Описание
ELSA-2017-3538: Unbreakable Enterprise kernel security update (IMPORTANT)
[2.6.39-400.294.7]
- udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet) [Orabug: 25874741] {CVE-2016-10229}
- block: fix use-after-free in seq file (Vegard Nossum) [Orabug: 25877531] {CVE-2016-7910}
Обновленные пакеты
Oracle Linux 5
Oracle Linux x86_64
kernel-uek
2.6.39-400.294.7.el5uek
kernel-uek-debug
2.6.39-400.294.7.el5uek
kernel-uek-debug-devel
2.6.39-400.294.7.el5uek
kernel-uek-devel
2.6.39-400.294.7.el5uek
kernel-uek-doc
2.6.39-400.294.7.el5uek
kernel-uek-firmware
2.6.39-400.294.7.el5uek
Oracle Linux i386
kernel-uek
2.6.39-400.294.7.el5uek
kernel-uek-debug
2.6.39-400.294.7.el5uek
kernel-uek-debug-devel
2.6.39-400.294.7.el5uek
kernel-uek-devel
2.6.39-400.294.7.el5uek
kernel-uek-doc
2.6.39-400.294.7.el5uek
kernel-uek-firmware
2.6.39-400.294.7.el5uek
Oracle Linux 6
Oracle Linux x86_64
kernel-uek
2.6.39-400.294.7.el6uek
kernel-uek-debug
2.6.39-400.294.7.el6uek
kernel-uek-debug-devel
2.6.39-400.294.7.el6uek
kernel-uek-devel
2.6.39-400.294.7.el6uek
kernel-uek-doc
2.6.39-400.294.7.el6uek
kernel-uek-firmware
2.6.39-400.294.7.el6uek
Oracle Linux i686
kernel-uek
2.6.39-400.294.7.el6uek
kernel-uek-debug
2.6.39-400.294.7.el6uek
kernel-uek-debug-devel
2.6.39-400.294.7.el6uek
kernel-uek-devel
2.6.39-400.294.7.el6uek
kernel-uek-doc
2.6.39-400.294.7.el6uek
kernel-uek-firmware
2.6.39-400.294.7.el6uek
Связанные CVE
Связанные уязвимости
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
udp.c in the Linux kernel before 4.5 allows remote attackers to execut ...
Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed.