Oracle alert ELSA-2020-5879 (kernel)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2020-5879 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update | |
| Date: | Fri, 09 Oct 2020 21:41:08 -0700 | |
| Message-ID: | <257c8090-774a-cf80-da39-ab409820c7f3@oracle.com> |
Oracle Linux Security Advisory ELSA-2020-5879 http://linux.oracle.com/errata/ELSA-2020-5879.html The following updated rpms for Oracle Linux 6 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-firmware-3.8.13-118.50.1.el6uek.noarch.rpm kernel-uek-doc-3.8.13-118.50.1.el6uek.noarch.rpm kernel-uek-3.8.13-118.50.1.el6uek.x86_64.rpm kernel-uek-devel-3.8.13-118.50.1.el6uek.x86_64.rpm kernel-uek-debug-devel-3.8.13-118.50.1.el6uek.x86_64.rpm kernel-uek-debug-3.8.13-118.50.1.el6uek.x86_64.rpm dtrace-modules-3.8.13-118.50.1.el6uek-0.4.5-3.el6.x86_64.rpm SRPMS: http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-3.8.13... http://oss.oracle.com/ol6/SRPMS-updates/dtrace-modules-3.... Description of changes: kernel-uek [3.8.13-118.50.1.el6uek] - USB: serial: omninet: fix reference leaks at open (Mark Nicholson) [Orabug: 30484762] {CVE-2017-8925} - GFS2: don't set rgrp gl_object until it's inserted into rgrp tree (Bob Peterson) [Orabug: 30254252] {CVE-2016-10905} - GFS2: Fix rgrp end rounding problem for bsize < page size (Bob Peterson) [Orabug: 30254252] {CVE-2016-10905} - GFS2: Use range based functions for rgrp sync/invalidation (Steven Whitehouse) [Orabug: 30254252] {CVE-2016-10905} - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (YueHaibing) [Orabug: 30732940] {CVE-2019-20054} - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (YueHaibing) [Orabug: 30732940] {CVE-2019-20054} - scsi: libsas: stop discovering if oob mode is disconnected (Jason Yan) [Orabug: 30770914] {CVE-2019-19965} - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost) [Orabug: 31351573] {CVE-2019-19073} - USB: serial: io_ti: fix information leak in completion handler (Johan Hovold) [Orabug: 31352085] {CVE-2017-8924} - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song) [Orabug: 31884241] {CVE-2020-25285} - ext4: fix potential negative array index in do_split() (Eric Sandeen) [Orabug: 31895332] {CVE-2020-14314} _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata