Red Hat Security Advisory: Red Hat Enterprise MRG Realtime 2.5 security and enhancement update
🔗 CVE IDs covered (8)
📋 Description
CVE-2014-3181 — Kernel: HID: OOB write in magicmouse driver CVE-2014-3182 — Kernel: HID: logitech-dj OOB array access CVE-2014-3184 — Kernel: HID: off by one error in various _report_fixup routines CVE-2014-3185 — Kernel: USB serial: memory corruption flaw CVE-2014-4171 — Kernel: mm/shmem: denial of service CVE-2014-5471 — kernel: isofs: unbound recursion when processing relocated directories CVE-2014-5472 — kernel: isofs: unbound recursion when processing relocated directories CVE-2014-6410 — kernel: udf: Avoid infinite loop when processing indirect ICBs
🎯 Affected products17
- Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-0:3.10.33-rt32.51.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2014:1318
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1111180
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1134099
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1141173
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1141210
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1141391
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1141400
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1141809
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1318.json