Oracle Linux 6277 Published by

The following updates has been released for Oracle Linux:

ELEA-2017-3052 Oracle Linux 6 tzdata enhancement update
ELEA-2017-3052 Oracle Linux 7 tzdata enhancement update
ELSA-2017-3631 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
ELSA-2017-3631 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELSA-2017-3632 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
ELSA-2017-3632 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELSA-2017-3633 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update
ELSA-2017-3633 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update



ELEA-2017-3052 Oracle Linux 6 tzdata enhancement update

Oracle Linux Enhancement Advisory ELEA-2017-3052

http://linux.oracle.com/errata/ELEA-2017-3052.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
tzdata-2017c-1.el6.noarch.rpm
tzdata-java-2017c-1.el6.noarch.rpm

x86_64:
tzdata-2017c-1.el6.noarch.rpm
tzdata-java-2017c-1.el6.noarch.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/tzdata-2017c-1.el6.src.rpm



Description of changes:

[2017c-1]
- Rebase to tzdata-2017c.
- Northern Cyprus will revert to using EQ rules on October 29, 2017.
- Sudan will switch from +03 to +02 on November 1, 2017.
- Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
experiment with DST.
- Fiji DST will end on January 14, 2018 rather than January 21, 2018.
- Namibia - starting September 3, 2017 switches from +)1 with DST to
+02 all year. This change takes effect April 1, 2018.
- Turks & Caicos changes from -04 all year to -05 with US DST starting
on March 11, 2018. Effective change date is November 4, 2018.
- tzdata now includes two text versions of the time zone data - tzdata.zi
and leapseconds.

ELEA-2017-3052 Oracle Linux 7 tzdata enhancement update

Oracle Linux Enhancement Advisory ELEA-2017-3052

http://linux.oracle.com/errata/ELEA-2017-3052.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
tzdata-2017c-1.el7.noarch.rpm
tzdata-java-2017c-1.el7.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/tzdata-2017c-1.el7.src.rpm



Description of changes:

[2017c-1]
- Rebase to tzdata-2017c.
- Northern Cyprus will revert to using EQ rules on October 29, 2017.
- Sudan will switch from +03 to +02 on November 1, 2017.
- Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
experiment with DST.
- Fiji DST will end on January 14, 2018 rather than January 21, 2018.
- Namibia - starting September 3, 2017 switches from +)1 with DST to
+02 all year. This change takes effect April 1, 2018.
- Turks & Caicos changes from -04 all year to -05 with US DST starting
on March 11, 2018. Effective change date is November 4, 2018.
- tzdata now includes two text versions of the time zone data - tzdata.zi
and leapseconds.
- Includes two patches to deal with build issues.

ELSA-2017-3631 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2017-3631

http://linux.oracle.com/errata/ELSA-2017-3631.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-4.1.12-103.7.4.el6uek.x86_64.rpm
kernel-uek-doc-4.1.12-103.7.4.el6uek.noarch.rpm
kernel-uek-firmware-4.1.12-103.7.4.el6uek.noarch.rpm
kernel-uek-devel-4.1.12-103.7.4.el6uek.x86_64.rpm
kernel-uek-debug-4.1.12-103.7.4.el6uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-103.7.4.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-4.1.12-103.7.4.el6uek.src.rpm



Description of changes:

[4.1.12-103.7.4.el6uek]
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina
Dubroca) [Orabug: 27011255] {CVE-2017-7542}
- udp: consistently apply ufo or fragmentation (Willem de Bruijn)
[Orabug: 26921320] {CVE-2017-1000112}

ELSA-2017-3631 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2017-3631

http://linux.oracle.com/errata/ELSA-2017-3631.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-103.7.4.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-103.7.4.el7uek.noarch.rpm
kernel-uek-4.1.12-103.7.4.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-103.7.4.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-103.7.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-103.7.4.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-103.7.4.el7uek.src.rpm



Description of changes:

[4.1.12-103.7.4.el7uek]
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina
Dubroca) [Orabug: 27011255] {CVE-2017-7542}
- udp: consistently apply ufo or fragmentation (Willem de Bruijn)
[Orabug: 26921320] {CVE-2017-1000112}


ELSA-2017-3632 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2017-3632

http://linux.oracle.com/errata/ELSA-2017-3632.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.19.10.el6uek.noarch.rpm
kernel-uek-doc-3.8.13-118.19.10.el6uek.noarch.rpm
kernel-uek-3.8.13-118.19.10.el6uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.19.10.el6uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.19.10.el6uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.19.10.el6uek.x86_64.rpm
dtrace-modules-3.8.13-118.19.10.el6uek-0.4.5-3.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-3.8.13-118.19.10.el6uek.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/dtrace-modules-3.8.13-118.19.10.el6uek-0.4.5-3.el6.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.19.10.el6uek]
- mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang) [Orabug:
26643556] {CVE-2017-11176}

[3.8.13-118.19.9.el6uek]
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina
Dubroca) [Orabug: 27011273] {CVE-2017-7542}
- packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)
[Orabug: 27002450] {CVE-2017-1000111}

[3.8.13-118.19.8.el6uek]
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin
Guay) [Orabug: 26883934]
- xen/x86: Add interface for querying amount of host memory (Boris
Ostrovsky) [Orabug: 26883934]

ELSA-2017-3632 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2017-3632

http://linux.oracle.com/errata/ELSA-2017-3632.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.19.10.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-118.19.10.el7uek.noarch.rpm
kernel-uek-3.8.13-118.19.10.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.19.10.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.19.10.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.19.10.el7uek.x86_64.rpm
dtrace-modules-3.8.13-118.19.10.el7uek-0.4.5-3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-118.19.10.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-118.19.10.el7uek-0.4.5-3.el7.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.19.10.el7uek]
- mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang) [Orabug:
26643556] {CVE-2017-11176}

[3.8.13-118.19.9.el7uek]
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina
Dubroca) [Orabug: 27011273] {CVE-2017-7542}
- packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)
[Orabug: 27002450] {CVE-2017-1000111}

[3.8.13-118.19.8.el7uek]
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin
Guay) [Orabug: 26883934] - xen/x86: Add interface for querying amount
of host memory (Boris Ostrovsky) [Orabug: 26883934]

ELSA-2017-3633 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2017-3633

http://linux.oracle.com/errata/ELSA-2017-3633.html

The following updated rpms for Oracle Linux 5 Extended Lifecycle Support
(ELS) have been uploaded to the Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.297.11.el5uek.i686.rpm
kernel-uek-debug-2.6.39-400.297.11.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.297.11.el5uek.i686.rpm
kernel-uek-devel-2.6.39-400.297.11.el5uek.i686.rpm
kernel-uek-doc-2.6.39-400.297.11.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.297.11.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.297.11.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-400.297.11.el5uek.noarch.rpm
kernel-uek-2.6.39-400.297.11.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.297.11.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.297.11.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.297.11.el5uek.x86_64.rpm



Description of changes:

[2.6.39-400.297.11.el5uek]
- mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang) [Orabug:
26643562] {CVE-2017-11176}
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina
Dubroca) [Orabug: 27011278] {CVE-2017-7542}
- packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)
[Orabug: 27002453] {CVE-2017-1000111}

[2.6.39-400.297.10.el5uek]
- mlx4_core: calculate log_mtt based on total system memory (Wei Lin
Guay) [Orabug: 26867355]
- xen/x86: Add interface for querying amount of host memory (Boris
Ostrovsky) [Orabug: 26867355]

ELSA-2017-3633 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2017-3633

http://linux.oracle.com/errata/ELSA-2017-3633.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.297.11.el6uek.i686.rpm
kernel-uek-debug-2.6.39-400.297.11.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.297.11.el6uek.i686.rpm
kernel-uek-devel-2.6.39-400.297.11.el6uek.i686.rpm
kernel-uek-doc-2.6.39-400.297.11.el6uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.297.11.el6uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.297.11.el6uek.noarch.rpm
kernel-uek-doc-2.6.39-400.297.11.el6uek.noarch.rpm
kernel-uek-2.6.39-400.297.11.el6uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.297.11.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.297.11.el6uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.297.11.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.39-400.297.11.el6uek.src.rpm



Description of changes:

[2.6.39-400.297.11.el6uek]
- mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang) [Orabug:
26643562] {CVE-2017-11176}
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina
Dubroca) [Orabug: 27011278] {CVE-2017-7542}
- packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)
[Orabug: 27002453] {CVE-2017-1000111}

[2.6.39-400.297.10.el6uek]
- mlx4_core: calculate log_mtt based on total system memory (Wei Lin
Guay) [Orabug: 26867355] - xen/x86: Add interface for querying amount
of host memory (Boris Ostrovsky) [Orabug: 26867355]