[ELSA-2017-3607] Unbreakable Enterprise kernel security update

Severity Important

Affected Packages 6

CVEs 4

[2.6.39-400.297.6]
- l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault) [Orabug: 26586050] {CVE-2016-10200}
- xfs: fix two memory leaks in xfs_attr_list.c error paths (Mateusz Guzik) [Orabug: 26586024] {CVE-2016-9685}
- KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [Orabug: 26586002] {CVE-2016-9604}
- ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet) [Orabug: 26578202] {CVE-2017-9242}

Package	Affected Version
pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6	< 2.6.39-400.297.6.el6uek
pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6	< 2.6.39-400.297.6.el6uek
pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6	< 2.6.39-400.297.6.el6uek
pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6	< 2.6.39-400.297.6.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6	< 2.6.39-400.297.6.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6	< 2.6.39-400.297.6.el6uek

ID

ELSA-2017-3607

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2017-3607.html

Published

2017-08-18T00:00:00
(7 years ago)

Modified

2017-08-18T00:00:00
(7 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2017-3607	http://linux.oracle.com/errata/ELSA-2017-3607.html
CVE	CVE-2016-10200	http://linux.oracle.com/cve/CVE-2016-10200.html
CVE	CVE-2016-9604	http://linux.oracle.com/cve/CVE-2016-9604.html
CVE	CVE-2017-9242	http://linux.oracle.com/cve/CVE-2017-9242.html
CVE	CVE-2016-9685	http://linux.oracle.com/cve/CVE-2016-9685.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6	oraclelinux	kernel-uek	< 2.6.39-400.297.6.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6	oraclelinux	kernel-uek-firmware	< 2.6.39-400.297.6.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6	oraclelinux	kernel-uek-doc	< 2.6.39-400.297.6.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6	oraclelinux	kernel-uek-devel	< 2.6.39-400.297.6.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6	oraclelinux	kernel-uek-debug	< 2.6.39-400.297.6.el6uek	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6	oraclelinux	kernel-uek-debug-devel	< 2.6.39-400.297.6.el6uek	oraclelinux-6

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date