Skip to content
OpenAdvisories
High ELSA-2020-5841 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 10, 2020 · Updated Sep 10, 2020

Ecosystem: Oracle Linux

Summary

kernel-uek
[3.8.13-118.49.1]
- sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin) [Orabug: 31351996] {CVE-2018-16884}
- sunrpc: use-after-free in svc_process_common() (Vasily Averin) [Orabug: 31351996] {CVE-2018-16884}
- af_packet: set defaule value for tmo (Mao Wenan) [Orabug: 31439108] {CVE-2019-20812}
- vgacon: Fix for missing check in scrollback handling (Yunhai Zhang) [Orabug: 31705122] {CVE-2020-14331} {CVE-2020-14331}
- rename kABI whitelists to lockedlists (Dan Duval) [Orabug: 31783152]

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-118.49.1.el6uek 0:0.4.5-3.el6
Oracle Linux · 7 dtrace-modules-3.8.13-118.49.1.el7uek 0:0.4.5-3.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-118.49.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-118.49.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-118.49.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-118.49.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-118.49.1.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-118.49.1.el7uek

Vulnerabilities 3