Oracle alert ELSA-2019-4855 (kernel)

From:
             
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
             
 
el-errata@oss.oracle.com 
Subject:
             
 
[El-errata] ELSA-2019-4855 Important: Oracle Linux 5 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update 
Date:
             
 
Thu, 21 Nov 2019 06:24:56 -0800
Message-ID:
             
 
<50a39426-c99c-05a4-e220-cb1c203f65e4@oracle.com>
Oracle Linux Security Advisory ELSA-2019-4855

http://linux.oracle.com/errata/ELSA-2019-4855.html

The following updated rpms for Oracle Linux 5 Extended Lifecycle Support 
(ELS) have been uploaded to the Unbreakable Linux Network:

i386:
kernel-uek-2.6.39-400.316.1.el5uek.i686.rpm
kernel-uek-debug-2.6.39-400.316.1.el5uek.i686.rpm
kernel-uek-debug-devel-2.6.39-400.316.1.el5uek.i686.rpm
kernel-uek-devel-2.6.39-400.316.1.el5uek.i686.rpm
kernel-uek-doc-2.6.39-400.316.1.el5uek.noarch.rpm
kernel-uek-firmware-2.6.39-400.316.1.el5uek.noarch.rpm

x86_64:
kernel-uek-firmware-2.6.39-400.316.1.el5uek.noarch.rpm
kernel-uek-doc-2.6.39-400.316.1.el5uek.noarch.rpm
kernel-uek-2.6.39-400.316.1.el5uek.x86_64.rpm
kernel-uek-devel-2.6.39-400.316.1.el5uek.x86_64.rpm
kernel-uek-debug-devel-2.6.39-400.316.1.el5uek.x86_64.rpm
kernel-uek-debug-2.6.39-400.316.1.el5uek.x86_64.rpm



Description of changes:

[2.6.39-400.316.1.el5uek]
- ipv4: ipmr: various fixes and cleanups (Eric Dumazet) [Orabug: 
30183226] {CVE-2017-18509}
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes 
Reinecke) [Orabug: 30393903] {CVE-2017-14991}
- usb: misc: legousbtower: Fix NULL pointer deference (Greg 
Kroah-Hartman) [Orabug: 30412152] {CVE-2017-15102}
- floppy: fix div-by-zero in setup_format_params (Denis Efremov) 
[Orabug: 30447845] {CVE-2019-14284}
- i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA 
(Jeremy Compostella) [Orabug: 30468843] {CVE-2017-18551}
- USB: check usb_get_extra_descriptor for proper size (Mathias Payer) 
[Orabug: 30057430] {CVE-2018-20169}
- x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko) 
[Orabug: 30419231] {CVE-2019-11135}
- x86/speculation/taa: Add documentation for TSX Async Abort (Pawan 
Gupta) [Orabug: 30419231] {CVE-2019-11135}
- x86/tsx: Add "auto" option to TSX cmdline parameter (Pawan Gupta) 
[Orabug: 30419231] {CVE-2019-11135}
- x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan 
Gupta) [Orabug: 30419231] {CVE-2019-11135}
- x86/speculation/taa: Add mitigation for TSX Async Abort (Pawan Gupta) 
[Orabug: 30419231] {CVE-2019-11135}
- x86/tsx: Add TSX cmdline option with TSX disabled by default (Pawan 
Gupta) [Orabug: 30419231] {CVE-2019-11135}
- x86: Add helper function x86_read_arch_cap_msr() (Pawan Gupta) 
[Orabug: 30419231] {CVE-2019-11135}
- x86/tsx: Add enumeration support for IA32_TSX_CTRL MSR (Pawan Gupta) 
[Orabug: 30419231] {CVE-2019-11135}



_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata