Summary
kernel-uek
[3.8.13-35.3.5.el7uek]
- net: Use netlink_ns_capable to verify the permisions of netlink messages (Eric W. Biederman) [Orabug: 19404231] {CVE-2014-0181}
- net: Add variants of capable for use on netlink messages (Eric W. Biederman) [Orabug: 19404231]
- net: Add variants of capable for use on on sockets (Eric W. Biederman) [Orabug: 19404231]
- netlink: Rename netlink_capable netlink_allowed (Eric W. Biederman) [Orabug: 19404231]
- sctp: Fix sk_ack_backlog wrap-around problem (Xufeng Zhang) [Orabug: 19404244] {CVE-2014-4667}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-35.3.5.el6uek | 0:0.4.3-4.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-35.3.5.el7uek | 0:0.4.3-4.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-35.3.5.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-35.3.5.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-35.3.5.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-35.3.5.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-35.3.5.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-35.3.5.el7uek |
Vulnerabilities 2
-
Unscored —
The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket opera…
-
Unscored —
The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a…