ELSA-2018-4041

ELSA-2018-4041 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2018-02-26

Description

[2.6.39-400.298.3]
- ext4: limit group search loop for non-extent files (Lachlan McIlroy) [Orabug: 17488415]
- ext4: fixup 64-bit divides in 3.0-stable backport of upstream fix (Todd Poynor) [Orabug: 17488415]
- ext4: use atomic64_t for the per-flexbg free_clusters count (Theodore Ts'o) [Orabug: 17488415]
- ext4: init pagevec in ext4_da_block_invalidatepages (Eric Sandeen) [Orabug: 17488415]
- ext4: do not try to write superblock on ro remount w/o journal (Michael Tokarev) [Orabug: 17488415]
- xen-netback: fix grant_copy_op array size (Niranjan Patil) [Orabug: 25653941]
- xen-netback: explicitly check max_slots_needed against meta_prod counter (Niranjan Patil) [Orabug: 25653941]
- xen-netback: Fix handling of skbs requiring too many slots (Zoltan Kiss) [Orabug: 25653941]
- xen-netback: worse-case estimate in xenvif_rx_action is underestimating (Paul Durrant) [Orabug: 25653941]
- xen-netback: Add worse-case estimates of max_slots_needed in netbk_rx_action (Niranjan Patil) [Orabug: 25653941]
- KEYS: Remove key_type::match in favour of overriding default by match_preparse (Tim Tianyang Chen) [Orabug: 25757946] {CVE-2017-6951}
- xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables mapping (Zhenzhong Duan) [Orabug: 26737475]
- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang) [Orabug: 26813391] {CVE-2017-14106}
- rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells) [Orabug: 26880520] {CVE-2017-7482} {CVE-2017-7482}
- ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant) [Orabug: 27099836]
- Check validity of cl_rpcclient in nfs_server_list_show (Malahal Naineni) [Orabug: 27112186]
- USB: serial: console: fix use-after-free after failed setup (Johan Hovold) [Orabug: 27206839] {CVE-2017-16525}
- ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai) [Orabug: 27206934] {CVE-2017-16529}
- USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman) [Orabug: 27207243] {CVE-2017-16531}
- dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam) [Orabug: 27290308] {CVE-2017-8824}

Related CVEs

CVE-2017-6951

CVE-2017-14106

CVE-2017-7482

CVE-2017-16525

CVE-2017-16529

CVE-2017-16531

CVE-2017-8824

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.298.3.el5uek.src.rpm	d3cd0f709f3fff698fa21f9fbe45c242	ELSA-2020-5936
	kernel-uek-2.6.39-400.298.3.el5uek.i686.rpm	1f0bbb6db79841ff7043cba7a2b9605a	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.298.3.el5uek.i686.rpm	09862caadf4446a74498b21a0236d710	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.298.3.el5uek.i686.rpm	ee01b8f58d524506679a2c3d9b1fd54e	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.298.3.el5uek.i686.rpm	bd42931b07fb84fbaecff16dcb8a2e01	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.298.3.el5uek.noarch.rpm	68b8df5438f6810044694b797bfb6d6b	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.298.3.el5uek.noarch.rpm	7fc6b0ccc0c719783da976a7727ce7d9	ELSA-2020-5936
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.298.3.el5uek.src.rpm	d3cd0f709f3fff698fa21f9fbe45c242	ELSA-2020-5936
	kernel-uek-2.6.39-400.298.3.el5uek.x86_64.rpm	5fd83ed62b54fb04aa92cd826f27ab14	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.298.3.el5uek.x86_64.rpm	287b00a753e14e7822d0051482026fec	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.298.3.el5uek.x86_64.rpm	d8f7f117234c050954acecabf143ad7b	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.298.3.el5uek.x86_64.rpm	50511457ccf40d010231089ca3a8b328	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.298.3.el5uek.noarch.rpm	68b8df5438f6810044694b797bfb6d6b	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.298.3.el5uek.noarch.rpm	7fc6b0ccc0c719783da976a7727ce7d9	ELSA-2020-5936
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.298.3.el6uek.src.rpm	ed6acd55f0f5db92ded10ae0864f15da	ELSA-2021-9215
	kernel-uek-2.6.39-400.298.3.el6uek.i686.rpm	ce095aa9e8c2b81cbf253dfd693ceffa	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.298.3.el6uek.i686.rpm	0dca21c986fa552aa6b147f7fe026e3c	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.298.3.el6uek.i686.rpm	e6334c79ac2ac7bd6d91be64562b1cf1	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.298.3.el6uek.i686.rpm	a3b7bcbacccb1790af5d67d87074817f	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.298.3.el6uek.noarch.rpm	a00605d03dcfe55c0ddd3ca59da06f9d	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.298.3.el6uek.noarch.rpm	6746f5c6c789c41ba85c990525c1c080	ELSA-2021-9215
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.298.3.el6uek.src.rpm	ed6acd55f0f5db92ded10ae0864f15da	ELSA-2021-9215
	kernel-uek-2.6.39-400.298.3.el6uek.x86_64.rpm	5f7f72e89e6081915988a198ead84e79	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.298.3.el6uek.x86_64.rpm	d88cf76a5cdb7f29da2eaaa3f58fc35c	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.298.3.el6uek.x86_64.rpm	4cfd19d7622ebd91dd885986768db7aa	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.298.3.el6uek.x86_64.rpm	e4db25767baf72c644c122a23dcf5e6c	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.298.3.el6uek.noarch.rpm	a00605d03dcfe55c0ddd3ca59da06f9d	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.298.3.el6uek.noarch.rpm	6746f5c6c789c41ba85c990525c1c080	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team