Описание
ELSA-2019-1481: kernel security update (IMPORTANT)
[3.10.0-957.21.3.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]
[3.10.0-957.21.3]
- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
bpftool
3.10.0-957.21.3.el7
kernel
3.10.0-957.21.3.el7
kernel-abi-whitelists
3.10.0-957.21.3.el7
kernel-debug
3.10.0-957.21.3.el7
kernel-debug-devel
3.10.0-957.21.3.el7
kernel-devel
3.10.0-957.21.3.el7
kernel-doc
3.10.0-957.21.3.el7
kernel-headers
3.10.0-957.21.3.el7
kernel-tools
3.10.0-957.21.3.el7
kernel-tools-libs
3.10.0-957.21.3.el7
kernel-tools-libs-devel
3.10.0-957.21.3.el7
perf
3.10.0-957.21.3.el7
python-perf
3.10.0-957.21.3.el7
Связанные CVE
Связанные уязвимости
ELSA-2019-4689: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2019-4686: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2019-4684: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2019-4678: Unbreakable Enterprise kernel security update (IMPORTANT)