1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2014-3014

[ELSA-2014-3014] unbreakable enterprise kernel security update

Severity Important
Affected Packages 8
CVEs 4
Info Packages References Vulnerabilities

kernel-uek
[3.8.13-26.2.2.el6uek]
- netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Daniel Borkmann) [Orabug: 18421673] {CVE-2014-2523}
- cifs: ensure that uncached writes handle unmapped areas correctly (Jeff Layton) [Orabug: 18461067] {CVE-2014-0069} {CVE-2014-0069}
- net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable (Daniel Borkmann) [Orabug: 18461065] {CVE-2014-0101}
- vhost-net: insufficient handling of error conditions in get_rx_bufs() (Guangyu Sun) [Orabug: 18461050] {CVE-2014-0055}

Package Affected Version
pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6 < 3.8.13-26.2.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-headers?distro=oraclelinux-6 < 3.8.13-26.2.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6 < 3.8.13-26.2.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6 < 3.8.13-26.2.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6 < 3.8.13-26.2.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6 < 3.8.13-26.2.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6 < 3.8.13-26.2.2.el6uek
pkg:rpm/oraclelinux/dtrace-modules-3.8.13-26.2.2.el6uek?distro=oraclelinux-6 < 0.4.2-3.el6
ID
ELSA-2014-3014
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2014-3014.html
Published
2014-03-26T00:00:00
(10 years ago)
Modified
2014-03-26T00:00:00
(10 years ago)
Rights
Copyright 2014 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6 oraclelinux kernel-uek < 3.8.13-26.2.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-headers?distro=oraclelinux-6 oraclelinux kernel-uek-headers < 3.8.13-26.2.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6 oraclelinux kernel-uek-firmware < 3.8.13-26.2.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6 oraclelinux kernel-uek-doc < 3.8.13-26.2.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6 oraclelinux kernel-uek-devel < 3.8.13-26.2.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6 oraclelinux kernel-uek-debug < 3.8.13-26.2.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6 oraclelinux kernel-uek-debug-devel < 3.8.13-26.2.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/dtrace-modules-3.8.13-26.2.2.el6uek?distro=oraclelinux-6 oraclelinux dtrace-modules-3.8.13-26.2.2.el6uek < 0.4.2-3.el6 oraclelinux-6
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date