ELSA-2018-4288

ELSA-2018-4288 - Unbreakable Enterprise kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2018-11-28

Description


[4.1.12-124.22.4]
- Revert commit 8bd274934987 ('block: fix bdi vs gendisk lifetime mismatch') (Ashish Samant) [Orabug: 28968102]
- KVM/x86: Add IBPB support (Ashok Raj) [Orabug: 28703712]
- x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky) [Orabug: 28814570]
- x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky) [Orabug: 28814570]
- x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky) [Orabug: 28814570]
- x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky) [Orabug: 28814570]
- x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky) [Orabug: 28814570]

[4.1.12-124.22.3]
- net: net_failover: fix typo in net_failover_slave_register() (Liran Alon) [Orabug: 28122104]
- virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala) [Orabug: 28122104]
- virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala) [Orabug: 28122104]
- net: Introduce net_failover driver (Sridhar Samudrala) [Orabug: 28122104]
- net: Introduce generic failover module (Sridhar Samudrala) [Orabug: 28122104]
- net: introduce lower state changed info structure for LAG lowers (Jiri Pirko) [Orabug: 28122104]
- net: introduce change lower state notifier (Jiri Pirko) [Orabug: 28122104]
- net: add info struct for LAG changeupper (Jiri Pirko) [Orabug: 28122104]
- net: add possibility to pass information about upper device via notifier (Jiri Pirko) [Orabug: 28122104]
- net: Check CHANGEUPPER notifier return value (Ido Schimmel) [Orabug: 28122104]
- net: introduce change upper device notifier change info (Jiri Pirko) [Orabug: 28122104]
- x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan) [Orabug: 28271063]
- x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan) [Orabug: 28271063]
- x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan) [Orabug: 28271063]
- xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil) [Orabug: 28798861]
- scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart) [Orabug: 28855939]
- scsi: virtio_scsi: let host do exception handling (Paolo Bonzini) [Orabug: 28856913]
- net/rds: Fix endless RNR situation (Venkat Venkatsubra) [Orabug: 28857027]
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko) [Orabug: 28892656] {CVE-2018-1000204}
- cdrom: fix improper type cast, which can leat to information leak. (Young_X) [Orabug: 28929767] {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}


Related CVEs


CVE-2018-1000204
CVE-2018-18710

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 6 (x86_64) kernel-uek-4.1.12-124.22.4.el6uek.src.rpm419ecc3edadaa8a1a21d40f72e044a84-
kernel-uek-4.1.12-124.22.4.el6uek.x86_64.rpmc9c8a3dc712d7e522c66b29aa3875edc-
kernel-uek-debug-4.1.12-124.22.4.el6uek.x86_64.rpmb4789a38676377f3fe9ffd10602db1fe-
kernel-uek-debug-devel-4.1.12-124.22.4.el6uek.x86_64.rpm03eb726c16bdba98ddbf259a1df52eba-
kernel-uek-devel-4.1.12-124.22.4.el6uek.x86_64.rpm55874d53436c2d761b71d611c5a4e751-
kernel-uek-doc-4.1.12-124.22.4.el6uek.noarch.rpm040b97435266955fd49655cb1d5d750b-
kernel-uek-firmware-4.1.12-124.22.4.el6uek.noarch.rpmd6072402f193b1cb1ed56820736c873e-
Oracle Linux 7 (x86_64) kernel-uek-4.1.12-124.22.4.el7uek.src.rpm6771ca54c9c99d0a0a583c09d9d5777a-
kernel-uek-4.1.12-124.22.4.el7uek.x86_64.rpm10efa37c2365515b1571168483cd7626-
kernel-uek-debug-4.1.12-124.22.4.el7uek.x86_64.rpm018dc1d10565395d2e1f692e97ef0528-
kernel-uek-debug-devel-4.1.12-124.22.4.el7uek.x86_64.rpm8963552625414b4e4f167918d770b8cb-
kernel-uek-devel-4.1.12-124.22.4.el7uek.x86_64.rpm1627934aad88303397f2449615ce7183-
kernel-uek-doc-4.1.12-124.22.4.el7uek.noarch.rpmf850fb1cc11109a63fbeb470aa031f1b-
kernel-uek-firmware-4.1.12-124.22.4.el7uek.noarch.rpm937df1aa8010fe39b6ee991b3ca851bd-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete