Oracle alert ELSA-2017-3597 (kernel)

From:
    	     
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
    	     
 
el-errata@oss.oracle.com 
Subject:
    	     
 
[El-errata] ELSA-2017-3597 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update 
Date:
    	     
 
Fri, 28 Jul 2017 08:24:13 -0700
Message-ID:
    	     
 
<6c561141-3f67-ddbc-b714-410afe090f60@oracle.com>
Oracle Linux Security Advisory ELSA-2017-3597

http://linux.oracle.com/errata/ELSA-2017-3597.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.297.5.el6uek.i686.rpm
kernel-uek-debug-2.6.39-400.297.5.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.297.5.el6uek.i686.rpm
kernel-uek-devel-2.6.39-400.297.5.el6uek.i686.rpm
kernel-uek-doc-2.6.39-400.297.5.el6uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.297.5.el6uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.297.5.el6uek.noarch.rpm
kernel-uek-doc-2.6.39-400.297.5.el6uek.noarch.rpm
kernel-uek-2.6.39-400.297.5.el6uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.297.5.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.297.5.el6uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.297.5.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.39...



Description of changes:

[2.6.39-400.297.5.el6uek]
- selinux: quiet the filesystem labeling behavior message (Paul Moore) 
[Orabug: 25721485] - RDS/IB: active bonding port state fix for intfs 
added late (Mukesh Kacker)  [Orabug: 25875426]
- HID: hid-cypress: validate length of report (Greg Kroah-Hartman) 
[Orabug: 25891914]  {CVE-2017-7273}
- udf: Remove repeated loads blocksize (Jan Kara)  [Orabug: 25905722] 
{CVE-2015-4167}
- udf: Check length of extended attributes and allocation descriptors 
(Jan Kara)  [Orabug: 25905722]  {CVE-2015-4167}
- udf: Verify i_size when loading inode (Jan Kara)  [Orabug: 25905722] 
{CVE-2015-4167}
- btrfs: drop unused parameter from btrfs_item_nr (Ross Kirk)  [Orabug: 
25948102]  {CVE-2014-9710}
- Btrfs: cleanup of function where fixup_low_keys() is called (Tsutomu 
Itoh)  [Orabug: 25948102]  {CVE-2014-9710}
- Btrfs: remove unused argument of fixup_low_keys() (Tsutomu Itoh) 
[Orabug: 25948102]  {CVE-2014-9710}
- Btrfs: remove unused argument of btrfs_extend_item() (Tsutomu Itoh) 
[Orabug: 25948102]  {CVE-2014-9710}
- Btrfs: add support for asserts (Josef Bacik)  [Orabug: 25948102] 
{CVE-2014-9710}
- Btrfs: make xattr replace operations atomic (Filipe Manana)  [Orabug: 
25948102]  {CVE-2014-9710}
- net: validate the range we feed to iov_iter_init() in 
sys_sendto/sys_recvfrom (Al Viro)  [Orabug: 25948149]  {CVE-2015-2686}
- xsigo: Compute node crash on FC failover (Joe Jin)  [Orabug: 25965445]
- PCI: Prevent VPD access for QLogic ISP2722 (Ethan Zhao)  [Orabug: 
25975513]
- PCI: Prevent VPD access for buggy devices (Babu Moger)  [Orabug: 
25975513]
- ipv4: try to cache dst_entries which would cause a redirect (Hannes 
Frederic Sowa)  [Orabug: 26032377]  {CVE-2015-1465}


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata