[El-errata] New Ksplice updates for UEKR5 4.14.35 on OL7 (ELSA-2020-5528)
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Fri Jan 31 01:05:39 PST 2020
Synopsis: ELSA-2020-5528 can now be patched using Ksplice
Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2020-5528.
More information about this errata can be found at
INSTALLING THE UPDATES
We recommend that all users of Ksplice Uptrack running UEKR5 4.14.35
on OL7 install these updates.
On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.
Alternatively, you can install these updates by running:
# /usr/sbin/uptrack-upgrade -y
* CVE-2019-19332: Denial-of-service in KVM cpuid emulation reporting.
A failure to correctly validate a request for KVM cpuid emulation
information a can lead to an out-of-bounds memory access, leading to a
kernel crash. A local user with the ability to use KVM could use this
flaw to cause a denial-of-service.
* Network stall during RDMA failover.
A logic error when performing failover for an RDMA connection could
result in lengthly networking stalls under specific conditions.
* Memory leak in Mellanox ConnextX HCA Infiniband CX-3 virtual functions.
Missing resource deallocation for Mellanox ConnectX HCA CX-3 virtual
function handling could result in a memory leak and eventual resource
Orabug: 30815818, 30815811
Ksplice support is available at ksplice-support_ww at oracle.com.
More information about the El-errata