[El-errata] New Ksplice updates for UEKR4 4.1.12 on OL6 and OL7 (ELSA-2018-4244)
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Oct 16 06:03:38 PDT 2018
Synopsis: ELSA-2018-4244 can now be patched using Ksplice
CVEs: CVE-2018-17182
Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2018-4244.
INSTALLING THE UPDATES
We recommend that all users of Ksplice Uptrack running UEKR4 4.1.12 on
OL6 and OL7 install these updates.
On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.
Alternatively, you can install these updates by running:
# /usr/sbin/uptrack-upgrade -y
DESCRIPTION
* NULL pointer dereference during RDS reconnection.
A fragment size mismatch during an RDS reconnection can result in a NULL
pointer dereference, leading to a kernel crash.
Orabug: 28506569
* CVE-2018-17182: Privilege escalation in VMA cache flushing.
A failure to correctly invalidate the VMA cache when an integer overflow
occurs can result in a use-after-free. An unprivileged local user could
use this flaw to escalate privileges.
Orabug: 28701016
* Respect Receive Packet Steering settings on VLAN interfaces.
Allow RPS to be used on VLAN interfaces rather than using the RPS
settings of the underlying interface.
Orabug: 28645929
SUPPORT
Ksplice support is available at ksplice-support_ww at oracle.com.
More information about the El-errata
mailing list