ELSA-2019-4675

ELSA-2019-4675 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-06-07

Description

[2.6.39-400.312.1]
- Bluetooth: hidp: fix buffer overflow (Young Xiao) [Orabug: 29786788] {CVE-2011-1079} {CVE-2019-11884}
- x86/speculation/mds: Fix verw usage to use memory operand (Patrick Colp) [Orabug: 29791037] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}
- x86/speculation/mds: Make cpu_vuln_whitelist __cpuinitconst (Patrick Colp) [Orabug: 29792027]
- x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner) [Orabug: 29792064] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}
- x86/speculation/mds: Call VERW on NMI path when returning to user (Patrick Colp) [Orabug: 29792097] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}
- x86/speculation/mds: Fix incorrect check against MSR_IA32_ARCH_CAPABILITIES (Patrick Colp) [Orabug: 29820653]

Related CVEs

CVE-2018-12126

CVE-2018-12130

CVE-2018-12127

CVE-2019-11091

CVE-2019-11884

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.312.1.el5uek.src.rpm	9eae7a601b4846ef306cf84ff1078d86	ELSA-2020-5936
	kernel-uek-2.6.39-400.312.1.el5uek.i686.rpm	4026e4e44cf37dc2121e5a38b7101132	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.312.1.el5uek.i686.rpm	4f9aaa75bf4414e6622eedf3173dcbbf	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.312.1.el5uek.i686.rpm	a4789298b040787e973ce882958f5f93	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.312.1.el5uek.i686.rpm	244aaac76c4f9d6d08e0fa2b1e4cbcbf	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.312.1.el5uek.noarch.rpm	2d128b6bda71f57b95e6edada15e30c2	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.312.1.el5uek.noarch.rpm	8e960fbcaebe880730a9c8ba2bee52d9	ELSA-2020-5936
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.312.1.el5uek.src.rpm	9eae7a601b4846ef306cf84ff1078d86	ELSA-2020-5936
	kernel-uek-2.6.39-400.312.1.el5uek.x86_64.rpm	ff028e2e1fc369bbf3ed6213b19ec39a	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.312.1.el5uek.x86_64.rpm	31f574c63e80d219e3eac51cb3420f50	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.312.1.el5uek.x86_64.rpm	041a7e48a5649f5ee34c71d0db4fa0e1	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.312.1.el5uek.x86_64.rpm	d636fb39afdb5faedec933d45acf53bb	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.312.1.el5uek.noarch.rpm	2d128b6bda71f57b95e6edada15e30c2	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.312.1.el5uek.noarch.rpm	8e960fbcaebe880730a9c8ba2bee52d9	ELSA-2020-5936
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.312.1.el6uek.src.rpm	a7639002476799870644677901dbe295	ELSA-2021-9215
	kernel-uek-2.6.39-400.312.1.el6uek.i686.rpm	a45216927cabcaf4720b13960079b42e	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.312.1.el6uek.i686.rpm	b35b9ad694d6aed05d4e1c5ab7cf5c82	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.312.1.el6uek.i686.rpm	c9644fedf99bc113100861b0a0892ba4	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.312.1.el6uek.i686.rpm	13b6d9af657cefe1f4337c8af74e7c44	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.312.1.el6uek.noarch.rpm	35f1ad6c89aa53da9d3cd61fed47ca2b	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.312.1.el6uek.noarch.rpm	20e0782f394e3a18d62e67f1afed2225	ELSA-2021-9215
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.312.1.el6uek.src.rpm	a7639002476799870644677901dbe295	ELSA-2021-9215
	kernel-uek-2.6.39-400.312.1.el6uek.x86_64.rpm	1648e338899eb623b50ade45d68b9f3d	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.312.1.el6uek.x86_64.rpm	e281d50031f8876fd89a1fc15dda72a3	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.312.1.el6uek.x86_64.rpm	0c9da43a69f7fa4076ac89b2702dfa8a	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.312.1.el6uek.x86_64.rpm	e0384bb52e56874c5b10e1a92fad5fbc	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.312.1.el6uek.noarch.rpm	35f1ad6c89aa53da9d3cd61fed47ca2b	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.312.1.el6uek.noarch.rpm	20e0782f394e3a18d62e67f1afed2225	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team