Skip to content
OpenAdvisories
High ELSA-2015-3003 2 CVEs

Important: Unbreakable Enterprise kernel security and bugfix update (Oracle Linux 7)

Published Jan 29, 2015 · Updated Jan 29, 2015

Summary

kernel-uek
[3.8.13-55.1.5]
- [CIFS] Possible null ptr deref in SMB2_tcon (Steve French) [Orabug: 20433140] {CVE-2014-7145}

[3.8.13-55.1.4]
- net: sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [Orabug: 20425332] {CVE-2014-7841}

[3.8.13-55.1.3]
- ACPI: x2apic entry ignored (Cathy Avery) [Orabug: 19475776]
- i40e: relax the firmware API version check (Shannon Nelson) [Orabug: 20216831]
- x86, fpu: remove the logic of non-eager fpu mem allocation at the first usage (Annie Li) [Orabug: 20232585]
- iommu/{vt-d,amd}: Remove multifunction assumption around grouping (Alex Williamson) [Orabug: 20192796]

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-55.1.5.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-55.1.5.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-55.1.5.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-55.1.5.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-55.1.5.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-55.1.5.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-55.1.5.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-55.1.5.el7uek

Vulnerabilities 2