Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-37.3.1 - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. David Howells Orabug: 23279022 CVE-2016-0758 - uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers Todd Vierling Orabug: 23270829 - unix: properly account for FDs passed over un...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3554)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3554 advisory. kernel-uek 4.1.12-37.2.2 - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222731 CVE-2015-8767 Tenable has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3551)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3551 advisory. - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222753 CVE-2015-8767 Tenable has extracted the preceding...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3553)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3553 advisory. kernel-uek 2.6.32-400.37.16uek - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222781 CVE-2015-8767 Tenabl...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3552)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3552 advisory. 2.6.39-400.278.2 - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222773 CVE-2015-8767 Tenable has extracte...

Unbreakable Enterprise kernel security update

kernel-uek 2.6.32-400.37.16uek - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222781 CVE-2015-8767...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3528)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3528 advisory. kernel-uek 3.8.13-118.4.2 - pipe: Fix buffer offset after partially failed read Ben Hutchings Orabug: 22985903 CVE-2016-0774 CVE-2015-1805 CVE-2016-0774...

FBI Director — "What If Apple Engineers are Kidnapped and Forced to Write (Exploit) Code?"

What If Apple Engineers are Kidnapped and Forced to Write Exploit Code? Exactly this was what FBI Director James Comey asked in the congressional hearing on Tuesday. The House Judiciary Committee hearing on "The Encryption Tightrope: Balancing Americans' Security and Privacy" over the ongoing...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3519)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3519 advisory. - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection Andy Lutomirski Orabug: 22742507 CVE-2015-5157 - x86/nmi/64: Reorder nested NMI...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0014)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection Andy Lutomirski Orabug: 22742507 CVE-2015-5157 - x86/nmi/64: Reorder nested NMI checks Andy Lutomirski Orabug: 22742507...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3509)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3509 advisory. kernel-uek 3.8.13-118.2.5 - KEYS: Fix keyring ref leak in joinsessionkeyring Yevgeny Pats Orabug: 22563965 CVE-2016-0728 Tenable has extracted the preceding...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3502)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3502 advisory. - KEYS: Don't permit requestkey to construct a new keyring David Howells Orabug: 22373449 CVE-2015-7872 - crypto: add missing crypto module aliases...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3501)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3501 advisory. - KEYS: Don't permit requestkey to construct a new keyring David Howells Orabug: 22373442 CVE-2015-7872 - KEYS: Fix crash when attempt to garbage...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3503)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3503 advisory. - ipc/sem.c: fully initialize semarray before making it visible Manfred Spraul Orabug: 22250043 CVE-2015-7613 - Initialize msg/shm IPC objects befo...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.2.4 - KEYS: Don't permit requestkey to construct a new keyring David Howells Orabug: 22373442 CVE-2015-7872 3.8.13-118.2.3 - dcache: Handle escaped paths in prependpath Eric W. Biederman Orabug: 22373283 - vfs: Test for and handle paths that are unreachable from their mntroo...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3107)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3107 advisory. - KVM: svm: unconditionally intercept DB Paolo Bonzini Orabug: 22333698 CVE-2015-8104 - KVM: x86: work around infinite loop in microcode when AC is...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3101)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3101 advisory. - ipc/sem.c: fully initialize semarray before making it visible Manfred Spraul Orabug: 22277382 CVE-2015-7613 - ipc: fix msg newqueue add Guru...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3098)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3098 advisory. - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145600 CVE-2015-5156 - RDS: fix race condition when sending a message on unbound socket...

Unbreakable Enterprise kernel security and bugfix update

kernel-uek 3.8.13-118 - Update ql2400/ql2500 firmware version to 8.02.00 Dan Duval Orabug: 22159505 - update qla2400/ql2500 firmware version to 8.02.00 Dan Duval Orabug: 22159505 3.8.13-117 - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145600 CVE-2015-5156 - team: check return value of...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3094)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3094 advisory. kernel-uek 2.6.32-400.37.12uek - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145596 CVE-2015-5156 Tenable has extracted the preceding description...