Oracle Errata System
Oracle Linux
5.3
2021-09-09T12:48:16
ELSA-2016-3502: Unbreakable Enterprise kernel security update (IMPORTANT)
Oracle Linux 5
Oracle Linux 6
[2.6.39-400.264.13]
- KEYS: Don't permit request_key() to construct a new keyring (David Howells) [Orabug: 22373449] {CVE-2015-7872}
[2.6.39-400.264.12]
- crypto: add missing crypto module aliases (Mathias Krause) [Orabug: 22249656] {CVE-2013-7421} {CVE-2014-9644}
- crypto: include crypto- module prefix in template (Kees Cook) [Orabug: 22249656] {CVE-2013-7421} {CVE-2014-9644}
- crypto: prefix module autoloading with 'crypto-' (Kees Cook) [Orabug: 22249656] {CVE-2013-7421} {CVE-2014-9644}
[2.6.39-400.264.11]
- KVM: x86: Don't report guest userspace emulation error to userspace (Nadav Amit) [Orabug: 22249615] {CVE-2010-5313} {CVE-2014-7842}
[2.6.39-400.264.9]
- msg_unlock() in wrong spot after applying 'Initialize msg/shm IPC objects before doing ipc_addid()' (Chuck Anderson) [Orabug: 22250044] {CVE-2015-7613} {CVE-2015-7613}
[2.6.39-400.264.8]
- ipc/sem.c: fully initialize sem_array before making it visible (Manfred Spraul) [Orabug: 22250044] {CVE-2015-7613}
- Initialize msg/shm IPC objects before doing ipc_addid() (Linus Torvalds) [Orabug: 22250044] {CVE-2015-7613}
[2.6.39-400.264.7]
- KVM: svm: unconditionally intercept #DB (Paolo Bonzini) [Orabug: 22333698] {CVE-2015-8104} {CVE-2015-8104}
- KVM: x86: work around infinite loop in microcode when #AC is delivered (Eric Northup) [Orabug: 22333689] {CVE-2015-5307} {CVE-2015-5307}
[2.6.39-400.264.6]
- mlx4_core: Introduce restrictions for PD update (Ajaykumar Hotchandani)
- IPoIB: Drop priv->lock before calling ipoib_send() (Wengang Wang)
- IPoIB: serialize changing on tx_outstanding (Wengang Wang) [Orabug: 21861366]
- IB/mlx4: Implement IB_QP_CREATE_USE_GFP_NOIO (Jiri Kosina)
- IB: Add a QP creation flag to use GFP_NOIO allocations (Or Gerlitz)
- IB: Return error for unsupported QP creation flags (Or Gerlitz)
- IB/ipoib: Calculate csum only when skb->ip_summed is CHECKSUM_PARTIAL (Yuval Shaia) [Orabug: 20873175]
IMPORTANT
Copyright 2016 Oracle, Inc.
CVE-2013-7421
CVE-2014-9644
CVE-2014-7842
CVE-2015-7613
CVE-2015-5307
CVE-2015-8104
kernel-uek-firmware
oraclelinux-release
kernel-uek-debug-devel
kernel-uek-devel
kernel-uek-debug
kernel-uek
kernel-uek-doc
66ced3de1e5e0159
72f97b74ec551f03
^5
x86_64
2.6.39
0:2.6.39-400.264.13.el5uek
i386
^6
2.6.39
0:2.6.39-400.264.13.el6uek
i686