Summary
kernel-uek
[4.1.12-37.3.1]
- KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells) [Orabug: 23279022] {CVE-2016-0758}
- uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers (Todd Vierling) [Orabug: 23270829]
- unix: properly account for FDs passed over unix sockets (willy tarreau) [Orabug: 23262277] {CVE-2013-4312} {CVE-2013-4312}
- sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss) [Orabug: 23222731] {CVE-2015-8767}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-4.1.12-37.3.1.el6uek | 0:0.5.2-1.el6 |
| Oracle Linux · 7 | dtrace-modules-4.1.12-37.3.1.el7uek | 0:0.5.2-1.el7 |
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-37.3.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-37.3.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-37.3.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-37.3.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-37.3.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-37.3.1.el7uek |
Vulnerabilities 2
-
Unscored —
The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory…
-
Unscored —
Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted…