Oracle Linux Security Advisory ELSA-2024-1831

http://linux.oracle.com/errata/ELSA-2024-1831.html

The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:

i386:
kernel-2.6.32-754.53.1.el6.i686.rpm
kernel-abi-whitelists-2.6.32-754.53.1.el6.noarch.rpm
kernel-debug-2.6.32-754.53.1.el6.i686.rpm
kernel-debug-devel-2.6.32-754.53.1.el6.i686.rpm
kernel-devel-2.6.32-754.53.1.el6.i686.rpm
kernel-doc-2.6.32-754.53.1.el6.noarch.rpm
kernel-firmware-2.6.32-754.53.1.el6.noarch.rpm
kernel-headers-2.6.32-754.53.1.el6.i686.rpm
perf-2.6.32-754.53.1.el6.i686.rpm
python-perf-2.6.32-754.53.1.el6.i686.rpm

x86_64:
kernel-2.6.32-754.53.1.el6.x86_64.rpm
kernel-abi-whitelists-2.6.32-754.53.1.el6.noarch.rpm
kernel-debug-2.6.32-754.53.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-754.53.1.el6.i686.rpm
kernel-debug-devel-2.6.32-754.53.1.el6.x86_64.rpm
kernel-devel-2.6.32-754.53.1.el6.x86_64.rpm
kernel-doc-2.6.32-754.53.1.el6.noarch.rpm
kernel-firmware-2.6.32-754.53.1.el6.noarch.rpm
kernel-headers-2.6.32-754.53.1.el6.x86_64.rpm
perf-2.6.32-754.53.1.el6.x86_64.rpm
python-perf-2.6.32-754.53.1.el6.x86_64.rpm



Related CVEs:

CVE-2023-3611
CVE-2023-3776
CVE-2023-4921
CVE-2023-31436




Description of changes:

[2.6.32-754.53.1.el6.OL6]
- net/sched: sch_qfq: refactor parsing of netlink parameters [Orabug: 36517546]
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue {CVE-2023-3611} [Orabug: 36517546]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776} [Orabug: 36517546]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921} [Orabug: 36517546]
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg {CVE-2023-31436} [Orabug: 36517546]


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata