Scientific Linux: SLSA-2016:2574-2 Important Kernel Security Update

Date: Wed, 14 Dec 2016 18:16:44 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Scott Reid 
Subject: Security ERRATA Important: kernel on SL7.x x86_64
MIME-Version: 1.0
Message-ID: <20161214181644.3201.52883@slpackages.fnal.gov>

Synopsis: Important: kernel security, bug fix, and enhancement update
Advisory ID: SLSA-2016:2574-2
Issue Date: 2016-11-03
CVE Numbers: CVE-2015-8543
 CVE-2013-4312
 CVE-2016-5829
 CVE-2015-8374
 CVE-2015-8746
 CVE-2016-2053
 CVE-2016-2069
 CVE-2015-8812
 CVE-2016-2384
 CVE-2016-3070
 CVE-2016-2117
 CVE-2016-2847
 CVE-2016-3156
 CVE-2015-8845
 CVE-2015-8844
 CVE-2016-3699
 CVE-2016-4581
 CVE-2016-4569
 CVE-2016-4578
 CVE-2016-4794
 CVE-2016-5412
 CVE-2016-5828
 CVE-2016-6136
 CVE-2016-6327
 CVE-2016-6198
 CVE-2016-6480
 CVE-2016-3841
 CVE-2015-8956
--

Security Fix(es):

* It was found that the Linux kernel's IPv6 implementation mishandled
socket options. A local attacker could abuse concurrent access to the
socket options to escalate their privileges, or cause a denial of service
(use-after-free and system crash) via a crafted sendmsg system call.
(CVE-2016-3841, Important)

(CVE-2013-4312, CVE-2015-8374, CVE-2015-8543, CVE-2015-8812,
CVE-2015-8844, CVE-2015-8845, CVE-2016-2053, CVE-2016-2069, CVE-2016-2847,
CVE-2016-3156, CVE-2016-4581, CVE-2016-4794, CVE-2016-5412, CVE-2016-5828,
CVE-2016-5829, CVE-2016-6136, CVE-2016-6198, CVE-2016-6327, CVE-2016-6480,
CVE-2015-8746, CVE-2015-8956, CVE-2016-2117, CVE-2016-2384, CVE-2016-3070,
CVE-2016-3699, CVE-2016-4569, CVE-2016-4578)

Additional Changes:
--

SL7
 x86_64
 kernel-3.10.0-514.el7.x86_64.rpm
 kernel-debug-3.10.0-514.el7.x86_64.rpm
 kernel-debug-debuginfo-3.10.0-514.el7.x86_64.rpm
 kernel-debug-devel-3.10.0-514.el7.x86_64.rpm
 kernel-debuginfo-3.10.0-514.el7.x86_64.rpm
 kernel-debuginfo-common-x86_64-3.10.0-514.el7.x86_64.rpm
 kernel-devel-3.10.0-514.el7.x86_64.rpm
 kernel-headers-3.10.0-514.el7.x86_64.rpm
 kernel-tools-3.10.0-514.el7.x86_64.rpm
 kernel-tools-debuginfo-3.10.0-514.el7.x86_64.rpm
 kernel-tools-libs-3.10.0-514.el7.x86_64.rpm
 perf-3.10.0-514.el7.x86_64.rpm
 perf-debuginfo-3.10.0-514.el7.x86_64.rpm
 python-perf-3.10.0-514.el7.x86_64.rpm
 python-perf-debuginfo-3.10.0-514.el7.x86_64.rpm
 kernel-tools-libs-devel-3.10.0-514.el7.x86_64.rpm
 noarch
 kernel-abi-whitelists-3.10.0-514.el7.noarch.rpm
 kernel-doc-3.10.0-514.el7.noarch.rpm

- Scientific Linux Development Team