ELSA-2019-4637

ELSA-2019-4637 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-05-14

Description

[2.6.39-400.310.1]
- x86/speculation/mds: Make cpu_matches() __cpuinit (Patrick Colp) [Orabug: 29752091] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}
- x86/speculation/mds: Only worry about firmware loaded microcode (Patrick Colp) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}

[2.6.39-400.309.1]
- x86/mds: Add empty commit for CVE-2019-11091 (Patrick Colp) [Orabug: 29721938] {CVE-2019-11091}
- x86/speculation/mds: Fix comment (Boris Ostrovsky) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Allow runtime checking of CPU features (Patrick Colp) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Improve coverage for MDS vulnerability (Boris Ostrovsky) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
- x86/speculation: Consolidate CPU whitelists (Thomas Gleixner) [Orabug: 29641786] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}

Related CVEs

CVE-2018-12126

CVE-2018-12130

CVE-2018-12127

CVE-2019-11091

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.310.1.el5uek.src.rpm	39eb896a74e04de0d6eca80234d4e8cb	ELSA-2020-5936
	kernel-uek-2.6.39-400.310.1.el5uek.i686.rpm	21928a2331137847f9dbb88f6b89de18	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.310.1.el5uek.i686.rpm	0e6d4de3cc5442516df2cff8c2e626d7	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.310.1.el5uek.i686.rpm	3db450452fb10148390ab6f9e04cd616	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.310.1.el5uek.i686.rpm	460562ec15f3e75c0cf818c89c094f71	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.310.1.el5uek.noarch.rpm	d5e37c577cc81531cd6d2fbd425862a0	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.310.1.el5uek.noarch.rpm	1ed6dc153629e1482781eeecbbe34de1	ELSA-2020-5936
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.310.1.el5uek.src.rpm	39eb896a74e04de0d6eca80234d4e8cb	ELSA-2020-5936
	kernel-uek-2.6.39-400.310.1.el5uek.x86_64.rpm	64f34389d15fce821c565a5d16549409	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.310.1.el5uek.x86_64.rpm	69357988004bc2ab1a7424adefd8dc5c	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.310.1.el5uek.x86_64.rpm	eb9a020c9e5753afd1b980ee872a586e	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.310.1.el5uek.x86_64.rpm	766924e0745c9d6b0570c22812b4885b	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.310.1.el5uek.noarch.rpm	d5e37c577cc81531cd6d2fbd425862a0	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.310.1.el5uek.noarch.rpm	1ed6dc153629e1482781eeecbbe34de1	ELSA-2020-5936
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.310.1.el6uek.src.rpm	906857f903b74ed093eb96b0fcead9fb	ELSA-2021-9215
	kernel-uek-2.6.39-400.310.1.el6uek.i686.rpm	b64c22d24464d2021773fea57202883d	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.310.1.el6uek.i686.rpm	21f5624c53c78ce550dc6729c42fab7a	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.310.1.el6uek.i686.rpm	25e5130a99c0caa012c188063053eaaa	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.310.1.el6uek.i686.rpm	c3a1d2dba6bbffad22dddf2c1abd0be6	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.310.1.el6uek.noarch.rpm	7edf6e8e30a781e0f1f9d070f0e7a9d9	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.310.1.el6uek.noarch.rpm	588d874bc45808ae6641f0696371b56f	ELSA-2021-9215
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.310.1.el6uek.src.rpm	906857f903b74ed093eb96b0fcead9fb	ELSA-2021-9215
	kernel-uek-2.6.39-400.310.1.el6uek.x86_64.rpm	11578bba24dd8f244d23bcb19aafecb2	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.310.1.el6uek.x86_64.rpm	47a8460425ad083e0d807a44f8392712	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.310.1.el6uek.x86_64.rpm	78f3d83b8928712b04943cc5ded467ec	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.310.1.el6uek.x86_64.rpm	836bdc963eff188038502a3949435731	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.310.1.el6uek.noarch.rpm	7edf6e8e30a781e0f1f9d070f0e7a9d9	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.310.1.el6uek.noarch.rpm	588d874bc45808ae6641f0696371b56f	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team