ELSA-2014-3049

ELSA-2014-3049 - unbreakable enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2014-07-23

Description

kernel-uek
[3.8.13-35.3.2.el7uek]
- l2tp: fix an unprivileged user to kernel privilege escalation (Sasha Levin) [Orabug: 19229497] {CVE-2014-4943} {CVE-2014-4943}
- ptrace,x86: force IRET path after a ptrace_stop() (Tejun Heo) [Orabug: 19230689] {CVE-2014-4699}
- net: flow_dissector: fail on evil iph->ihl (Jason Wang) [Orabug: 19231234] {CVE-2013-4348}

Related CVEs

CVE-2014-4943

CVE-2014-4699

CVE-2013-4348

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	dtrace-modules-3.8.13-35.3.2.el7uek-0.4.3-4.el7.src.rpm	acb47cae320cba4ffed391e548ec8fba	-
	kernel-uek-3.8.13-35.3.2.el7uek.src.rpm	2cb3af00bd866d59e5b74b2bb716b10e	ELSA-2021-9220
	dtrace-modules-3.8.13-35.3.2.el7uek-0.4.3-4.el7.x86_64.rpm	55fae24f221e6df39124b9d5d5f58f13	-
	kernel-uek-3.8.13-35.3.2.el7uek.x86_64.rpm	d66e81cc5d3382df0310a988c16d90d6	ELSA-2021-9220
	kernel-uek-debug-3.8.13-35.3.2.el7uek.x86_64.rpm	db9a56a5bee5084d1da4057c13066def	ELSA-2021-9220
	kernel-uek-debug-devel-3.8.13-35.3.2.el7uek.x86_64.rpm	7fdabbd9133f92b37efeb4f94ca0d32f	ELSA-2021-9220
	kernel-uek-devel-3.8.13-35.3.2.el7uek.x86_64.rpm	36a3be925fe83b8fc4294ff75abb892f	ELSA-2021-9220
	kernel-uek-doc-3.8.13-35.3.2.el7uek.noarch.rpm	eb7a0c4120408d97a3e82cde97b154a6	ELSA-2021-9220
	kernel-uek-firmware-3.8.13-35.3.2.el7uek.noarch.rpm	309030cf9e2ba0b5a0b890d5f58e4ac2	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team