ELSA-2015-3036

ELSA-2015-3036 - Unbreakable Enterprise kernel security and bugfix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2015-05-13

Description

[2.6.39-400.250.2]
- crypto: aesni - fix memory usage in GCM decryption (Stephan Mueller) [Orabug: 21077389] {CVE-2015-3331}

[2.6.39-400.250.1]
- xen/pciback: Don't disable PCI_COMMAND on PCI device reset. (Konrad Rzeszutek Wilk) [Orabug: 20807440] {CVE-2015-2150}
- xen-blkfront: fix accounting of reqs when migrating (Roger Pau Monne) [Orabug: 20727114]
- Revert 'qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low.' (Chad Dupuis) [Orabug: 20657415]
- x86/xen: allow privcmd hypercalls to be preempted (David Vrabel) [Orabug: 20618759]
- sched: Expose preempt_schedule_irq() (Thomas Gleixner) [Orabug: 20618759]
- isofs: Fix unchecked printing of ER records (Jan Kara) [Orabug: 20930552] {CVE-2014-9584}
- selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID. (Stephen Smalley) [Orabug: 20930502] {CVE-2014-3215}
- Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs (Andy Lutomirski) [Orabug: 20930518] {CVE-2014-3215}
- IB/core: Prevent integer overflow in ib_umem_get address arithmetic (Shachar Raindel) [Orabug: 20788393] {CVE-2014-8159} {CVE-2014-8159}
- xen-pciback: limit guest control of command register (Jan Beulich) [Orabug: 20704156] {CVE-2015-2150} {CVE-2015-2150}
- net: sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [Orabug: 20780348] {CVE-2015-1421}

Related CVEs

CVE-2015-2150

CVE-2015-3331

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.250.2.el5uek.src.rpm	44bccc771277f881b8c48046f409cb491ec61e5d106578c2c218b601fc225281	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-2.6.39-400.250.2.el5uek.i686.rpm	db71c009d4eadc704c2e64afa2cced5c334d6e87fbd3f8206cdad818fbc4a7dd	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-debug-2.6.39-400.250.2.el5uek.i686.rpm	f43a6fdf85d29e41797c85c85f59826cc29e4534e02f0e666be18c4f9f721902	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.250.2.el5uek.i686.rpm	a10cc0ba8e9359ad776a0e50ced62b9765fdda52ef7c33ce65d4f8ec44b3ac7d	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-devel-2.6.39-400.250.2.el5uek.i686.rpm	735da1e62848f7f693710bec5e8cbda6c5bc56535cef153ffd17b236d2e45a05	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-doc-2.6.39-400.250.2.el5uek.noarch.rpm	d2fb6c8da05da2d3a05e9b4a0c2d73a431c10a43f79765a76bcc4b1dfb4dece6	ELSA-2020-5936	ol5_i386_UEK_latest
	kernel-uek-firmware-2.6.39-400.250.2.el5uek.noarch.rpm	aa39f14a777bdce8c01d008369a9092f050472a0f9ded4e1e344f3eb010739e8	ELSA-2020-5936	ol5_i386_UEK_latest
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.250.2.el5uek.src.rpm	44bccc771277f881b8c48046f409cb491ec61e5d106578c2c218b601fc225281	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-2.6.39-400.250.2.el5uek.x86_64.rpm	c9340ace919d52dc0a7b979a1a0e16c4913d951354854f11973498cde52743b0	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-debug-2.6.39-400.250.2.el5uek.x86_64.rpm	f203559124b9e786ef0800a8ec3cb7e3dbc76ed7eecd711e390bbc08cf54ed0b	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.250.2.el5uek.x86_64.rpm	b3e3be0261f2f6f7a694874f5fc7f3164b72ecef9a8e51053a6a1e5077ff2bc4	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-devel-2.6.39-400.250.2.el5uek.x86_64.rpm	ca258e7e837f7eb70b907ff312dd30f894664c5839c8fbfe45c77b43dadad679	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-doc-2.6.39-400.250.2.el5uek.noarch.rpm	d2fb6c8da05da2d3a05e9b4a0c2d73a431c10a43f79765a76bcc4b1dfb4dece6	ELSA-2020-5936	ol5_x86_64_UEK_latest
	kernel-uek-firmware-2.6.39-400.250.2.el5uek.noarch.rpm	aa39f14a777bdce8c01d008369a9092f050472a0f9ded4e1e344f3eb010739e8	ELSA-2020-5936	ol5_x86_64_UEK_latest
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.250.2.el6uek.src.rpm	d6bcd23e3778a108e7ebf9e05917b4a876cb3f089cb9f1409f40434016b35219	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-2.6.39-400.250.2.el6uek.i686.rpm	04e30c0f194f0fd3de446b28fc37b141642b5a083b29dd87091cb6278f334443	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-debug-2.6.39-400.250.2.el6uek.i686.rpm	d7aa8ff056df080699d4e0bef75df783f490e6aa1e441661f88696af1126837e	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.250.2.el6uek.i686.rpm	1216e6a3c12c4a866f7ef3970521c9a60d23d79d933f5abae2a020e30b2aa873	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-devel-2.6.39-400.250.2.el6uek.i686.rpm	835d4604443080dca2cba03e8e06f9778e6e497ed5d706f83143c943faff7ad4	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-doc-2.6.39-400.250.2.el6uek.noarch.rpm	159e07cf2312a631105e5636f87f45d0ab0884454970d9fe075272ddf3bf7881	ELSA-2025-20007	ol6_i386_UEK_latest
	kernel-uek-firmware-2.6.39-400.250.2.el6uek.noarch.rpm	1ff58d65403c1c93fe579631b7a0091a38c54af72e77baddb1c7f0ea858a1473	ELSA-2025-20007	ol6_i386_UEK_latest
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.250.2.el6uek.src.rpm	d6bcd23e3778a108e7ebf9e05917b4a876cb3f089cb9f1409f40434016b35219	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-2.6.39-400.250.2.el6uek.x86_64.rpm	305b36fe7d4c673de73b376b6f221911b450204a56683ab58b3b728af94f23c5	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-debug-2.6.39-400.250.2.el6uek.x86_64.rpm	0490ecc369ea9231afcbac21ddfdbf814082ce47409540bf2f037b2beac5a04a	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-debug-devel-2.6.39-400.250.2.el6uek.x86_64.rpm	b18a7ca9a7b14cee54549b74c7a6c1d20dbd7de6eb5a87ffb6fc3dbd0f054f4c	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-devel-2.6.39-400.250.2.el6uek.x86_64.rpm	ed24b6b3aba5dc368683199d22dfc64ad0660cbed734c42f858521ea5b180b9d	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-doc-2.6.39-400.250.2.el6uek.noarch.rpm	159e07cf2312a631105e5636f87f45d0ab0884454970d9fe075272ddf3bf7881	ELSA-2025-20007	ol6_x86_64_UEK_latest
	kernel-uek-firmware-2.6.39-400.250.2.el6uek.noarch.rpm	1ff58d65403c1c93fe579631b7a0091a38c54af72e77baddb1c7f0ea858a1473	ELSA-2025-20007	ol6_x86_64_UEK_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team