Skip to content
OpenAdvisories
High ELSA-2014-0923 2 CVEs

Important: kernel security update (Oracle Linux 7)

Published Jul 23, 2014 · Updated Jul 23, 2014

Ecosystem: Oracle Linux

Summary

[3.10.0-123.4.4]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-123.4.4]
- [net] l2tp_ppp: fail when socket option level is not SOL_PPPOL2TP (Petr Matousek) [1119465 1119466] {CVE-2014-4943}

[3.10.0-123.4.3]
- [x86] ptrace: force IRET path after a ptrace_stop() (Oleg Nesterov) [1115934 1115935] {CVE-2014-4699}

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 kernel 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-abi-whitelists 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-debug 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-debug-devel 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-devel 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-doc 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-headers 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-tools 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-tools-libs 0:3.10.0-123.4.4.el7
Oracle Linux · 7 kernel-tools-libs-devel 0:3.10.0-123.4.4.el7
Oracle Linux · 7 perf 0:3.10.0-123.4.4.el7
Oracle Linux · 7 python-perf 0:3.10.0-123.4.4.el7

Vulnerabilities 2

  • Unscored —
    CVE-2014-4699 Public exploit

    The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the save…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-4943 Public exploit

    The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by…

    linux linux Debian Ubuntu