ELSA-2019-4576

ELSA-2019-4576 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-03-12

Description

kernel-uek
[3.8.13-118.31.1]
- alarmtimer: Prevent overflow for relative nanosleep (Thomas Gleixner) [Orabug: 29269167] {CVE-2018-13053}
- KEYS: Don't permit request_key() to construct a new keyring (David Howells) [Orabug: 29304552] {CVE-2017-17807}
- KEYS: add missing permission check for request_key() destination (Eric Biggers) [Orabug: 29304552] {CVE-2017-17807}
- ext4: only look at the bg_flags field if it is valid (Theodore Ts'o) [Orabug: 29409425] {CVE-2018-10876} {CVE-2018-10876}
- net: Set sk_prot_creator when cloning sockets to the right proto (Christoph Paasch) [Orabug: 29422740] {CVE-2018-9568}
- ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o) [Orabug: 29428608] {CVE-2018-10878}
- ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o) [Orabug: 29428608] {CVE-2018-10878}

Related CVEs

CVE-2018-10878

CVE-2018-13053

CVE-2017-17807

CVE-2018-10876

CVE-2018-9568

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (x86_64)	dtrace-modules-3.8.13-118.31.1.el6uek-0.4.5-3.el6.src.rpm	ea03288336ac65dfd9a18deae146efaf	-
	kernel-uek-3.8.13-118.31.1.el6uek.src.rpm	a267d7e2b2b13e1f94be45c9520a9adc	ELSA-2021-9215
	dtrace-modules-3.8.13-118.31.1.el6uek-0.4.5-3.el6.x86_64.rpm	9f05b54235fefe60443126f9f102e4a5	-
	kernel-uek-3.8.13-118.31.1.el6uek.x86_64.rpm	ad5d3dbfac82491ce7c69a52089eed3c	ELSA-2021-9215
	kernel-uek-debug-3.8.13-118.31.1.el6uek.x86_64.rpm	079ce57489afc159807587ba8b6d48a9	ELSA-2021-9215
	kernel-uek-debug-devel-3.8.13-118.31.1.el6uek.x86_64.rpm	e60d3b49e20c240a6544450e30632522	ELSA-2021-9215
	kernel-uek-devel-3.8.13-118.31.1.el6uek.x86_64.rpm	92c2f5f4c178e746165ea9b1e77d133c	ELSA-2021-9215
	kernel-uek-doc-3.8.13-118.31.1.el6uek.noarch.rpm	e3fe222877025bfae658261ccb1eb541	ELSA-2021-9215
	kernel-uek-firmware-3.8.13-118.31.1.el6uek.noarch.rpm	abfa7bf9ad2d42c6ef8f8e4cbb9a6b9e	ELSA-2021-9215
Oracle Linux 7 (x86_64)	dtrace-modules-3.8.13-118.31.1.el7uek-0.4.5-3.el7.src.rpm	9d2c86721fe8196525a743fb3e8040d9	-
	kernel-uek-3.8.13-118.31.1.el7uek.src.rpm	0d832175ffc6105b2d9fd9e5bd1f0cfa	ELSA-2021-9220
	dtrace-modules-3.8.13-118.31.1.el7uek-0.4.5-3.el7.x86_64.rpm	d78778ddac0ca202d948fbee49e09eeb	-
	kernel-uek-3.8.13-118.31.1.el7uek.x86_64.rpm	24622912e13b8e80a289c71b9ee86b07	ELSA-2021-9220
	kernel-uek-debug-3.8.13-118.31.1.el7uek.x86_64.rpm	f96456fd4fffd688c40f07108473b771	ELSA-2021-9220
	kernel-uek-debug-devel-3.8.13-118.31.1.el7uek.x86_64.rpm	7ae656526330a7fff0ef46105fda144a	ELSA-2021-9220
	kernel-uek-devel-3.8.13-118.31.1.el7uek.x86_64.rpm	419f4a9b9c8ae0bc072934d4808ad8c4	ELSA-2021-9220
	kernel-uek-doc-3.8.13-118.31.1.el7uek.noarch.rpm	2187754f596b75d66b41698d002dcc6d	ELSA-2021-9220
	kernel-uek-firmware-3.8.13-118.31.1.el7uek.noarch.rpm	548d0e8abc53ad6731635928aef70321	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team