Summary
kernel-uek
[4.1.12-37.6.2]
- KEYS: potential uninitialized variable (Dan Carpenter) [Orabug: 24393865] {CVE-2016-4470}
- ovl: fix permission checking for setattr (Miklos Szeredi) [Orabug: 24393742] {CVE-2015-8660}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-4.1.12-37.6.2.el6uek | 0:0.5.2-1.el6 |
| Oracle Linux · 7 | dtrace-modules-4.1.12-37.6.2.el7uek | 0:0.5.2-1.el7 |
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-37.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-37.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-37.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-37.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-37.6.2.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-37.6.2.el7uek |
Vulnerabilities 2
-
Unscored —
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr o…
-
Unscored —
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certai…