[El-errata] ELSA-2018-0151 Important: Oracle Linux 7 kernel security and bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2018-0151

http://linux.oracle.com/errata/ELSA-2018-0151.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-3.10.0-693.17.1.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-693.17.1.el7.noarch.rpm
kernel-debug-3.10.0-693.17.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-693.17.1.el7.x86_64.rpm
kernel-devel-3.10.0-693.17.1.el7.x86_64.rpm
kernel-doc-3.10.0-693.17.1.el7.noarch.rpm
kernel-headers-3.10.0-693.17.1.el7.x86_64.rpm
kernel-tools-3.10.0-693.17.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-693.17.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-693.17.1.el7.x86_64.rpm
perf-3.10.0-693.17.1.el7.x86_64.rpm
python-perf-3.10.0-693.17.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-693.17.1.el7.src.rpm



Description of changes:

- [3.10.0-693.17.1.el7.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel 
(olkmod_signing_key.x509)(alexey.petrenko at oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-693.17.1.el7]
- [s390] locking/barriers: remove old gmb() macro definition (Denys 
Vlasenko) [1519788 1519786]

[3.10.0-693.16.1.el7]
- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages 
calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) 
[1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 
1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) 
[1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) 
[1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 
1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] 
{CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS 
(Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea 
Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK 
fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 
1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch 
optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 
1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea 
Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all 
(Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea 
Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late 
microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) 
[1519795 1519798]