ELSA-2023-12914

ELSA-2023-12914 - Unbreakable Enterprise kernel-container security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-10-17

Description

[5.4.17-2136.323.8.2.el7]
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307]
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307]
- netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824307]
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824307] {CVE-2023-42753}

Related CVEs

CVE-2023-42753

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-uek-container-5.4.17-2136.323.8.2.el7.src.rpm	f5013bc03103b8bc533a62a4995445408f29a378d1f657a5b46501ec6eae33ed	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-container-5.4.17-2136.323.8.2.el7.x86_64.rpm	0b258b2b12404e2a903c79e5d9c477284dd873a6363d4ae63f56b4a06cf384e6	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2136.323.8.2.el7.x86_64.rpm	2546be17631f991dfe25d3e79666651b5b8734ecd5ede9a819ba0f5fc503a6e0	ELSA-2025-20190	ol7_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team