Oracle alert ELSA-2018-4145 (kernel)

From:
    	     
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
    	     
 
el-errata@oss.oracle.com 
Subject:
    	     
 
[El-errata] ELSA-2018-4145 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update 
Date:
    	     
 
Fri, 15 Jun 2018 19:27:19 -0700
Message-ID:
    	     
 
<2448a6d9-db26-9fb4-47a7-5e98e9adb88d@oracle.com>
Oracle Linux Security Advisory ELSA-2018-4145

http://linux.oracle.com/errata/ELSA-2018-4145.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-debug-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-devel-2.6.39-400.299.3.el6uek.i686.rpm
kernel-uek-doc-2.6.39-400.299.3.el6uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.299.3.el6uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.299.3.el6uek.noarch.rpm
kernel-uek-doc-2.6.39-400.299.3.el6uek.noarch.rpm
kernel-uek-2.6.39-400.299.3.el6uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.299.3.el6uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.299.3.el6uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.299.3.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-2.6.39...



Description of changes:

[2.6.39-400.299.3.el6uek]
- x86/fpu: Make eager FPU default (Mihai Carabas)  [Orabug: 28156175] 
{CVE-2018-3665}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi 
Iwai)  [Orabug: 22876528]  {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai)  [Orabug: 
22876528]  {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov) 
[Orabug: 22876528]  {CVE-2016-2384}
- mlx4_ib: DREQ silently dropped by PF passive side (Venkat Venkatsubra) 
  [Orabug: 25090540] - net: tcpdump fails with EFAULT (Venkat 
Venkatsubra)  [Orabug: 25209691] - x86/spec: Remove 
rescan_spec_ctrl_feature as it's not needed anymore (Krish Sadhukhan) 
[Orabug: 27934121]

[2.6.39-400.299.2.el6uek]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus 
Torvalds)  [Orabug: 27947612]  {CVE-2018-1000199}
- Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" 
(Brian Maly)  [Orabug: 27947612]


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata