2.el5uek.noarch.rpm kernel-uek-firmware-2.6.39-400.290.2.el5uek.noarch.rpm x86_64: kernel-uek-firmware-2.6.39-400.290.2.el5uek.noarch.rpm kernel-uek-doc-2.6.39-400.290.2.el5uek.noarch.rpm kernel-uek-2.6.39-400.290.2.el5uek.x86_64.rpm kernel-uek-devel-2.6.39-400.290.2.el5uek.x86_64.rpm kernel-uek-debug-devel-2.6.39-400.290.2.el5uek.x86_64.rpm kernel-uek-debug-2.6.39-400.290.2.el5uek.x86_64.rpm SRPMS: http://oss.oracle.com/ol5/SRPMS-updates/kernel-uek-2.6.39... Description of changes: [2.6.39-400.290.2.el5uek] - aacraid: Check size values after double-fetch from user (Dave Carroll) [Orabug: 25060055] {CVE-2016-6480} {CVE-2016-6480} - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [Orabug: 25059962] {CVE-2016-6136} - ecryptfs: don't allow mmap when the lower fs doesn't support it (Jeff Mahoney) [Orabug: 24971918] {CVE-2016-1583} {CVE-2016-1583} - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu) [Orabug: 25059900] {CVE-2016-4578} - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu) [Orabug: 25059900] {CVE-2016-4578} - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu) [Orabug: 25059755] {CVE-2016-4569} - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery) [Orabug: 25058905] {CVE-2015-8956} - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins) [Orabug: 25059195] {CVE-2016-3070} _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata