Summary
kernel-uek
[4.1.12-37.6.3]
- tcp: make challenge acks less predictable (Eric Dumazet) [Orabug: 24010103] [Orabug: 2401010] {CVE-2016-5696}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-4.1.12-37.6.3.el6uek | 0:0.5.2-1.el6 |
| Oracle Linux · 7 | dtrace-modules-4.1.12-37.6.3.el7uek | 0:0.5.2-1.el7 |
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-37.6.3.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-37.6.3.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-37.6.3.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-37.6.3.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-37.6.3.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-37.6.3.el7uek |
Vulnerabilities 1
-
Unscored —
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, whi…