The following updates has been released for Oracle Linux:

ELSA-2018-4040 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
ELSA-2018-4040 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELSA-2018-4041 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update
ELSA-2018-4041 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

ELSA-2018-4040 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4040

http://linux.oracle.com/errata/ELSA-2018-4040.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.20.3.el6uek.noarch.rpm
kernel-uek-doc-3.8.13-118.20.3.el6uek.noarch.rpm
kernel-uek-3.8.13-118.20.3.el6uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.20.3.el6uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.20.3.el6uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.20.3.el6uek.x86_64.rpm
dtrace-modules-3.8.13-118.20.3.el6uek-0.4.5-3.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-3.8.13-118.20.3.el6uek.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/dtrace-modules-3.8.13-118.20.3.el6uek-0.4.5-3.el6.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.20.3.el6uek]
- gre: fix a possible skb leak (Eric Dumazet) [Orabug: 26403972]
{CVE-2017-9074}
- ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller) [Orabug:
26403972] {CVE-2017-9074}
- ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben
Hutchings) [Orabug: 26403972] {CVE-2017-9074}
- ipv6: Check ip6_find_1stfragopt() return value properly. (David S.
Miller) [Orabug: 26403972] {CVE-2017-9074}
- ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)
[Orabug: 26403972] {CVE-2017-9074}
- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)
[Orabug: 26813390] {CVE-2017-14106}
- rxrpc: Fix several cases where a padded len isn't checked in ticket
decode (David Howells) [Orabug: 26880517] {CVE-2017-7482} {CVE-2017-7482}
- xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables
mapping (Zhenzhong Duan) [Orabug: 26883322]
- KVM: x86: fix deadlock in clock-in-progress request handling (Marcelo
Tosatti) [Orabug: 27065995]
- ocfs2: fstrim: Fix start offset of first cluster group during fstrim
(Ashish Samant) [Orabug: 27099835]
- USB: serial: console: fix use-after-free after failed setup (Johan
Hovold) [Orabug: 27206837] {CVE-2017-16525}
- uwb: properly check kthread_run return value (Andrey Konovalov)
[Orabug: 27206897] {CVE-2017-16526}
- ALSA: usb-audio: Check out-of-bounds access by corrupted buffer
descriptor (Takashi Iwai) [Orabug: 27206928] {CVE-2017-16529}
- USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)
[Orabug: 27207240] {CVE-2017-16531}
- USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
(Alan Stern) [Orabug: 27207983] {CVE-2017-16535}
- dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)
[Orabug: 27290301] {CVE-2017-8824}

ELSA-2018-4040 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4040

http://linux.oracle.com/errata/ELSA-2018-4040.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.20.3.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-118.20.3.el7uek.noarch.rpm
kernel-uek-3.8.13-118.20.3.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.20.3.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.20.3.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.20.3.el7uek.x86_64.rpm
dtrace-modules-3.8.13-118.20.3.el7uek-0.4.5-3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-118.20.3.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-118.20.3.el7uek-0.4.5-3.el7.src.rpm



Description of changes:

kernel-uek
[3.8.13-118.20.3.el7uek]
- gre: fix a possible skb leak (Eric Dumazet) [Orabug: 26403972]
{CVE-2017-9074}
- ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller) [Orabug:
26403972] {CVE-2017-9074}
- ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben
Hutchings) [Orabug: 26403972] {CVE-2017-9074}
- ipv6: Check ip6_find_1stfragopt() return value properly. (David S.
Miller) [Orabug: 26403972] {CVE-2017-9074}
- ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)
[Orabug: 26403972] {CVE-2017-9074}
- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)
[Orabug: 26813390] {CVE-2017-14106}
- rxrpc: Fix several cases where a padded len isn't checked in ticket
decode (David Howells) [Orabug: 26880517] {CVE-2017-7482} {CVE-2017-7482}
- xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables
mapping (Zhenzhong Duan) [Orabug: 26883322]
- KVM: x86: fix deadlock in clock-in-progress request handling (Marcelo
Tosatti) [Orabug: 27065995]
- ocfs2: fstrim: Fix start offset of first cluster group during fstrim
(Ashish Samant) [Orabug: 27099835]
- USB: serial: console: fix use-after-free after failed setup (Johan
Hovold) [Orabug: 27206837] {CVE-2017-16525}
- uwb: properly check kthread_run return value (Andrey Konovalov)
[Orabug: 27206897] {CVE-2017-16526}
- ALSA: usb-audio: Check out-of-bounds access by corrupted buffer
descriptor (Takashi Iwai) [Orabug: 27206928] {CVE-2017-16529}
- USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)
[Orabug: 27207240] {CVE-2017-16531}
- USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
(Alan Stern) [Orabug: 27207983] {CVE-2017-16535}
- dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)
[Orabug: 27290301] {CVE-2017-8824}

ELSA-2018-4041 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4041

http://linux.oracle.com/errata/ELSA-2018-4041.html

The following updated rpms for Oracle Linux 5 Extended Lifecycle Support
(ELS) have been uploaded to the Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.298.3.el5uek.i686.rpm
kernel-uek-debug-2.6.39-400.298.3.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.298.3.el5uek.i686.rpm
kernel-uek-devel-2.6.39-400.298.3.el5uek.i686.rpm
kernel-uek-doc-2.6.39-400.298.3.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.298.3.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.298.3.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-400.298.3.el5uek.noarch.rpm
kernel-uek-2.6.39-400.298.3.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.298.3.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.298.3.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.298.3.el5uek.x86_64.rpm



Description of changes:

