Kernel Security Updates for Oracle Linux and Oracle VM

Oracle Linux 6262 Published by

The following kernel updates has been released for Oracle Linux and Oracle VM:

ELBA-2018-1852-1 N/A: Oracle Linux 7 kernel bug fix update
ELSA-2018-4134 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
ELSA-2018-4134 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELSA-2018-4144 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
ELSA-2018-4144 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELSA-2018-4145 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update
ELSA-2018-4145 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
OVMSA-2018-0230 Important: Oracle VM 3.4 Unbreakable Enterprise kernel security update
OVMSA-2018-0231 Important: Oracle VM 3.3 Unbreakable Enterprise kernel security update



ELBA-2018-1852-1 N/A: Oracle Linux 7 kernel bug fix update

Oracle Linux Bug Fix Advisory ELBA-2018-1852-1

http://linux.oracle.com/errata/ELBA-2018-1852-1.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-3.10.0-862.3.3.0.1.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-862.3.3.0.1.el7.noarch.rpm
kernel-debug-3.10.0-862.3.3.0.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-862.3.3.0.1.el7.x86_64.rpm
kernel-devel-3.10.0-862.3.3.0.1.el7.x86_64.rpm
kernel-doc-3.10.0-862.3.3.0.1.el7.noarch.rpm
kernel-headers-3.10.0-862.3.3.0.1.el7.x86_64.rpm
kernel-tools-3.10.0-862.3.3.0.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-862.3.3.0.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-862.3.3.0.1.el7.x86_64.rpm
perf-3.10.0-862.3.3.0.1.el7.x86_64.rpm
python-perf-3.10.0-862.3.3.0.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-862.3.3.0.1.el7.src.rpm



Description of changes:

[3.10.0-862.3.3.0.1.el7.OL7]
- [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug
22552377]

ELSA-2018-4134 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4134

http://linux.oracle.com/errata/ELSA-2018-4134.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.21.4.el6uek.noarch.rpm
kernel-uek-doc-3.8.13-118.21.4.el6uek.noarch.rpm
kernel-uek-3.8.13-118.21.4.el6uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.21.4.el6uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.21.4.el6uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.21.4.el6uek.x86_64.rpm
dtrace-modules-3.8.13-118.21.4.el6uek-0.4.5-3.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-3.8.13-118.21.4.el6uek.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/dtrace-modules-3.8.13-118.21.4.el6uek-0.4.5-3.el6.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.21.4.el6uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156176]
{CVE-2018-3665}

[3.8.13-118.21.3.el6uek]
- KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li) [Orabug:
27951287] {CVE-2017-17741} {CVE-2017-17741}
- xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric
Sandeen) [Orabug: 27989498] {CVE-2018-10323}
- Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)
[Orabug: 28030520] {CVE-2017-1000410} {CVE-2017-1000410}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi
Iwai) [Orabug: 28058229] {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)
[Orabug: 28058229] {CVE-2016-2384}

[3.8.13-118.21.2.el6uek]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus
Torvalds) [Orabug: 27947608] {CVE-2018-1000199}
- Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation"
(Brian Maly) [Orabug: 27947608]

ELSA-2018-4134 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4134

http://linux.oracle.com/errata/ELSA-2018-4134.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.21.4.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-118.21.4.el7uek.noarch.rpm
kernel-uek-3.8.13-118.21.4.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.21.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.21.4.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.21.4.el7uek.x86_64.rpm
dtrace-modules-3.8.13-118.21.4.el7uek-0.4.5-3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-118.21.4.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-118.21.4.el7uek-0.4.5-3.el7.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.21.4.el7uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156176]
{CVE-2018-3665}

[3.8.13-118.21.3.el7uek]
- KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li) [Orabug:
27951287] {CVE-2017-17741} {CVE-2017-17741}
- xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric
Sandeen) [Orabug: 27989498] {CVE-2018-10323}
- Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)
[Orabug: 28030520] {CVE-2017-1000410} {CVE-2017-1000410}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi
Iwai) [Orabug: 28058229] {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)
[Orabug: 28058229] {CVE-2016-2384}

[3.8.13-118.21.2.el7uek]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus
Torvalds) [Orabug: 27947608] {CVE-2018-1000199}
- Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation"
(Brian Maly) [Orabug: 27947608]

ELSA-2018-4144 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4144

http://linux.oracle.com/errata/ELSA-2018-4144.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.16.4.el6uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.16.4.el6uek.noarch.rpm
kernel-uek-4.1.12-124.16.4.el6uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.16.4.el6uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.16.4.el6uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.16.4.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-4.1.12-124.16.4.el6uek.src.rpm



Description of changes:

[4.1.12-124.16.4.el6uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28135099]
{CVE-2018-3665}

ELSA-2018-4144 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4144

http://linux.oracle.com/errata/ELSA-2018-4144.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.16.4.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.16.4.el7uek.noarch.rpm
kernel-uek-4.1.12-124.16.4.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.16.4.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.16.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.16.4.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.16.4.el7uek.src.rpm



