Skip to content
OpenAdvisories
High ELSA-2015-0726 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

Published Mar 26, 2015 · Updated Mar 26, 2015

Ecosystem: Oracle Linux

Summary

[3.10.0-229.1.2]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-229.1.2]
- [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181177 1179347] {CVE-2014-8159}

[3.10.0-229.1.1]
- [crypto] testmgr: mark rfc4106(gcm(aes)) as fips_allowed (Jarod Wilson) [1197751 1185400]
- [virt] storvsc: ring buffer failures may result in I/O freeze (Vitaly Kuznetsov) [1197749 1171409]
- [md] dm-thin: don't allow messages to be sent to a pool target in READ_ONLY or FAIL mode (Mike Snitzer) [1197745 1184592]
- [kernel] workqueue: fix subtle pool management issue which can stall whole worker_pool (Eric Sandeen) [1197744 1165535]
- [platform] thinkpad_acpi: support new BIOS version string pattern (Benjamin Tissoires) [1197743 1194830]
- [x86] ioapic: kcrash: Prevent crash_kexec() from deadlocking on ioapic_lock (Baoquan He) [1197742 1182424]
- [net] sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [1196588 1183959] {CVE-2015-1421}

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 kernel 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-abi-whitelists 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-debug 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-debug-devel 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-devel 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-doc 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-headers 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-tools 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-tools-libs 0:3.10.0-229.1.2.el7
Oracle Linux · 7 kernel-tools-libs-devel 0:3.10.0-229.1.2.el7
Oracle Linux · 7 perf 0:3.10.0-229.1.2.el7
Oracle Linux · 7 python-perf 0:3.10.0-229.1.2.el7

Vulnerabilities 2