Oracle Linux 6266 Published by

The following updates has been released for Oracle Linux:

ELBA-2018-1318-1 Oracle Linux 7 kernel bug fix update
ELBA-2018-1361 Oracle Linux 6 ibus bug fix update
ELBA-2018-1362 Oracle Linux 6 vte bug fix update
ELBA-2018-1363 Oracle Linux 6 gcc-libraries bug fix update
ELSA-2018-1318 Important: Oracle Linux 7 kernel security, bug fix, and enhancement update
ELSA-2018-1364 Important: Oracle Linux 6 389-ds-base security update



ELBA-2018-1318-1 Oracle Linux 7 kernel bug fix update

Oracle Linux Bug Fix Advisory ELBA-2018-1318-1

http://linux.oracle.com/errata/ELBA-2018-1318-1.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-3.10.0-862.2.3.0.1.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-862.2.3.0.1.el7.noarch.rpm
kernel-debug-3.10.0-862.2.3.0.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-862.2.3.0.1.el7.x86_64.rpm
kernel-devel-3.10.0-862.2.3.0.1.el7.x86_64.rpm
kernel-doc-3.10.0-862.2.3.0.1.el7.noarch.rpm
kernel-headers-3.10.0-862.2.3.0.1.el7.x86_64.rpm
kernel-tools-3.10.0-862.2.3.0.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-862.2.3.0.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-862.2.3.0.1.el7.x86_64.rpm
perf-3.10.0-862.2.3.0.1.el7.x86_64.rpm
python-perf-3.10.0-862.2.3.0.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-862.2.3.0.1.el7.src.rpm



Description of changes:

[3.10.0-862.2.3.0.1.el7.OL7]
- [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug
22552377]

ELBA-2018-1361 Oracle Linux 6 ibus bug fix update

Oracle Linux Bug Fix Advisory ELBA-2018-1361

http://linux.oracle.com/errata/ELBA-2018-1361.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
ibus-1.3.4-9.1.el6_9.i686.rpm
ibus-devel-1.3.4-9.1.el6_9.i686.rpm
ibus-devel-docs-1.3.4-9.1.el6_9.i686.rpm
ibus-gtk-1.3.4-9.1.el6_9.i686.rpm
ibus-libs-1.3.4-9.1.el6_9.i686.rpm

x86_64:
ibus-1.3.4-9.1.el6_9.x86_64.rpm
ibus-devel-1.3.4-9.1.el6_9.i686.rpm
ibus-devel-1.3.4-9.1.el6_9.x86_64.rpm
ibus-devel-docs-1.3.4-9.1.el6_9.x86_64.rpm
ibus-gtk-1.3.4-9.1.el6_9.i686.rpm
ibus-gtk-1.3.4-9.1.el6_9.x86_64.rpm
ibus-libs-1.3.4-9.1.el6_9.i686.rpm
ibus-libs-1.3.4-9.1.el6_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/ibus-1.3.4-9.1.el6_9.src.rpm



Description of changes:

[1.3.4-9.1]
- Resolves: Bug 1549171 - Support second monitor in ZaphodHeads

[1.3.4-10]
- Resolves: Bug 1403077 - Support second monitor in ZaphodHeads
Added ibus-1403077-zaphodheads-x11.patch to get x11 screen number
Added ibus-1403077-zaphodheads.patch

ELBA-2018-1362 Oracle Linux 6 vte bug fix update

Oracle Linux Bug Fix Advisory ELBA-2018-1362

http://linux.oracle.com/errata/ELBA-2018-1362.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
vte-0.25.1-10.el6_9.i686.rpm
vte-devel-0.25.1-10.el6_9.i686.rpm

x86_64:
vte-0.25.1-10.el6_9.i686.rpm
vte-0.25.1-10.el6_9.x86_64.rpm
vte-devel-0.25.1-10.el6_9.i686.rpm
vte-devel-0.25.1-10.el6_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/vte-0.25.1-10.el6_9.src.rpm



Description of changes:

[0.25.1-10]
- Obscured VteTerminals may become non-responsive until clicked on
(#1546615).

ELBA-2018-1363 Oracle Linux 6 gcc-libraries bug fix update

Oracle Linux Bug Fix Advisory ELBA-2018-1363

http://linux.oracle.com/errata/ELBA-2018-1363.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
libatomic-7.1.1-2.4.1.el6_9.i686.rpm
libcilkrts-7.1.1-2.4.1.el6_9.i686.rpm
libgfortran4-7.1.1-2.4.1.el6_9.i686.rpm
libitm-7.1.1-2.4.1.el6_9.i686.rpm
libquadmath-7.1.1-2.4.1.el6_9.i686.rpm

x86_64:
libatomic-7.1.1-2.4.1.el6_9.i686.rpm
libatomic-7.1.1-2.4.1.el6_9.x86_64.rpm
libcilkrts-7.1.1-2.4.1.el6_9.i686.rpm
libcilkrts-7.1.1-2.4.1.el6_9.x86_64.rpm
libgfortran4-7.1.1-2.4.1.el6_9.x86_64.rpm
libitm-7.1.1-2.4.1.el6_9.i686.rpm
libitm-7.1.1-2.4.1.el6_9.x86_64.rpm
libquadmath-7.1.1-2.4.1.el6_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/gcc-libraries-7.1.1-2.4.1.el6_9.src.rpm



