ELSA-2013-2523

ELSA-2013-2523 - Unbreakable Enterprise kernel security and bugfix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2013-05-09

Description

[2.6.39-400.23.1]
- Parallel mtrr init between cpus (Zhenzhong Duan) [Orabug: 16777774]
- Merge tag 'v2.6.39-400.21.1.16748891' of git://ca-git.us.oracle.com/linux-uek-2.6.39-ofed into uek-2.6.39-400 (Maxim Uvarov) [Orabug: 16748891]
- xen-blkfront: use a different scatterlist for each request (Roger Pau Monne)
- Fix EN driver to work with newer FWs based on latest mlx4_core (Yuval Shaia) [Orabug: 16748891]

[2.6.39-400.22.1]
- block: default SCSI command filter does not accomodate commands overlap across device classes (Jamie Iles) [Orabug: 16387137] {CVE-2012-4542}
- Merge tag 'v2.6.39-400.21.1#bug16684527' of git://ca-git.us.oracle.com/linux-joejin-public into uek-2.6.39-400_errata (Maxim Uvarov) [Orabug: 16684527]
- KVM: x86: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (CVE-2013-1797) (Andy Honig) [Orabug: 16711660] {CVE-2013-1797}
- Bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Anderson Lizardo) [Orabug: 16711065] {CVE-2013-0349}
- USB: io_ti: Fix NULL dereference in chase_port() (Wolfgang Frisch) [Orabug: 16425358] {CVE-2013-1774}
- keys: fix race with concurrent install_user_keyrings() (David Howells) [Orabug: 16493354] {CVE-2013-1792}
- KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798) (Andy Honig) [Orabug: 16710951] {CVE-2013-1798}
- KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (CVE-2013-1796) (Andy Honig) [Orabug: 16710806] {CVE-2013-1796}
- tmpfs: fix use-after-free of mempolicy object (Greg Thelen) [Orabug: 16515833] {CVE-2013-1767}
- procfs: do not confuse jiffies with cputime64_t (Andreas Schwab) [Orabug: 16673925]
- procfs: do not overflow get_{idle,iowait}_time for nohz (Michal Hocko) [Orabug: 16673925]
- xen/evtchn: Handle VIRQ_TIMER before any other hardirq in event loop. (Keir Fraser) [Orabug: 16093126]
- Fix device removal NULL pointer dereference (Joe Jin) [Orabug: 16684527]
- put stricter guards on queue dead checks (James Bottomley) [Orabug: 16684527]

Related CVEs

CVE-2012-4542

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.23.1.el5uek.src.rpm	35054fa083c4c4e66b43c422bb068434	ELSA-2020-5936
	kernel-uek-2.6.39-400.23.1.el5uek.i686.rpm	d350ade7ee9004455341444275c8b4a6	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.23.1.el5uek.i686.rpm	914a96a3e7cceea0f907531aee277a93	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.23.1.el5uek.i686.rpm	6844351870b37892623d69bbeddda286	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.23.1.el5uek.i686.rpm	cebad0826a79a9d836db089ca70cdae6	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.23.1.el5uek.noarch.rpm	e9fb85f100f4c1dc4bf548a37e8ec279	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.23.1.el5uek.noarch.rpm	6547bc176b9583bee7c7d652fbddb6d5	ELSA-2020-5936
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.23.1.el5uek.src.rpm	35054fa083c4c4e66b43c422bb068434	ELSA-2020-5936
	kernel-uek-2.6.39-400.23.1.el5uek.x86_64.rpm	ac494154a657a22f3eddc7451697471d	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.23.1.el5uek.x86_64.rpm	4964420300789b2bc426b827f0400081	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.23.1.el5uek.x86_64.rpm	0ed249d03d716c5982d08ad73f23ee8b	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.23.1.el5uek.x86_64.rpm	8ba5de0f4b3ee0671d12dc7fc90bff34	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.23.1.el5uek.noarch.rpm	e9fb85f100f4c1dc4bf548a37e8ec279	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.23.1.el5uek.noarch.rpm	6547bc176b9583bee7c7d652fbddb6d5	ELSA-2020-5936
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.23.1.el6uek.src.rpm	1c7e35dccab386b878986906552e21ca	ELSA-2021-9215
	kernel-uek-2.6.39-400.23.1.el6uek.i686.rpm	0a679ab68ac7080822dbb359510361fa	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.23.1.el6uek.i686.rpm	30f8435fb2df28cd495f3f6c97ccbb04	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.23.1.el6uek.i686.rpm	338295f8466c2f29b3a136cf836b17b4	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.23.1.el6uek.i686.rpm	0a76b3f385c450f10b54bc48110ecffe	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.23.1.el6uek.noarch.rpm	fb95f6b8bf53ea05acf759380aea64c9	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.23.1.el6uek.noarch.rpm	ce2f8ef44cc73dbfd6706db18d9ade23	ELSA-2021-9215
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.23.1.el6uek.src.rpm	1c7e35dccab386b878986906552e21ca	ELSA-2021-9215
	kernel-uek-2.6.39-400.23.1.el6uek.x86_64.rpm	6c36b1975ad065af9bd383b9c4486a22	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.23.1.el6uek.x86_64.rpm	ba0014941245ea10cde11a3304a942fa	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.23.1.el6uek.x86_64.rpm	56a84d6c9fb28ca204a1dc76a023356d	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.23.1.el6uek.x86_64.rpm	08d006cec2f60fdad7799ba5ff79e02f	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.23.1.el6uek.noarch.rpm	fb95f6b8bf53ea05acf759380aea64c9	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.23.1.el6uek.noarch.rpm	ce2f8ef44cc73dbfd6706db18d9ade23	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team