Updated Linux kernel packages has been released for both Oracle Linux 6 and 7:

ELSA-2019-4669 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
ELSA-2019-4669 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

ELSA-2019-4669 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2019-4669

http://linux.oracle.com/errata/ELSA-2019-4669.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.27.2.el6uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.27.2.el6uek.noarch.rpm
kernel-uek-4.1.12-124.27.2.el6uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.27.2.el6uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.27.2.el6uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.27.2.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-4.1.12-124.27.2.el6uek.src.rpm



Description of changes:

[4.1.12-124.27.2.el6uek]
- x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju) [Orabug: 29797118]
- vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra) [Orabug: 29710939]
- vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet) [Orabug: 29710939]
- nvme: allow timed-out ios to retry (James Smart) [Orabug: 29301607]
- rds: Introduce a pool of worker threads for connection management (Håkon Bugge) [Orabug: 29391909]
- rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge) [Orabug: 29391909]
- rds: ib: Implement proper cm_id compare (Håkon Bugge) [Orabug: 29391909]
- Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge) [Orabug: 29391909]
- rds: ib: Flush ARP cache when needed (Håkon Bugge) [Orabug: 29391909]
- rds: Add simple heuristics to determine connect delay (Håkon Bugge) [Orabug: 29391909]
- rds: Fix one-sided connect (Håkon Bugge) [Orabug: 29391909]
- rds: Consolidate and align ftrace related to connection management (Håkon Bugge) [Orabug: 29391909]
- rds: ib: Fix gratuitous ARP storm (Håkon Bugge) [Orabug: 29391909]
- IB/mlx4: Increase the timeout for CM cache (Håkon Bugge) [Orabug: 29391909]
- kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez) [Orabug: 29423804]
- x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez) [Orabug: 29423804]
- x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez) [Orabug: 29423804]
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli) [Orabug: 29510356]
- bnxt_en: Reset device on RX buffer errors. (Michael Chan) [Orabug: 29651238]
- x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky) [Orabug: 29774291]
- x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju) [Orabug: 29791036] {CVE-2018-12127} {CVE-2018-12130}

ELSA-2019-4669 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2019-4669

http://linux.oracle.com/errata/ELSA-2019-4669.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.27.2.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.27.2.el7uek.noarch.rpm
kernel-uek-4.1.12-124.27.2.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.27.2.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.27.2.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.27.2.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.27.2.el7uek.src.rpm



Description of changes:

[4.1.12-124.27.2.el7uek]
- x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju) [Orabug: 29797118]
- vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra) [Orabug: 29710939]
- vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet) [Orabug: 29710939]
- nvme: allow timed-out ios to retry (James Smart) [Orabug: 29301607]
- rds: Introduce a pool of worker threads for connection management (Håkon Bugge) [Orabug: 29391909]
- rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge) [Orabug: 29391909]
- rds: ib: Implement proper cm_id compare (Håkon Bugge) [Orabug: 29391909]
- Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge) [Orabug: 29391909]
- rds: ib: Flush ARP cache when needed (Håkon Bugge) [Orabug: 29391909]
- rds: Add simple heuristics to determine connect delay (Håkon Bugge) [Orabug: 29391909]
- rds: Fix one-sided connect (Håkon Bugge) [Orabug: 29391909]
- rds: Consolidate and align ftrace related to connection management (Håkon Bugge) [Orabug: 29391909]
- rds: ib: Fix gratuitous ARP storm (Håkon Bugge) [Orabug: 29391909]
- IB/mlx4: Increase the timeout for CM cache (Håkon Bugge) [Orabug: 29391909]
- kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez) [Orabug: 29423804]
- x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez) [Orabug: 29423804]
- x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez) [Orabug: 29423804]
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli) [Orabug: 29510356]
- bnxt_en: Reset device on RX buffer errors. (Michael Chan) [Orabug: 29651238]
- x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky) [Orabug: 29774291]
- x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju) [Orabug: 29791036] {CVE-2018-12127} {CVE-2018-12130}