Description of changes:

[7.1.1-2.4.1]
- Add support for DEC formatting extensions (#1563082)

[7.1.1-2.3.1]
- ship libquadmath on RHEL6

[7.1.1-2.2.1]
- don't run make check with -fstack-protector on ppc64le

[7.1.1-2.1.1]
- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 >= 7.1.1-2)

[7.1.1-1.2.1]
- remove libquadmath.so.* so that it doesn't end up in debuginfo

[7.1.1-1.1.1]
- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27

[7.0.1-4.2.1]
- also build on ppc64le

[7.0.1-4.1.1]
- also build on aarch64
- drop libitm
- only enable libatomic for aarch64

[7.0.1-3.1.1]
- drop libquadmath and rename libgfortran to libgfortran2

[7.0.1-2.1.1]
- also include the libquadmath subpackage

[7.0.1-1.1.1]
- update from Fedora 7.0.1-0.12.fc26 (#1412815)
- add the libgfortran subpackage

[6.2.1-1.1.1]
- update from DTS 6.2.1 (#1265255)

[5.3.1-1.1.1]
- update from DTS 5.3.1 (#1265255)
- run the whole testsuite (because of Cilk+)

[5.2.1-2.1.1]
- update from DTS 5.2.1-2 (#1265253)
- drop libmpx (#1275357)

[5.0.0-1.1.1]
- update from Fedora gcc-5.0.0-0.21.fc22
- add libmpx subpackage on x86

[4.9.0-6.1.1]
- make sure libcilkrts can use system libgcc_s.so.1 (#1101277)
- update from DTS gcc-4.9.0-6

[4.9.0-5.2.1]
- prevent bogus RPATHs

[4.9.0-5.1.1]
- update from DTS gcc-4.9.0-5
- add libcilkrts

[4.8.2-12.1.1]
- update from DTS gcc-4.8.2-12

[4.8.1-4.2.1]
- always build HTM bits in libitm (#996683, #996682)

[4.8.1-4.1.1]
- update from DTS gcc-4.8.1-4

[4.8.0-5.1.1]
- update from DTS gcc-4.8.0-5
- build libitm even for s390{,x}

[4.8.0-3.1.1]
- new package

ELSA-2018-1318 Important: Oracle Linux 7 kernel security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2018-1318

http://linux.oracle.com/errata/ELSA-2018-1318.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-3.10.0-862.2.3.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-862.2.3.el7.noarch.rpm
kernel-debug-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debug-devel-3.10.0-862.2.3.el7.x86_64.rpm
kernel-devel-3.10.0-862.2.3.el7.x86_64.rpm
kernel-doc-3.10.0-862.2.3.el7.noarch.rpm
kernel-headers-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-libs-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-862.2.3.el7.x86_64.rpm
perf-3.10.0-862.2.3.el7.x86_64.rpm
python-perf-3.10.0-862.2.3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-862.2.3.el7.src.rpm



Description of changes:

[3.10.0-862.2.3.el7.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel
(olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-862.2.3.el7]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849
1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini)
[1567084 1567083] {CVE-2018-8897}

[3.10.0-862.2.2.el7]
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation
(Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}

[3.10.0-862.2.1.el7]
- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike
Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 & 256 bit keys to AESNI RFC4106
(Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]

[3.10.0-862.1.1.el7]
- [x86] kexec/64: Clear control page after PGD init (Waiman Long)
[1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700
1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson)
[1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude
Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function
(Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump
(Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix
CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC()
(Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on
resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee
Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio
Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio
Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper
(Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing
a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava)
[1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit
Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava)
[1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun
Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun
Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun
Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support
(Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error
Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI
session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath)
[1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver
(Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899
1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit
of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath)
[1561899 1548047]
- [crypto] chelsio: make skb_put & friends return void pointers (Arjun
Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark)
[1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark)
[1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897
1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark)
[1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian
Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
(Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks
(Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks
(Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de
Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}

ELSA-2018-1364 Important: Oracle Linux 6 389-ds-base security update

Oracle Linux Security Advisory ELSA-2018-1364

http://linux.oracle.com/errata/ELSA-2018-1364.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
389-ds-base-1.2.11.15-95.el6_9.i686.rpm
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm

x86_64:
389-ds-base-1.2.11.15-95.el6_9.x86_64.rpm
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm
389-ds-base-devel-1.2.11.15-95.el6_9.x86_64.rpm
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm
389-ds-base-libs-1.2.11.15-95.el6_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/389-ds-base-1.2.11.15-95.el6_9.src.rpm



Description of changes:

[1.2.11.15-95]
- Bump version to 1.2.11-15-95
- Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd
crash via large filter value in ldapsearch