[El-errata] New Ksplice updates for UEKR4 4.1.12 on OL6 and OL7 (ELSA-2018-4244)

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue Oct 16 06:03:38 PDT 2018


Synopsis: ELSA-2018-4244 can now be patched using Ksplice
CVEs: CVE-2018-17182

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2018-4244.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running UEKR4 4.1.12 on
OL6 and OL7 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* NULL pointer dereference during RDS reconnection.

A fragment size mismatch during an RDS reconnection can result in a NULL
pointer dereference, leading to a kernel crash.

Orabug: 28506569


* CVE-2018-17182: Privilege escalation in VMA cache flushing.

A failure to correctly invalidate the VMA cache when an integer overflow
occurs can result in a use-after-free. An unprivileged local user could
use this flaw to escalate privileges.

Orabug: 28701016


* Respect Receive Packet Steering settings on VLAN interfaces.

Allow RPS to be used on VLAN interfaces rather than using the RPS
settings of the underlying interface.

Orabug: 28645929

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.






More information about the El-errata mailing list