Skip to content
OpenAdvisories
High ELSA-2016-3648 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Dec 7, 2016 · Updated Dec 7, 2016

Summary

kernel-uek
[4.1.12-61.1.22]
- ocfs2: fix trans extend while free cached blocks (Junxiao Bi) [Orabug: 25136991]
- ocfs2: fix trans extend while flush truncate log (Junxiao Bi) [Orabug: 25136991]
- ocfs2: extend enough credits for freeing one truncate record while replaying truncate records (Xue jiufei) [Orabug: 25136991]
- mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (Andrey Ryabinin) [Orabug: 25154096] {CVE-2016-8650} {CVE-2016-8650}
- mlx4: avoid multiple free on id_map_ent (Wengang Wang) [Orabug: 25159035]

[4.1.12-61.1.21]
- NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan) [Orabug: 25144380]
- sctp: validate chunk len before actually using it (Marcelo Ricardo Leitner) [Orabug: 25142868] {CVE-2016-9555}

[4.1.12-61.1.20]
- rebuild bumping release

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-4.1.12-61.1.22.el6uek 0:0.5.3-2.el6
Oracle Linux · 7 dtrace-modules-4.1.12-61.1.22.el7uek 0:0.5.3-2.el7
Oracle Linux · 7 kernel-uek 0:4.1.12-61.1.22.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-61.1.22.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-61.1.22.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-61.1.22.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-61.1.22.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-61.1.22.el7uek

Vulnerabilities 2