Описание
ELSA-2016-3565: Unbreakable Enterprise kernel security update (IMPORTANT)
kernel-uek [3.8.13-118.6.2]
- KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells) [Orabug: 23279020] {CVE-2016-0758}
- net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa) [Orabug: 23267997] {CVE-2015-8543} {CVE-2015-8543}
- ipv6: addrconf: validate new MTU before applying it (Marcelo Leitner) [Orabug: 23263252] {CVE-2015-8215}
- unix: properly account for FDs passed over unix sockets (willy tarreau) [Orabug: 23262276] {CVE-2013-4312} {CVE-2013-4312}
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
dtrace-modules-3.8.13-118.6.2.el6uek
0.4.5-3.el6
kernel-uek
3.8.13-118.6.2.el6uek
kernel-uek-debug
3.8.13-118.6.2.el6uek
kernel-uek-debug-devel
3.8.13-118.6.2.el6uek
kernel-uek-devel
3.8.13-118.6.2.el6uek
kernel-uek-doc
3.8.13-118.6.2.el6uek
kernel-uek-firmware
3.8.13-118.6.2.el6uek
Oracle Linux 7
Oracle Linux x86_64
dtrace-modules-3.8.13-118.6.2.el7uek
0.4.5-3.el7
kernel-uek
3.8.13-118.6.2.el7uek
kernel-uek-debug
3.8.13-118.6.2.el7uek
kernel-uek-debug-devel
3.8.13-118.6.2.el7uek
kernel-uek-devel
3.8.13-118.6.2.el7uek
kernel-uek-doc
3.8.13-118.6.2.el7uek
kernel-uek-firmware
3.8.13-118.6.2.el7uek
Связанные CVE
Связанные уязвимости
ELSA-2016-3559: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2016-3566: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2016-3567: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2016-0855: kernel security, bug fix, and enhancement update (MODERATE)
Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.