Skip to content
OpenAdvisories
High ELSA-2015-3019 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Mar 31, 2015 · Updated Mar 31, 2015

Ecosystem: Oracle Linux

Summary

kernel-uek
[3.8.13-68.1.2]
- IB/core: Prevent integer overflow in ib_umem_get address arithmetic (Shachar Raindel) [Orabug: 20799875] {CVE-2014-8159} {CVE-2014-8159}

[3.8.13-68.1.1]
- xen-pciback: limit guest control of command register (Jan Beulich) [Orabug: 20697017] {CVE-2015-2150} {CVE-2015-2150}
- net: sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [Orabug: 20780347] {CVE-2015-1421}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-68.1.2.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-68.1.2.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-68.1.2.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-68.1.2.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-68.1.2.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-68.1.2.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-68.1.2.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-68.1.2.el7uek

Vulnerabilities 3