[El-errata] ELSA-2019-0717 Important: Oracle Linux 6 kernel security and bug fix update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Apr 11 08:03:13 PDT 2019


Oracle Linux Security Advisory ELSA-2019-0717

http://linux.oracle.com/errata/ELSA-2019-0717.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-2.6.32-754.12.1.el6.i686.rpm
kernel-abi-whitelists-2.6.32-754.12.1.el6.noarch.rpm
kernel-debug-2.6.32-754.12.1.el6.i686.rpm
kernel-debug-devel-2.6.32-754.12.1.el6.i686.rpm
kernel-devel-2.6.32-754.12.1.el6.i686.rpm
kernel-doc-2.6.32-754.12.1.el6.noarch.rpm
kernel-firmware-2.6.32-754.12.1.el6.noarch.rpm
kernel-headers-2.6.32-754.12.1.el6.i686.rpm
perf-2.6.32-754.12.1.el6.i686.rpm
python-perf-2.6.32-754.12.1.el6.i686.rpm

x86_64:
kernel-2.6.32-754.12.1.el6.x86_64.rpm
kernel-abi-whitelists-2.6.32-754.12.1.el6.noarch.rpm
kernel-debug-2.6.32-754.12.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-754.12.1.el6.i686.rpm
kernel-debug-devel-2.6.32-754.12.1.el6.x86_64.rpm
kernel-devel-2.6.32-754.12.1.el6.x86_64.rpm
kernel-doc-2.6.32-754.12.1.el6.noarch.rpm
kernel-firmware-2.6.32-754.12.1.el6.noarch.rpm
kernel-headers-2.6.32-754.12.1.el6.x86_64.rpm
perf-2.6.32-754.12.1.el6.x86_64.rpm
python-perf-2.6.32-754.12.1.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-2.6.32-754.12.1.el6.src.rpm



Description of changes:

[2.6.32-754.12.1.el6.OL6]
- Update genkey [bug 25599697]

[2.6.32-754.12.1.el6]
- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) 
[1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) 
[1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue 
(Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg 
(Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos 
Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) 
[1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos 
Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper 
function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper 
function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos 
Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos 
Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos 
Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper 
function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) 
[1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function 
prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup 
(Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik 
Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) 
[1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) 
[1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) 
[1625381]
- [s390] correct module section names for expoline code revert (Hendrik 
Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit 
(Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and 
ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]





More information about the El-errata mailing list