Skip to content
OpenAdvisories
Medium ELSA-2015-3053 3 CVEs

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jul 29, 2015 · Updated Jul 29, 2015

Summary

kernel-uek
[3.8.13-68.3.5]
- KVM: x86: SYSENTER emulation is broken (Nadav Amit) [Orabug: 21502739] {CVE-2015-0239} {CVE-2015-0239}
- fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn) [Orabug: 21502254] {CVE-2015-3339}
- eCryptfs: Remove buggy and unnecessary write in file name decode routine (Michael Halcrow) [Orabug: 21502065] {CVE-2014-9683}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-68.3.5.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-68.3.5.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-68.3.5.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-68.3.5.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-68.3.5.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-68.3.5.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-68.3.5.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-68.3.5.el7uek

Vulnerabilities 3