[ELSA-2015-3054] Unbreakable Enterprise kernel security update

Severity Moderate

Affected Packages 12

CVEs 4

[2.6.39-400.250.9]
- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (Andy Lutomirski) [Orabug: 21514969]
- x86, tls, ldt: Stop checking lm in LDT_empty (Andy Lutomirski) [Orabug: 21514969]

[2.6.39-400.250.8]
- KVM: x86: SYSENTER emulation is broken (Nadav Amit) [Orabug: 21502740] {CVE-2015-0239} {CVE-2015-0239}
- x86/tls: Validate TLS entries to protect espfix (Andy Lutomirski) [Orabug: 20223777] {CVE-2014-8133}
- fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn) [Orabug: 21502255] {CVE-2015-3339}
- eCryptfs: Remove buggy and unnecessary write in file name decode routine (Michael Halcrow) [Orabug: 21502066] {CVE-2014-9683}

Package	Affected Version
pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6	< 2.6.39-400.250.9.el6uek
pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-5	< 2.6.39-400.250.9.el5uek
pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6	< 2.6.39-400.250.9.el6uek
pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-5	< 2.6.39-400.250.9.el5uek
pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6	< 2.6.39-400.250.9.el6uek
pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-5	< 2.6.39-400.250.9.el5uek
pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6	< 2.6.39-400.250.9.el6uek
pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-5	< 2.6.39-400.250.9.el5uek
pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6	< 2.6.39-400.250.9.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-5	< 2.6.39-400.250.9.el5uek
pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6	< 2.6.39-400.250.9.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-5	< 2.6.39-400.250.9.el5uek

ID

ELSA-2015-3054

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2015-3054.html

Published

2015-07-31T00:00:00
(9 years ago)

Modified

2015-07-31T00:00:00
(9 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2015-3054	http://linux.oracle.com/errata/ELSA-2015-3054.html
CVE	CVE-2014-8133	http://linux.oracle.com/cve/CVE-2014-8133
CVE	CVE-2014-9683	http://linux.oracle.com/cve/CVE-2014-9683
CVE	CVE-2015-0239	http://linux.oracle.com/cve/CVE-2015-0239
CVE	CVE-2015-3339	http://linux.oracle.com/cve/CVE-2015-3339

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6	oraclelinux	kernel-uek	< 2.6.39-400.250.9.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-5	oraclelinux	kernel-uek	< 2.6.39-400.250.9.el5uek	oraclelinux-5
Affected	pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6	oraclelinux	kernel-uek-firmware	< 2.6.39-400.250.9.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-5	oraclelinux	kernel-uek-firmware	< 2.6.39-400.250.9.el5uek	oraclelinux-5
Affected	pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6	oraclelinux	kernel-uek-doc	< 2.6.39-400.250.9.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-5	oraclelinux	kernel-uek-doc	< 2.6.39-400.250.9.el5uek	oraclelinux-5
Affected	pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6	oraclelinux	kernel-uek-devel	< 2.6.39-400.250.9.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-5	oraclelinux	kernel-uek-devel	< 2.6.39-400.250.9.el5uek	oraclelinux-5
Affected	pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6	oraclelinux	kernel-uek-debug	< 2.6.39-400.250.9.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-5	oraclelinux	kernel-uek-debug	< 2.6.39-400.250.9.el5uek	oraclelinux-5
Affected	pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6	oraclelinux	kernel-uek-debug-devel	< 2.6.39-400.250.9.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-5	oraclelinux	kernel-uek-debug-devel	< 2.6.39-400.250.9.el5uek	oraclelinux-5

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date