Summary
kernel-uek
[3.8.13-118.6.2]
- KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells) [Orabug: 23279020] {CVE-2016-0758}
- net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa) [Orabug: 23267997] {CVE-2015-8543} {CVE-2015-8543}
- ipv6: addrconf: validate new MTU before applying it (Marcelo Leitner) [Orabug: 23263252] {CVE-2015-8215}
- unix: properly account for FDs passed over unix sockets (willy tarreau) [Orabug: 23262276] {CVE-2013-4312} {CVE-2013-4312}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.6.2.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.6.2.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.6.2.el7uek |
Vulnerabilities 4
-
Unscored —
The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory…
-
Unscored —
net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU val…
-
Unscored —CVE-2015-8543 Public exploit
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not valida…
-
Unscored —
Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted…