From oraclevm-errata at oss.oracle.com Fri Apr 5 08:46:50 2024 From: oraclevm-errata at oss.oracle.com (Errata Announcements for Oracle VM) Date: Fri, 05 Apr 2024 01:46:50 -0700 Subject: [Oraclevm-errata] OVMSA-2024-0004 Important: Oracle VM 3 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update Message-ID: Oracle VM Security Advisory OVMSA-2024-0004 The following updated rpms for Oracle VM 3 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-4.1.12-124.84.2.el6uek.x86_64.rpm kernel-uek-firmware-4.1.12-124.84.2.el6uek.noarch.rpm Related CVEs: CVE-2024-1086 CVE-2023-45863 CVE-2023-39194 Description of changes: [4.1.12-124.84.2.el6uek] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251327] {CVE-2024-1086} [4.1.12-124.84.1.el6uek] - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga) [Orabug: 36334311] - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [Orabug: 35924076] {CVE-2023-45863} - kobject: Replace strncpy with memcpy (Guenter Roeck) [Orabug: 35924076] - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [Orabug: 35923517] {CVE-2023-39194} - net/xfrm: use kmemdup rather than duplicating its implementation (Andrzej Hajda) [Orabug: 35923517]