ELSA-2019-2600

ELSA-2019-2600 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-09-04

Description

[3.10.0-1062.1.1]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]

[3.10.0-1062.1.1]
- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}

Related CVEs

CVE-2019-1125

CVE-2019-9500

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1062.1.1.el7.src.rpm	b4a16e9ba3552e80db3bb9a945056f6cd104c74f7ec217c23c36d016978e29dc	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1062.1.1.el7.src.rpm	b4a16e9ba3552e80db3bb9a945056f6cd104c74f7ec217c23c36d016978e29dc	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-1062.1.1.el7.src.rpm	b4a16e9ba3552e80db3bb9a945056f6cd104c74f7ec217c23c36d016978e29dc	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-1062.1.1.el7.src.rpm	b4a16e9ba3552e80db3bb9a945056f6cd104c74f7ec217c23c36d016978e29dc	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-1062.1.1.el7.src.rpm	b4a16e9ba3552e80db3bb9a945056f6cd104c74f7ec217c23c36d016978e29dc	ELSA-2025-1281	ol7_x86_64_u7_patch
	bpftool-3.10.0-1062.1.1.el7.x86_64.rpm	9dcc0282340803b126ed1d78463db7c395b59cc6fb1a1c28cd938190c09dee94	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-1062.1.1.el7.x86_64.rpm	9dcc0282340803b126ed1d78463db7c395b59cc6fb1a1c28cd938190c09dee94	ELSA-2025-1281	ol7_x86_64_latest_archive
	bpftool-3.10.0-1062.1.1.el7.x86_64.rpm	9dcc0282340803b126ed1d78463db7c395b59cc6fb1a1c28cd938190c09dee94	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-3.10.0-1062.1.1.el7.x86_64.rpm	2707255c29601d688e4743edfe44500f4577edbc0c7f758ceda28acaef12a23e	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1062.1.1.el7.x86_64.rpm	2707255c29601d688e4743edfe44500f4577edbc0c7f758ceda28acaef12a23e	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-1062.1.1.el7.x86_64.rpm	2707255c29601d688e4743edfe44500f4577edbc0c7f758ceda28acaef12a23e	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-abi-whitelists-3.10.0-1062.1.1.el7.noarch.rpm	b369c3c65841ffb7a2af2664eb68ec544496a2dd7c9272d06a68a112d9959da7	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-1062.1.1.el7.noarch.rpm	b369c3c65841ffb7a2af2664eb68ec544496a2dd7c9272d06a68a112d9959da7	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-1062.1.1.el7.noarch.rpm	b369c3c65841ffb7a2af2664eb68ec544496a2dd7c9272d06a68a112d9959da7	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-debug-3.10.0-1062.1.1.el7.x86_64.rpm	4f73edfff84e2dcc6d729be418887e0b1b6b03ee858b4a0afe9db3faf82be70f	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-1062.1.1.el7.x86_64.rpm	4f73edfff84e2dcc6d729be418887e0b1b6b03ee858b4a0afe9db3faf82be70f	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-1062.1.1.el7.x86_64.rpm	4f73edfff84e2dcc6d729be418887e0b1b6b03ee858b4a0afe9db3faf82be70f	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-debug-devel-3.10.0-1062.1.1.el7.x86_64.rpm	fedbefc7704219e4245aa4533233600588228d3e1b67b018e42591863bd73861	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-1062.1.1.el7.x86_64.rpm	fedbefc7704219e4245aa4533233600588228d3e1b67b018e42591863bd73861	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-1062.1.1.el7.x86_64.rpm	fedbefc7704219e4245aa4533233600588228d3e1b67b018e42591863bd73861	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-devel-3.10.0-1062.1.1.el7.x86_64.rpm	9376c60677cbc5f79f97ca75259a519d1705bd810546294aa4d37103fc1d8c79	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-1062.1.1.el7.x86_64.rpm	9376c60677cbc5f79f97ca75259a519d1705bd810546294aa4d37103fc1d8c79	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-1062.1.1.el7.x86_64.rpm	9376c60677cbc5f79f97ca75259a519d1705bd810546294aa4d37103fc1d8c79	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-doc-3.10.0-1062.1.1.el7.noarch.rpm	908d7b951187e80ae1c27912a4f5af7507be0fc7b47e0b8e842e71126720a4dc	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-1062.1.1.el7.noarch.rpm	908d7b951187e80ae1c27912a4f5af7507be0fc7b47e0b8e842e71126720a4dc	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-doc-3.10.0-1062.1.1.el7.noarch.rpm	908d7b951187e80ae1c27912a4f5af7507be0fc7b47e0b8e842e71126720a4dc	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-headers-3.10.0-1062.1.1.el7.x86_64.rpm	c9652b9f6da620bda32dae8501f48be2bc7542f36d9dea757a412f0045b46a86	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-1062.1.1.el7.x86_64.rpm	c9652b9f6da620bda32dae8501f48be2bc7542f36d9dea757a412f0045b46a86	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-1062.1.1.el7.x86_64.rpm	c9652b9f6da620bda32dae8501f48be2bc7542f36d9dea757a412f0045b46a86	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-tools-3.10.0-1062.1.1.el7.x86_64.rpm	36f7dcba4ad736f10ff530860bf976fdee462502390d5404a7b98000844b74b9	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-1062.1.1.el7.x86_64.rpm	36f7dcba4ad736f10ff530860bf976fdee462502390d5404a7b98000844b74b9	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-1062.1.1.el7.x86_64.rpm	36f7dcba4ad736f10ff530860bf976fdee462502390d5404a7b98000844b74b9	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-tools-libs-3.10.0-1062.1.1.el7.x86_64.rpm	8201b48e644e3731374933affb2974cf3eeb4e7483e92a435fb32e092cf54fd7	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-1062.1.1.el7.x86_64.rpm	8201b48e644e3731374933affb2974cf3eeb4e7483e92a435fb32e092cf54fd7	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-1062.1.1.el7.x86_64.rpm	8201b48e644e3731374933affb2974cf3eeb4e7483e92a435fb32e092cf54fd7	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-tools-libs-devel-3.10.0-1062.1.1.el7.x86_64.rpm	1ae289651d8adc69da0dbce7da89a2f1068ba09c8677f21e0ffe9a2f22dfc877	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-tools-libs-devel-3.10.0-1062.1.1.el7.x86_64.rpm	1ae289651d8adc69da0dbce7da89a2f1068ba09c8677f21e0ffe9a2f22dfc877	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-1062.1.1.el7.x86_64.rpm	669351c416eb82ac0e87344501bdcdd9e5631ba57e0b09937951b5d1ecc3774e	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-1062.1.1.el7.x86_64.rpm	669351c416eb82ac0e87344501bdcdd9e5631ba57e0b09937951b5d1ecc3774e	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-1062.1.1.el7.x86_64.rpm	669351c416eb82ac0e87344501bdcdd9e5631ba57e0b09937951b5d1ecc3774e	ELSA-2025-20019	ol7_x86_64_u7_patch
	python-perf-3.10.0-1062.1.1.el7.x86_64.rpm	18f265b31281aec6b4f7fa76092eaeac30a402d5d6df066fedf0313ba410cd64	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-1062.1.1.el7.x86_64.rpm	18f265b31281aec6b4f7fa76092eaeac30a402d5d6df066fedf0313ba410cd64	ELSA-2025-20019	ol7_x86_64_latest_archive
	python-perf-3.10.0-1062.1.1.el7.x86_64.rpm	18f265b31281aec6b4f7fa76092eaeac30a402d5d6df066fedf0313ba410cd64	ELSA-2025-20019	ol7_x86_64_u7_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team