Summary
kernel-uek
[3.8.13-118.26.1]
- netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet) [Orabug: 27896807] {CVE-2017-18017}
- scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan) [Orabug: 27927692] {CVE-2018-7757}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.26.1.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.26.1.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.26.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.26.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.26.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.26.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.26.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.26.1.el7uek |
Vulnerabilities 2
-
Unscored —CVE-2017-18017 EPSS 53%
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36…
-
Unscored —
Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.…