[Oraclevm-errata] OVMSA-2016-0175 Important: Oracle VM 3.3 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle VM oraclevm-errata at oss.oracle.com
Mon Dec 12 11:24:30 PST 2016


Oracle VM Security Advisory OVMSA-2016-0175

The following updated rpms for Oracle VM 3.3 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-uek-3.8.13-118.15.1.el6uek.x86_64.rpm
kernel-uek-firmware-3.8.13-118.15.1.el6uek.noarch.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/kernel-uek-3.8.13-118.15.1.el6uek.src.rpm



Description of changes:

[3.8.13-118.15.1.el6uek]
- Revert "i40e: Set defport behavior for the Main VSI when in 
promiscuous mode" (Jack Vogel)  [Orabug: 22683573]
- mlx4: avoid multiple free on id_map_ent (Wengang Wang)
- xen-netfront: cast grant table reference first to type int (Dongli 
Zhang)
- xen-netfront: do not cast grant table reference to signed short 
(Dongli Zhang)
- RDS: Drop the connection as part of cancel to avoid hangs (Avinash 
Repaka)  [Orabug: 25045360]
- sctp: validate chunk len before actually using it (Marcelo Ricardo 
Leitner)  [Orabug: 25142879]  {CVE-2016-9555}
- mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (Andrey Ryabinin) 
  [Orabug: 25154098]  {CVE-2016-8650} {CVE-2016-8650}



More information about the Oraclevm-errata mailing list