ELSA-2013-2584

ELSA-2013-2584 - Unbreakable Enterprise Kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2013-11-28

Description

[2.6.39-400.211.2]
- fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check (Kees Cook) [Orabug: 17842208] {CVE-2013-1928}
- Bluetooth: RFCOMM - Fix info leak via getsockname() (Mathias Krause) [Orabug: 17842129] {CVE-2012-6545}
- Bluetooth: RFCOMM - Fix info leak in ioctl(RFCOMMGETDEVLIST) (Mathias Krause) [Orabug: 17842105] {CVE-2012-6545}
- llc: Fix missing msg_namelen update in llc_ui_recvmsg() (Mathias Krause) [Orabug: 17842095] {CVE-2013-3231}
- HID: pantherlord: validate output report details (Kees Cook) [Orabug: 17842084] {CVE-2013-2892}
- HID: zeroplus: validate output report details (Kees Cook) [Orabug: 17842081] {CVE-2013-2889}
- HID: provide a helper for validating hid reports (Kees Cook) [Orabug: 17842081] {CVE-2013-2889}
- KVM: Fix iommu map/unmap to handle memory slot moves (Jerry Snitselaar) [Orabug: 17842075] {CVE-2013-4592}
- ansi_cprng: Fix off by one error in non-block size request (Jerry Snitselaar) [Orabug: 17842072] {CVE-2013-4345}
- HID: validate HID report id size (Kees Cook) [Orabug: 17842063] {CVE-2013-2888}
- ipv6: remove max_addresses check from ipv6_create_tempaddr (Hannes Frederic Sowa) [Orabug: 17842056] {CVE-2013-0343}
- ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Hannes Frederic Sowa) [Orabug: 17842050] {CVE-2013-4387}

Related CVEs

CVE-2013-1928

CVE-2013-3231

CVE-2012-6545

CVE-2013-2892

CVE-2013-2889

CVE-2013-2888

CVE-2013-4592

CVE-2013-4345

CVE-2013-0343

CVE-2013-4387

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.211.2.el5uek.src.rpm	f9f3fce9c51d2dba51a213fccaf708ffdb15cee0094332905ecfa623b66899a4	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-2.6.39-400.211.2.el5uek.i686.rpm	41891f7b914aaa4d9477b4fe89350b1de7965c46cb3ad9e6840a32dd51416b34	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-debug-2.6.39-400.211.2.el5uek.i686.rpm	22ad408325b085e3e887de3e1a48563967966ec0453aa465696994d321af6f10	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.211.2.el5uek.i686.rpm	858c36ad57c7a5c16e5975f86102a06d7dd1d0ee7d1f872732954878b4ed2236	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-devel-2.6.39-400.211.2.el5uek.i686.rpm	b617285cc9f13b84477bb0bb67d2c20379fd7dc9d7d9d75967bc2c02357338c8	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-doc-2.6.39-400.211.2.el5uek.noarch.rpm	32c7fcb47b0a6250c67ac6487d8f9c5186614950dd0b7ef23cf4196c739ca56a	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-firmware-2.6.39-400.211.2.el5uek.noarch.rpm	91767c5a7df9c593df529c3c099a637e7da89d50a8208e299d58ab0ca14a2cbb	ELSA-2020-5936	ol5_i386_UEK_latest
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.211.2.el5uek.src.rpm	f9f3fce9c51d2dba51a213fccaf708ffdb15cee0094332905ecfa623b66899a4	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-2.6.39-400.211.2.el5uek.x86_64.rpm	6048dd7092bb8628ade536a97212e1e3d54697c39fa37c6a451fbe742be8fa04	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-debug-2.6.39-400.211.2.el5uek.x86_64.rpm	183a0da1d229f1525a8c3b7877480aea89487bbdd3536042021dbc964cd25e30	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.211.2.el5uek.x86_64.rpm	a4535d640dcfa9896d20d6699cf098b55331866469515d3b45a52315dfc0a3e6	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-devel-2.6.39-400.211.2.el5uek.x86_64.rpm	2e2bf9fb538d83093680cd14540717a4c61dbcbc660169d4adae3040ca84c0bf	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-doc-2.6.39-400.211.2.el5uek.noarch.rpm	32c7fcb47b0a6250c67ac6487d8f9c5186614950dd0b7ef23cf4196c739ca56a	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-firmware-2.6.39-400.211.2.el5uek.noarch.rpm	91767c5a7df9c593df529c3c099a637e7da89d50a8208e299d58ab0ca14a2cbb	ELSA-2020-5936	ol5_x86_64_UEK_latest
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.211.2.el6uek.src.rpm	24e36847d556af3e442e2d09b295d6a061c8c2f2e382f24f61bc2069e9d56de0	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-2.6.39-400.211.2.el6uek.i686.rpm	99d8be2f45b75cf184980e2341e637c9e1d03700e4dc18c8a8b57d885a95c444	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-debug-2.6.39-400.211.2.el6uek.i686.rpm	88d5f15991e4f52aef747504dee8afec6adad0a06f1efeb4431a5d13a2781b68	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.211.2.el6uek.i686.rpm	b25c23c76f6c4a1c7c0d98710f6f9a961fa310ad8bdf321ab2a04fdbb0b6495e	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-devel-2.6.39-400.211.2.el6uek.i686.rpm	276eddb0db6b283e7b7087bcec8733f08fcb5f8581c7e3b0f489337c3b5f6a78	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-doc-2.6.39-400.211.2.el6uek.noarch.rpm	a9809c1b196681c7b4545d538bcf34cb59046aea40c97fde40af8269c39ece07	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-firmware-2.6.39-400.211.2.el6uek.noarch.rpm	3b6e5251f47e0ff19bb2967b52e0b944c999962750bb3bd3a170534971f198be	ELSA-2025-20007	ol6_i386_UEK_latest
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.211.2.el6uek.src.rpm	24e36847d556af3e442e2d09b295d6a061c8c2f2e382f24f61bc2069e9d56de0	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-2.6.39-400.211.2.el6uek.x86_64.rpm	f4f938d61d88374bb6806fb453c0755dc07626284ee0066f1d153a76b7d7bf4d	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-debug-2.6.39-400.211.2.el6uek.x86_64.rpm	d5ed007df0e04c6809fe7843f8d7a7963f545a2bc9f5603f3fad45d87086df4d	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.211.2.el6uek.x86_64.rpm	8a6f7a9f1058dd59c0f57d3669848ed6d7b70af5de7ebb329a598146652ab12d	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-devel-2.6.39-400.211.2.el6uek.x86_64.rpm	cf15c1087f776ca028303b85ab81404e2cd9461118821c6b625ff497203a9e32	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-doc-2.6.39-400.211.2.el6uek.noarch.rpm	a9809c1b196681c7b4545d538bcf34cb59046aea40c97fde40af8269c39ece07	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-firmware-2.6.39-400.211.2.el6uek.noarch.rpm	3b6e5251f47e0ff19bb2967b52e0b944c999962750bb3bd3a170534971f198be	ELSA-2025-20007	ol6_x86_64_UEK_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team