[ALAS-2016-648] Amazon Linux AMI 2014.03 - ALAS-2016-648: medium priority package update for kernel

Package updates are available for Amazon Linux AMI that fix the following vulnerabilities:
CVE-2016-0723:
1296253:
CVE-2016-0723 kernel: Kernel memory disclosure and crash in tty layer

CVE-2015-8767:
1297389:
CVE-2015-8767 kernel: SCTP denial of service during timeout

CVE-2015-8709:
A privilege-escalation vulnerability was discovered in the Linux kernel built with User Namespace (CONFIG_USER_NS) support. The flaw occurred when the ptrace() system call was used on a root-owned process to enter a user namespace. A privileged namespace user could exploit this flaw to potentially escalate their privileges on the system, outside the original namespace.
1295287:
CVE-2015-8709 Kernel: ptrace: potential privilege escalation in user namespaces

CVE-2013-4312:
1297813:
CVE-2013-4312 kernel: File descriptors passed over unix sockets are not properly accounted