[El-errata] ELSA-2018-4145 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2018-4145

http://linux.oracle.com/errata/ELSA-2018-4145.html

The following updated rpms for Oracle Linux 5 Extended Lifecycle Support 
(ELS) have been uploaded to the Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-debug-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-devel-2.6.39-400.299.3.el5uek.i686.rpm
kernel-uek-doc-2.6.39-400.299.3.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.299.3.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.299.3.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-400.299.3.el5uek.noarch.rpm
kernel-uek-2.6.39-400.299.3.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.299.3.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.299.3.el5uek.x86_64.rpm




Description of changes:

[2.6.39-400.299.3.el5uek]
- x86/fpu: Make eager FPU default (Mihai Carabas)  [Orabug: 28156175] 
{CVE-2018-3665}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi 
Iwai)  [Orabug: 22876528]  {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov) 
[Orabug: 22876528]  {CVE-2016-2384}
- mlx4_ib: DREQ silently dropped by PF passive side (Venkat Venkatsubra) 
  [Orabug: 25090540] - net: tcpdump fails with EFAULT (Venkat 
Venkatsubra)  [Orabug: 25209691] - x86/spec: Remove 
rescan_spec_ctrl_feature as it's not needed anymore (Krish Sadhukhan) 
[Orabug: 27934121]

[2.6.39-400.299.2.el5uek]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus 
Torvalds)  [Orabug: 27947612]  {CVE-2018-1000199}
- Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" 
(Brian Maly)  [Orabug: 27947612]