Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2019-4636

Опубликовано: 14 мая 2019
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2019-4636: Unbreakable Enterprise kernel security update (IMPORTANT)

kernel-uek [3.8.13-118.33.2]

  • x86/speculation/mds: Make cpu_matches() __cpuinit (Patrick Colp) [Orabug: 29751729] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}
  • x86/speculation/mds: Only worry about firmware loaded microcode (Patrick Colp) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}

[3.8.13-118.33.1]

  • x86/mds: Add empty commit for CVE-2019-11091 (Patrick Colp) [Orabug: 29721936] {CVE-2019-11091}
  • x86/speculation/mds: Fix comment (Boris Ostrovsky) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Allow runtime checking of CPU features (Patrick Colp) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Improve coverage for MDS vulnerability (Boris Ostrovsky) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}
  • x86/speculation: Consolidate CPU whitelists (Thomas Gleixner) [Orabug: 29641784] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

dtrace-modules-3.8.13-118.33.2.el6uek

0.4.5-3.el6

kernel-uek

3.8.13-118.33.2.el6uek

kernel-uek-debug

3.8.13-118.33.2.el6uek

kernel-uek-debug-devel

3.8.13-118.33.2.el6uek

kernel-uek-devel

3.8.13-118.33.2.el6uek

kernel-uek-doc

3.8.13-118.33.2.el6uek

kernel-uek-firmware

3.8.13-118.33.2.el6uek

Oracle Linux 7

Oracle Linux x86_64

dtrace-modules-3.8.13-118.33.2.el7uek

0.4.5-3.el7

kernel-uek

3.8.13-118.33.2.el7uek

kernel-uek-debug

3.8.13-118.33.2.el7uek

kernel-uek-debug-devel

3.8.13-118.33.2.el7uek

kernel-uek-devel

3.8.13-118.33.2.el7uek

kernel-uek-doc

3.8.13-118.33.2.el7uek

kernel-uek-firmware

3.8.13-118.33.2.el7uek

Связанные уязвимости

suse-cvrf
почти 6 лет назад

Security update for ucode-intel

suse-cvrf
почти 6 лет назад

Security update for ucode-intel

suse-cvrf
около 6 лет назад

Security update for libvirt

suse-cvrf
около 6 лет назад

Security update for ucode-intel

suse-cvrf
около 6 лет назад

Security update for qemu