Oracle alert ELSA-2019-4256 (kernel)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2019-4256 Important: Oracle Linux 6 kernel security and bug fix update | |
| Date: | Wed, 18 Dec 2019 08:44:13 -0800 | |
| Message-ID: | <d66c1e21-4e0b-4624-d2fb-79419fd82a49@oracle.com> |
Oracle Linux Security Advisory ELSA-2019-4256 http://linux.oracle.com/errata/ELSA-2019-4256.html The following updated rpms for Oracle Linux 6 have been uploaded to the Unbreakable Linux Network: i386: kernel-2.6.32-754.25.1.el6.i686.rpm kernel-abi-whitelists-2.6.32-754.25.1.el6.noarch.rpm kernel-debug-2.6.32-754.25.1.el6.i686.rpm kernel-debug-devel-2.6.32-754.25.1.el6.i686.rpm kernel-devel-2.6.32-754.25.1.el6.i686.rpm kernel-doc-2.6.32-754.25.1.el6.noarch.rpm kernel-firmware-2.6.32-754.25.1.el6.noarch.rpm kernel-headers-2.6.32-754.25.1.el6.i686.rpm perf-2.6.32-754.25.1.el6.i686.rpm python-perf-2.6.32-754.25.1.el6.i686.rpm x86_64: kernel-2.6.32-754.25.1.el6.x86_64.rpm kernel-abi-whitelists-2.6.32-754.25.1.el6.noarch.rpm kernel-debug-2.6.32-754.25.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.25.1.el6.i686.rpm kernel-debug-devel-2.6.32-754.25.1.el6.x86_64.rpm kernel-devel-2.6.32-754.25.1.el6.x86_64.rpm kernel-doc-2.6.32-754.25.1.el6.noarch.rpm kernel-firmware-2.6.32-754.25.1.el6.noarch.rpm kernel-headers-2.6.32-754.25.1.el6.x86_64.rpm perf-2.6.32-754.25.1.el6.x86_64.rpm python-perf-2.6.32-754.25.1.el6.x86_64.rpm SRPMS: http://oss.oracle.com/ol6/SRPMS-updates/kernel-2.6.32-754... Description of changes: [2.6.32-754.25.1.el6.OL6] - Update genkey [Orabug: 25599697] [2.6.32-754.25.1.el6] - [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760] - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821} - [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821} - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512] - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512] - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512] - [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371] - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207} - [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207} - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207} - [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135} - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135} - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135} - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135} - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135} - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135} - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155} - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154} - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154} - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155} - [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155} _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata