Skip to content
OpenAdvisories
High ELSA-2015-3041 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jun 10, 2015 · Updated Jun 10, 2015

Summary

kernel-uek
[3.8.13-68.3.2]
- x86_64, vdso: Fix the vdso address randomization algorithm (Andy Lutomirski) [Orabug: 21226729] {CVE-2014-9585}
- isofs: Fix infinite looping over CE entries (Jan Kara) [Orabug: 21225975] {CVE-2014-9420}
- x86_64, switch_to(): Load TLS descriptors before switching DS and ES (Andy Lutomirski) [Orabug: 21225937] {CVE-2014-9419}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-68.3.2.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-68.3.2.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-68.3.2.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-68.3.2.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-68.3.2.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-68.3.2.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-68.3.2.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-68.3.2.el7uek

Vulnerabilities 3