Description of changes:

[4.1.12-124.16.4.el7uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28135099]
{CVE-2018-3665}

ELSA-2018-4145 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4145

http://linux.oracle.com/errata/ELSA-2018-4145.html

The following updated rpms for Oracle Linux 5 Extended Lifecycle Support
(ELS) have been uploaded to the Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-debug-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-devel-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-doc-2.6.39-400.299.3.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.299.3.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.299.3.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-400.299.3.el5uek.noarch.rpm
kernel-uek-2.6.39-400.299.3.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.299.3.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.299.3.el5uek.x86_64.rpm




Description of changes:

[2.6.39-400.299.3.el5uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156175]
{CVE-2018-3665}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi
Iwai) [Orabug: 22876528] {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)
[Orabug: 22876528] {CVE-2016-2384}
- mlx4_ib: DREQ silently dropped by PF passive side (Venkat Venkatsubra)
[Orabug: 25090540] - net: tcpdump fails with EFAULT (Venkat
Venkatsubra) [Orabug: 25209691] - x86/spec: Remove
rescan_spec_ctrl_feature as it's not needed anymore (Krish Sadhukhan)
[Orabug: 27934121]

[2.6.39-400.299.2.el5uek]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus
Torvalds) [Orabug: 27947612] {CVE-2018-1000199}
- Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation"
(Brian Maly) [Orabug: 27947612]

ELSA-2018-4145 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4145

http://linux.oracle.com/errata/ELSA-2018-4145.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-debug-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-devel-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-doc-2.6.39-400.299.3.el6uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.299.3.el6uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.299.3.el6uek.noarch.rpm
kernel-uek-doc-2.6.39-400.299.3.el6uek.noarch.rpm
kernel-uek-2.6.39-400.299.3.el6uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.299.3.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el6uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.299.3.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.39-400.299.3.el6uek.src.rpm



Description of changes:

[2.6.39-400.299.3.el6uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156175]
{CVE-2018-3665}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi
Iwai) [Orabug: 22876528] {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai) [Orabug:
22876528] {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)
[Orabug: 22876528] {CVE-2016-2384}
- mlx4_ib: DREQ silently dropped by PF passive side (Venkat Venkatsubra)
[Orabug: 25090540] - net: tcpdump fails with EFAULT (Venkat
Venkatsubra) [Orabug: 25209691] - x86/spec: Remove
rescan_spec_ctrl_feature as it's not needed anymore (Krish Sadhukhan)
[Orabug: 27934121]

[2.6.39-400.299.2.el6uek]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus
Torvalds) [Orabug: 27947612] {CVE-2018-1000199}
- Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation"
(Brian Maly) [Orabug: 27947612]

OVMSA-2018-0230 Important: Oracle VM 3.4 Unbreakable Enterprise kernel security update

Oracle VM Security Advisory OVMSA-2018-0230

The following updated rpms for Oracle VM 3.4 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-4.1.12-124.16.4.el6uek.x86_64.rpm
kernel-uek-firmware-4.1.12-124.16.4.el6uek.noarch.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.4/SRPMS-updates/kernel-uek-4.1.12-124.16.4.el6uek.src.rpm



Description of changes:

[4.1.12-124.16.4.el6uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28135099]
{CVE-2018-3665}

OVMSA-2018-0231 Important: Oracle VM 3.3 Unbreakable Enterprise kernel security update

Oracle VM Security Advisory OVMSA-2018-0231

The following updated rpms for Oracle VM 3.3 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-3.8.13-118.21.4.el6uek.x86_64.rpm
kernel-uek-firmware-3.8.13-118.21.4.el6uek.noarch.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/kernel-uek-3.8.13-118.21.4.el6uek.src.rpm



Description of changes:

[3.8.13-118.21.4.el6uek]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156176]
{CVE-2018-3665}

[3.8.13-118.21.3.el6uek]
- KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li) [Orabug:
27951287] {CVE-2017-17741} {CVE-2017-17741}
- xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric
Sandeen) [Orabug: 27989498] {CVE-2018-10323}
- Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)
[Orabug: 28030520] {CVE-2017-1000410} {CVE-2017-1000410}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi
Iwai) [Orabug: 28058229] {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai) [Orabug:
28058229] {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)
[Orabug: 28058229] {CVE-2016-2384}

[3.8.13-118.21.2.el6uek]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus
Torvalds) [Orabug: 27947608] {CVE-2018-1000199}
- Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation"
(Brian Maly) [Orabug: 27947608]


OpenCV Update for openSUSE

Enigmail, PostgreSQL96, and Java 1.7.0 OpenJDK Updates for openSUSE

Windows

Linux

macOS

Community

  • dhamu
    Hello Phil, I have a Linux Tutorial website that curre ...
  • StephanX
    Hi friends, i am new in the Linux universe but i try to ...
  • Philipp
    I would try the XanMod kernel: https://xanmod.org  I ...