Summary
- [3.10.0-327.28.3.OL7]
- Oracle Linux certificates (Alexey Petrenko)
[3.10.0-327.28.3]
- [net] tcp: enable per-socket rate limiting of all 'challenge acks' (Florian Westphal) [1355603 1355605] {CVE-2016-5696}
- [net] tcp: uninline tcp_oow_rate_limited() (Florian Westphal) [1355603 1355605] {CVE-2016-5696}
- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355603 1355605] {CVE-2016-5696}
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-abi-whitelists | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-debug | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-debug-devel | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-devel | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-doc | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-headers | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-tools | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-tools-libs | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | kernel-tools-libs-devel | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | perf | 0:3.10.0-327.28.3.el7 |
| Oracle Linux · 7 | python-perf | 0:3.10.0-327.28.3.el7 |
Vulnerabilities 1
-
Unscored —
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, whi…