Summary
kernel-uek
[3.8.13-118.52.1]
- crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers) [Orabug: 31535530] {CVE-2020-10769}
- crypto: authenc - Export key parsing helper function (Mathias Krause) [Orabug: 31535530] {CVE-2020-10769}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.52.1.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.52.1.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.52.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.52.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.52.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.52.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.52.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.52.1.el7uek |
Vulnerabilities 1
-
Unscored —
A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in…