Skip to content
OpenAdvisories
High ELSA-2014-3081 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Oct 17, 2014 · Updated Oct 17, 2014

Ecosystem: Oracle Linux

Summary

kernel-uek
[3.8.13-44.1.3.el7uek]
- ALSA: control: Don't access controls outside of protected regions (Lars-Peter Clausen) [Orabug: 19817785] {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655}
- ALSA: control: Fix replacing user controls (Lars-Peter Clausen) [Orabug: 19817747] {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655}
- kvm: iommu: fix the third parameter of kvm_iommu_put_pages (CVE-2014-3601) (Michael S. Tsirkin) [Orabug: 19817646] {CVE-2014-3601}
- net: sctp: inherit auth_capable on INIT collisions (Daniel Borkmann) [Orabug: 19816067] {CVE-2014-5077}

[3.8.13-44.1.2.el7uek]
- CVE-2014-3535: NULL pointer dereference in VxLAN packet logging. (Sasha Levin) [Orabug: 19613139]

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-44.1.3.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-44.1.3.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-44.1.3.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-44.1.3.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-44.1.3.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-44.1.3.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-44.1.3.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-44.1.3.el7uek

Vulnerabilities 6