ELSA-2018-4300

ELSA-2018-4300 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-12-06

Description

kernel-uek
[3.8.13-118.28.1]
- udf: Check component length before reading it (Jan Kara) [Orabug: 21193696] {CVE-2014-9728}
- udf: Verify i_size when loading inode (Shan Hai) [Orabug: 21193696] {CVE-2014-9728}
- intel_pstate: Fix overflow in busy_scaled due to long delay (mridula shastry) [Orabug: 28005134]
- scsi: libsas: defer ata device eh commands to libata (Jason Yan) [Orabug: 28459689] {CVE-2018-10021}
- nfsd: silence sparse warning about accessing credentials (Jeff Layton) [Orabug: 28824742] {CVE-2017-13168}
- scsi: sg: mitigate read/write abuse (Jann Horn) [Orabug: 28824742] {CVE-2017-13168}
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko) [Orabug: 28892683] {CVE-2018-1000204}
- ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai) [Orabug: 28898650] {CVE-2018-10902}
- KVM: MTRR: remove MSR 0x2f8 (Andy Honig) [Orabug: 28901657] {CVE-2016-3713} {CVE-2016-3713}
- cdrom: fix improper type cast, which can leat to information leak. (Young_X) [Orabug: 28929777] {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft) {CVE-2018-7755} {CVE-2018-7755}
- crypto: salsa20 - fix blkcipher_walk API usage (Eric Biggers) [Orabug: 28976585] {CVE-2017-17805}
- crypto: hmac - require that the underlying hash algorithm is unkeyed (Eric Biggers) [Orabug: 28976654] {CVE-2017-17806}

Related CVEs

CVE-2017-13168

CVE-2017-17806

CVE-2018-1000204

CVE-2014-9728

CVE-2016-3713

CVE-2018-10021

CVE-2018-10902

CVE-2018-7755

CVE-2017-17805

CVE-2018-18710

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	dtrace-modules-3.8.13-118.28.1.el6uek-0.4.5-3.el6.src.rpm	d1459e790e7a6d3ee0ee08321df0ac74449c4fe39456d0d2aba744cbecde77d1	-	ol6_x86_64_UEKR3_latest
	kernel-uek-3.8.13-118.28.1.el6uek.src.rpm	bf372214cd1580160edccbfce541339f899263b43c0b9fb28abebc39cef06e97	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	dtrace-modules-3.8.13-118.28.1.el6uek-0.4.5-3.el6.x86_64.rpm	824c9a0e591828d974ecccfb39b4f71742b7194018f4ae23c5e1110a6a6e755f	-	ol6_x86_64_UEKR3_latest
	kernel-uek-3.8.13-118.28.1.el6uek.x86_64.rpm	16ce523a00c1ee9a5ffc2d823847f5b8d499bf99686dfb8ac751efe7ff3028ee	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-debug-3.8.13-118.28.1.el6uek.x86_64.rpm	97ed41f7028dd33fe96e4e24460d8eacab6ed1b80555b2dc86863c88a3f38348	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-debug-devel-3.8.13-118.28.1.el6uek.x86_64.rpm	871473234b9a7f2a8db0a5ddc17260f4377edf77ec956d09f9c62419d4f34d5f	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-devel-3.8.13-118.28.1.el6uek.x86_64.rpm	122f4a95d84a2e0f037c23d0822574c88e1ef78ec2eec0d9013406a407f2afd4	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-doc-3.8.13-118.28.1.el6uek.noarch.rpm	6a46bd77f1d8f324a3ce0c1c49204ccd6e3f028322a9849c206570bb53f76ff9	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-firmware-3.8.13-118.28.1.el6uek.noarch.rpm	ab744ec52fcb78196c69bdca74c7c558049eb3b25044b2fc25a40ed9ba4b0391	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
Oracle Linux 7 (x86_64)	dtrace-modules-3.8.13-118.28.1.el7uek-0.4.5-3.el7.src.rpm	d59fcf0811288e6cdc3bbfdfc270f6ced838639a1467970a0738b1f4ca146634	-	ol7_x86_64_UEKR3
	kernel-uek-3.8.13-118.28.1.el7uek.src.rpm	1640a28526fb403c58b98b252e36c4146bf54c4d590887432164dcefc06aada2	ELSA-2025-20190	ol7_x86_64_UEKR3
	dtrace-modules-3.8.13-118.28.1.el7uek-0.4.5-3.el7.x86_64.rpm	6398e6ec03730a520b937aca4c6bbddecaf1cbff5e5fb68181cf0c5aad17e18b	-	ol7_x86_64_UEKR3
	kernel-uek-3.8.13-118.28.1.el7uek.x86_64.rpm	8320f727221d6727771802394c8309f0257b55f00c8c5c8540d921d0dae20e06	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-debug-3.8.13-118.28.1.el7uek.x86_64.rpm	471a2298b308f97f1925b88d67a40fea77571d0d1774fd476006235d6ae7db32	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-debug-devel-3.8.13-118.28.1.el7uek.x86_64.rpm	168fabf415c7822346f8692d50384ababb4c214a21fe50db36c4f846f0b1802c	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-devel-3.8.13-118.28.1.el7uek.x86_64.rpm	0a5c7560b08ea661a05fda2ee3100bfb6aa4b9a4c7aec17d1e485eef03639b0c	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-doc-3.8.13-118.28.1.el7uek.noarch.rpm	f7c8fea4e51e74a6de121f5bd5d2b5d29898ad1eeca72a0a6c6d10337e25b071	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-firmware-3.8.13-118.28.1.el7uek.noarch.rpm	9e57c563191ddd7c962dd4459f254ec3d1212f3b7ee64a40dfec78777cdcc319	ELSA-2025-20007	ol7_x86_64_UEKR3

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team