Описание
ELSA-2016-3595: Unbreakable Enterprise kernel security update (IMPORTANT)
kernel-uek [3.8.13-118.10.2]
- tcp: make challenge acks less predictable (Eric Dumazet) [Orabug: 24010012] [Orabug: 2401010] {CVE-2016-5696}
[3.8.13-118.10.1]
- ocfs2: call ocfs2_journal_access_di() before ocfs2_journal_dirty() in ocfs2_write_end_nolock() (yangwenfang) [Orabug: 19601200]
- ocfs2: improve recovery performance (Junxiao Bi) [Orabug: 24395691]
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
dtrace-modules-3.8.13-118.10.2.el6uek
0.4.5-3.el6
kernel-uek
3.8.13-118.10.2.el6uek
kernel-uek-debug
3.8.13-118.10.2.el6uek
kernel-uek-debug-devel
3.8.13-118.10.2.el6uek
kernel-uek-devel
3.8.13-118.10.2.el6uek
kernel-uek-doc
3.8.13-118.10.2.el6uek
kernel-uek-firmware
3.8.13-118.10.2.el6uek
Oracle Linux 7
Oracle Linux x86_64
dtrace-modules-3.8.13-118.10.2.el7uek
0.4.5-3.el7
kernel-uek
3.8.13-118.10.2.el7uek
kernel-uek-debug
3.8.13-118.10.2.el7uek
kernel-uek-debug-devel
3.8.13-118.10.2.el7uek
kernel-uek-devel
3.8.13-118.10.2.el7uek
kernel-uek-doc
3.8.13-118.10.2.el7uek
kernel-uek-firmware
3.8.13-118.10.2.el7uek
Связанные CVE
Связанные уязвимости
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly ...
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.