ELSA-2019-4576

ELSA-2019-4576 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-03-12

Description

kernel-uek
[3.8.13-118.31.1]
- alarmtimer: Prevent overflow for relative nanosleep (Thomas Gleixner) [Orabug: 29269167] {CVE-2018-13053}
- KEYS: Don't permit request_key() to construct a new keyring (David Howells) [Orabug: 29304552] {CVE-2017-17807}
- KEYS: add missing permission check for request_key() destination (Eric Biggers) [Orabug: 29304552] {CVE-2017-17807}
- ext4: only look at the bg_flags field if it is valid (Theodore Ts'o) [Orabug: 29409425] {CVE-2018-10876} {CVE-2018-10876}
- net: Set sk_prot_creator when cloning sockets to the right proto (Christoph Paasch) [Orabug: 29422740] {CVE-2018-9568}
- ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o) [Orabug: 29428608] {CVE-2018-10878}
- ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o) [Orabug: 29428608] {CVE-2018-10878}

Related CVEs

CVE-2018-10876

CVE-2018-10878

CVE-2018-13053

CVE-2017-17807

CVE-2018-9568

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	dtrace-modules-3.8.13-118.31.1.el6uek-0.4.5-3.el6.src.rpm	ad307d28fab37e2c7a27607e5c195768c3f8b0e93dc1fdb7c462aac446002a13	-	ol6_x86_64_UEKR3_latest
	kernel-uek-3.8.13-118.31.1.el6uek.src.rpm	99f7034f26d5896029b7a3c457d75ad5ec3b0b6ff14d4d6f1afafe7b9c5834b2	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	dtrace-modules-3.8.13-118.31.1.el6uek-0.4.5-3.el6.x86_64.rpm	d34522a296226c8b394d114e534d369cf8cf3a8dc34a1208c9cfdbdf46120c67	-	ol6_x86_64_UEKR3_latest
	kernel-uek-3.8.13-118.31.1.el6uek.x86_64.rpm	76d97793586a7a4209a67d7dc25b2f6ea8d8e9db234315d0749c5b507509ae93	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-debug-3.8.13-118.31.1.el6uek.x86_64.rpm	8a6d2e69040f60bdb34e593b7a2574ad453d251b66452b798f79fdd9a6d8b244	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-debug-devel-3.8.13-118.31.1.el6uek.x86_64.rpm	04341f0804dea1ed78ba3b619d63c51a44ef5ead503c5cb3f4c37f1bd0ccf192	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-devel-3.8.13-118.31.1.el6uek.x86_64.rpm	69d4fce4e8120a96c895e4d6273fceacd981182d14a7c61c67587719e57ff441	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-doc-3.8.13-118.31.1.el6uek.noarch.rpm	ea134c00f7183e3016c25ef34f715fdce6d80bbb017e70905b4fc5dbf59dc98e	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
	kernel-uek-firmware-3.8.13-118.31.1.el6uek.noarch.rpm	f1b7f619ce442e786baa9d42d90361caac62c1d32c201f4a400aea1b5b7ae906	ELSA-2025-20007	ol6_x86_64_UEKR3_latest
Oracle Linux 7 (x86_64)	dtrace-modules-3.8.13-118.31.1.el7uek-0.4.5-3.el7.src.rpm	f5b00f98150f4b2b06e53374a6e73bd5ea9eb10df366642adce5b785b51efe20	-	ol7_x86_64_UEKR3
	kernel-uek-3.8.13-118.31.1.el7uek.src.rpm	12a832311bde8914db3cbe0aa06a045090b63686abe0698ec61c0af64aaef28e	ELSA-2025-20190	ol7_x86_64_UEKR3
	dtrace-modules-3.8.13-118.31.1.el7uek-0.4.5-3.el7.x86_64.rpm	c3074cf149f1849a226b236d608604dcd61048a796abcfae62cb0f849d4fb5a0	-	ol7_x86_64_UEKR3
	kernel-uek-3.8.13-118.31.1.el7uek.x86_64.rpm	39550e0892a8fb3099467408ae091e44d15d250b4999abf4653012ed0c75e5e2	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-debug-3.8.13-118.31.1.el7uek.x86_64.rpm	f9e046ca04723dd11ae2be98994443d68bfc17f99bebba35d531202808edcbab	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-debug-devel-3.8.13-118.31.1.el7uek.x86_64.rpm	65aaf4830daf01ef84ac95ea458e8da6383b9f1e3fd6fee9c2be9922bb91d094	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-devel-3.8.13-118.31.1.el7uek.x86_64.rpm	0118c6717aef14dc302086c6475ee324ac81389b77e04e2078a167953e79304f	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-doc-3.8.13-118.31.1.el7uek.noarch.rpm	79eb9f9bd118ddb504f44b97f9cf152847ca047e84491f426c420f77be30392f	ELSA-2025-20190	ol7_x86_64_UEKR3
	kernel-uek-firmware-3.8.13-118.31.1.el7uek.noarch.rpm	8e2a6d183454b26eaef40e0a7280c5470105c6017d0e9dd2d6d7872c887e93a9	ELSA-2025-20007	ol7_x86_64_UEKR3

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team