High ELSA-2015-3071 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Aug 14, 2015 · Updated Aug 14, 2015

Ecosystem: Oracle Linux

Summary

kernel-uek
[3.8.13-98.1.2]
- udp: fix behavior of wrong checksums (Eric Dumazet) [Orabug: 21628850] {CVE-2015-5364} {CVE-2015-5366}

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 7	dtrace-modules-3.8.13-98.1.2.el6uek	0:0.4.5-2.el6
Oracle Linux · 7	dtrace-modules-3.8.13-98.1.2.el7uek	0:0.4.5-3.el7
Oracle Linux · 7	kernel-uek	0:3.8.13-98.1.2.el7uek
Oracle Linux · 7	kernel-uek-debug	0:3.8.13-98.1.2.el7uek
Oracle Linux · 7	kernel-uek-debug-devel	0:3.8.13-98.1.2.el7uek
Oracle Linux · 7	kernel-uek-devel	0:3.8.13-98.1.2.el7uek
Oracle Linux · 7	kernel-uek-doc	0:3.8.13-98.1.2.el7uek
Oracle Linux · 7	kernel-uek-firmware	0:3.8.13-98.1.2.el7uek

Vulnerabilities 2

Unscored —

CVE-2015-5364

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 31, 2015
Unscored —

CVE-2015-5366

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN retu…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 31, 2015