[2.6.39-400.298.3.el5uek]
- ext4: limit group search loop for non-extent files (Lachlan McIlroy)
[Orabug: 17488415]
- ext4: fixup 64-bit divides in 3.0-stable backport of upstream fix
(Todd Poynor) [Orabug: 17488415]
- ext4: use atomic64_t for the per-flexbg free_clusters count (Theodore
Ts'o) [Orabug: 17488415]
- ext4: init pagevec in ext4_da_block_invalidatepages (Eric Sandeen)
[Orabug: 17488415]
- ext4: do not try to write superblock on ro remount w/o journal
(Michael Tokarev) [Orabug: 17488415]
- xen-netback: fix grant_copy_op array size (Niranjan Patil) [Orabug:
25653941]
- xen-netback: explicitly check max_slots_needed against meta_prod
counter (Niranjan Patil) [Orabug: 25653941]
- xen-netback: Fix handling of skbs requiring too many slots (Zoltan
Kiss) [Orabug: 25653941]
- xen-netback: worse-case estimate in xenvif_rx_action is
underestimating (Paul Durrant) [Orabug: 25653941]
- xen-netback: Add worse-case estimates of max_slots_needed in
netbk_rx_action (Niranjan Patil) [Orabug: 25653941]
- KEYS: Remove key_type::match in favour of overriding default by
match_preparse (Tim Tianyang Chen) [Orabug: 25757946] {CVE-2017-6951}
- xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables
mapping (Zhenzhong Duan) [Orabug: 26737475]
- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)
[Orabug: 26813391] {CVE-2017-14106}
- rxrpc: Fix several cases where a padded len isn't checked in ticket
decode (David Howells) [Orabug: 26880520] {CVE-2017-7482} {CVE-2017-7482}
- ocfs2: fstrim: Fix start offset of first cluster group during fstrim
(Ashish Samant) [Orabug: 27099836]
- Check validity of cl_rpcclient in nfs_server_list_show (Malahal
Naineni) [Orabug: 27112186]
- USB: serial: console: fix use-after-free after failed setup (Johan
Hovold) [Orabug: 27206839] {CVE-2017-16525}
- ALSA: usb-audio: Check out-of-bounds access by corrupted buffer
descriptor (Takashi Iwai) [Orabug: 27206934] {CVE-2017-16529}
- USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)
[Orabug: 27207243] {CVE-2017-16531}
- dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)
[Orabug: 27290308] {CVE-2017-8824}

ELSA-2018-4041 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4041

http://linux.oracle.com/errata/ELSA-2018-4041.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.298.3.el6uek.i686.rpm
kernel-uek-debug-2.6.39-400.298.3.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.298.3.el6uek.i686.rpm
kernel-uek-devel-2.6.39-400.298.3.el6uek.i686.rpm
kernel-uek-doc-2.6.39-400.298.3.el6uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.298.3.el6uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.298.3.el6uek.noarch.rpm
kernel-uek-doc-2.6.39-400.298.3.el6uek.noarch.rpm
kernel-uek-2.6.39-400.298.3.el6uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.298.3.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.298.3.el6uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.298.3.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.39-400.298.3.el6uek.src.rpm



Description of changes:

[2.6.39-400.298.3.el6uek]
- ext4: limit group search loop for non-extent files (Lachlan McIlroy)
[Orabug: 17488415]
- ext4: fixup 64-bit divides in 3.0-stable backport of upstream fix
(Todd Poynor) [Orabug: 17488415]
- ext4: use atomic64_t for the per-flexbg free_clusters count (Theodore
Ts'o) [Orabug: 17488415]
- ext4: init pagevec in ext4_da_block_invalidatepages (Eric Sandeen)
[Orabug: 17488415]
- ext4: do not try to write superblock on ro remount w/o journal
(Michael Tokarev) [Orabug: 17488415]
- xen-netback: fix grant_copy_op array size (Niranjan Patil) [Orabug:
25653941]
- xen-netback: explicitly check max_slots_needed against meta_prod
counter (Niranjan Patil) [Orabug: 25653941]
- xen-netback: Fix handling of skbs requiring too many slots (Zoltan
Kiss) [Orabug: 25653941]
- xen-netback: worse-case estimate in xenvif_rx_action is
underestimating (Paul Durrant) [Orabug: 25653941]
- xen-netback: Add worse-case estimates of max_slots_needed in
netbk_rx_action (Niranjan Patil) [Orabug: 25653941]
- KEYS: Remove key_type::match in favour of overriding default by
match_preparse (Tim Tianyang Chen) [Orabug: 25757946] {CVE-2017-6951}
- xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables
mapping (Zhenzhong Duan) [Orabug: 26737475]
- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)
[Orabug: 26813391] {CVE-2017-14106}
- rxrpc: Fix several cases where a padded len isn't checked in ticket
decode (David Howells) [Orabug: 26880520] {CVE-2017-7482} {CVE-2017-7482}
- ocfs2: fstrim: Fix start offset of first cluster group during fstrim
(Ashish Samant) [Orabug: 27099836]
- Check validity of cl_rpcclient in nfs_server_list_show (Malahal
Naineni) [Orabug: 27112186]
- USB: serial: console: fix use-after-free after failed setup (Johan
Hovold) [Orabug: 27206839] {CVE-2017-16525}
- ALSA: usb-audio: Check out-of-bounds access by corrupted buffer
descriptor (Takashi Iwai) [Orabug: 27206934] {CVE-2017-16529}
- USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)
[Orabug: 27207243] {CVE-2017-16531}
- dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)
[Orabug: 27290308] {CVE-2017-8824}