ELSA-2018-0151

ELSA-2018-0151 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-01-25

Description

- [3.10.0-693.17.1.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-693.17.1]
- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]

[3.10.0-693.16.1]
- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]

Related CVEs

CVE-2017-12193

CVE-2017-12192

CVE-2015-8539

CVE-2017-7472

CVE-2017-15649

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-693.17.1.el7.src.rpm	fa54b26de35f17fc53bbdfc8de1b7424368cbf0c61cccce95e9dae2aa6434773	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-693.17.1.el7.src.rpm	fa54b26de35f17fc53bbdfc8de1b7424368cbf0c61cccce95e9dae2aa6434773	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-693.17.1.el7.src.rpm	fa54b26de35f17fc53bbdfc8de1b7424368cbf0c61cccce95e9dae2aa6434773	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-3.10.0-693.17.1.el7.x86_64.rpm	4a773f9f2d642d0c0d0c7e8f6b9435e71e67129855d0cf9e9953305b5cbbf701	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-693.17.1.el7.x86_64.rpm	4a773f9f2d642d0c0d0c7e8f6b9435e71e67129855d0cf9e9953305b5cbbf701	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-abi-whitelists-3.10.0-693.17.1.el7.noarch.rpm	a92d5a3d9cc7aa5e4c40af7fe2c1376afbfcbef497239fd0bc21b73aa67c2824	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-693.17.1.el7.noarch.rpm	a92d5a3d9cc7aa5e4c40af7fe2c1376afbfcbef497239fd0bc21b73aa67c2824	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-debug-3.10.0-693.17.1.el7.x86_64.rpm	8f94dc15e270cd0ac07718b2efc36493e41c03808ab0c5c2da02be861b781857	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-693.17.1.el7.x86_64.rpm	8f94dc15e270cd0ac07718b2efc36493e41c03808ab0c5c2da02be861b781857	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-debug-devel-3.10.0-693.17.1.el7.x86_64.rpm	f65b330946b7ce7f559e02e58aeece6e440865d3119a4b27295213048e33a304	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-693.17.1.el7.x86_64.rpm	f65b330946b7ce7f559e02e58aeece6e440865d3119a4b27295213048e33a304	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-devel-3.10.0-693.17.1.el7.x86_64.rpm	9630f66dc6becb140f9bf71437ca32704684178f8ac8b5c075208eb7571bec2e	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-693.17.1.el7.x86_64.rpm	9630f66dc6becb140f9bf71437ca32704684178f8ac8b5c075208eb7571bec2e	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-doc-3.10.0-693.17.1.el7.noarch.rpm	18bf58f6d9549fa784aaeed2a204fbaaa1bbd7761db48887b23d3708fa594f7f	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-doc-3.10.0-693.17.1.el7.noarch.rpm	18bf58f6d9549fa784aaeed2a204fbaaa1bbd7761db48887b23d3708fa594f7f	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-headers-3.10.0-693.17.1.el7.x86_64.rpm	634a900f19ce2c54ec10efccc5f5e34353efd00b0312a17e91f309b289acf881	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-693.17.1.el7.x86_64.rpm	634a900f19ce2c54ec10efccc5f5e34353efd00b0312a17e91f309b289acf881	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-tools-3.10.0-693.17.1.el7.x86_64.rpm	66a323e1f622b4f097e9f6ef20d0868ebfad6cc1d716bdbe81f90c428c74501f	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-693.17.1.el7.x86_64.rpm	66a323e1f622b4f097e9f6ef20d0868ebfad6cc1d716bdbe81f90c428c74501f	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-tools-libs-3.10.0-693.17.1.el7.x86_64.rpm	ff997a77d33a48a727933ecb3ba0985dbae2ba685a2f2ac36464e602a27d9aac	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-693.17.1.el7.x86_64.rpm	ff997a77d33a48a727933ecb3ba0985dbae2ba685a2f2ac36464e602a27d9aac	ELSA-2025-1281	ol7_x86_64_u4_patch
	kernel-tools-libs-devel-3.10.0-693.17.1.el7.x86_64.rpm	4dfc3ba168fc82aacb887f529b30a27008c34f41fbe1f6ec802e6fb3ea79433a	ELSA-2025-1281	ol7_x86_64_optional_archive
	perf-3.10.0-693.17.1.el7.x86_64.rpm	deaf2dc26d0227f762de509e03f92a8730c1912b81217b279778a06bf42c75fc	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-693.17.1.el7.x86_64.rpm	deaf2dc26d0227f762de509e03f92a8730c1912b81217b279778a06bf42c75fc	ELSA-2025-20019	ol7_x86_64_u4_patch
	python-perf-3.10.0-693.17.1.el7.x86_64.rpm	1da7ca890c5e14a6dc978df18fa58f86355f870d4867eab03509a1da71bf052f	ELSA-2025-20019	ol7_x86_64_latest_archive
	python-perf-3.10.0-693.17.1.el7.x86_64.rpm	1da7ca890c5e14a6dc978df18fa58f86355f870d4867eab03509a1da71bf052f	ELSA-2025-20019	ol7_x86_64_u4_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team