ELSA-2019-4317

ELSA-2019-4317 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-01-04

Description

[2.6.39-400.305.1]
- ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Eric Dumazet) [Orabug: 25059185] {CVE-2016-3841}
- ipv6: add complete rcu protection around np->opt (Eric Dumazet) [Orabug: 25059185] {CVE-2016-3841}
- scsi: qla2xxx: Fix an integer overflow in sysfs code (Dan Carpenter) [Orabug: 28220492] {CVE-2017-14051}
- ext4: fail ext4_iget for root directory if unallocated (Theodore Ts'o) [Orabug: 28220543] {CVE-2018-1092} {CVE-2018-1092}
- ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai) [Orabug: 29005191] {CVE-2018-1000004}
- netfilter: xt_osf: Add missing permission checks (Kevin Cernekee) [Orabug: 29037833] {CVE-2017-17450}
- HID: debug: check length before copy_to_user() (Daniel Rosenberg) [Orabug: 29128174] {CVE-2018-9516}
- Input: i8042 - fix crash at boot time (Chen Hong) [Orabug: 29152330] {CVE-2017-18079}

Related CVEs

CVE-2016-3841

CVE-2018-1000004

CVE-2018-1092

CVE-2017-18079

CVE-2017-14051

CVE-2017-17450

CVE-2018-9516

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.305.1.el5uek.src.rpm	119a4c8b43ad99c017d00490ec092d79	ELSA-2020-5936
	kernel-uek-2.6.39-400.305.1.el5uek.i686.rpm	5662172e7291c320047db0ee35cc5f15	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.305.1.el5uek.i686.rpm	e2e032708f216135a98f8aee60194814	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.305.1.el5uek.i686.rpm	313a2d529d50607dc7202f99b53ff805	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.305.1.el5uek.i686.rpm	fe8aa87b4ae29a6a047997b58129a5c2	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.305.1.el5uek.noarch.rpm	8d3dd27f17f7c8d19f0804f90f5dc0cb	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.305.1.el5uek.noarch.rpm	29eb9e856756baabff4311425dd9e5ea	ELSA-2020-5936
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.305.1.el5uek.src.rpm	119a4c8b43ad99c017d00490ec092d79	ELSA-2020-5936
	kernel-uek-2.6.39-400.305.1.el5uek.x86_64.rpm	3daf85a372467e7cd11b8614d10a692e	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.305.1.el5uek.x86_64.rpm	98bf16e64a8121d551180b7bb409277f	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.305.1.el5uek.x86_64.rpm	4779d50d42bf46723e1838c6e9379deb	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.305.1.el5uek.x86_64.rpm	3d171990408eb01943dbea2727a7a000	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.305.1.el5uek.noarch.rpm	8d3dd27f17f7c8d19f0804f90f5dc0cb	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.305.1.el5uek.noarch.rpm	29eb9e856756baabff4311425dd9e5ea	ELSA-2020-5936
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.305.1.el6uek.src.rpm	9056a5c27f5ddb205726c7b9be6ce1e6	ELSA-2021-9215
	kernel-uek-2.6.39-400.305.1.el6uek.i686.rpm	6c2cf49138bd5b84431095e862e0d67a	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.305.1.el6uek.i686.rpm	3a3fb431c4e06774ab1380c2f87b4b41	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.305.1.el6uek.i686.rpm	a8f31e672ad919887b812118cb277223	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.305.1.el6uek.i686.rpm	d12b9f2b87864198668fee516ff1eece	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.305.1.el6uek.noarch.rpm	21770e700f6282d2b047c93332fb5224	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.305.1.el6uek.noarch.rpm	32dd954510d07592b9e0e923b2ea673a	ELSA-2021-9215
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.305.1.el6uek.src.rpm	9056a5c27f5ddb205726c7b9be6ce1e6	ELSA-2021-9215
	kernel-uek-2.6.39-400.305.1.el6uek.x86_64.rpm	7e417d6662ce0e7adb9fc94e4fb0166f	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.305.1.el6uek.x86_64.rpm	17726f853d8024c893a14b7ba554f8b5	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.305.1.el6uek.x86_64.rpm	bff4933d784f2b831b3f59a1796b1d32	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.305.1.el6uek.x86_64.rpm	2fb2ce064a1a1950a6606129d0ca1912	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.305.1.el6uek.noarch.rpm	21770e700f6282d2b047c93332fb5224	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.305.1.el6uek.noarch.rpm	32dd954510d07592b9e0e923b2ea673a	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team