Skip to content
OpenAdvisories
High ELSA-2017-3589 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jun 30, 2017 · Updated Jun 30, 2017

Summary

kernel-uek
[4.1.12-94.3.8]
- macsec: dynamically allocate space for sglist (Jason A. Donenfeld) [Orabug: 26368162] {CVE-2017-7477}
- macsec: avoid heap overflow in skb_to_sgvec (Jason A. Donenfeld) [Orabug: 26368162] {CVE-2017-7477}
- nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [Orabug: 26366988] {CVE-2017-7645}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-4.1.12-94.3.8.el6uek 0:0.6.0-4.el6
Oracle Linux · 7 dtrace-modules-4.1.12-94.3.8.el7uek 0:0.6.0-4.el7
Oracle Linux · 7 kernel-uek 0:4.1.12-94.3.8.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-94.3.8.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-94.3.8.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-94.3.8.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-94.3.8.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-94.3.8.el7uek

Vulnerabilities 2