Oracle alert ELSA-2023-12759 (kernel)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2023-12759 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update | |
| Date: | Tue, 05 Sep 2023 03:03:21 -0700 | |
| Message-ID: | <mailman.125.1693908209.16106.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2023-12759 http://linux.oracle.com/errata/ELSA-2023-12759.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-doc-4.1.12-124.78.2.el7uek.noarch.rpm kernel-uek-firmware-4.1.12-124.78.2.el7uek.noarch.rpm kernel-uek-4.1.12-124.78.2.el7uek.x86_64.rpm kernel-uek-devel-4.1.12-124.78.2.el7uek.x86_64.rpm kernel-uek-debug-4.1.12-124.78.2.el7uek.x86_64.rpm kernel-uek-debug-devel-4.1.12-124.78.2.el7uek.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-4.1.1... Related CVEs: CVE-2022-1015 CVE-2023-3106 CVE-2023-3567 Description of changes: [4.1.12-124.78.2.el7uek] - xfrm: fix crash in XFRM_MSG_GETSA netlink handler (Vegard Nossum) [Orabug: 35598955] {CVE-2023-3106} - netfilter: nf_tables: validate registers coming from userspace (Harshvardhan Jha) [Orabug: 34012909] {CVE-2022-1015} [4.1.12-124.78.1.el7uek] - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) [Orabug: 35649493] {CVE-2023-3567} _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata