Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-0374

Опубликовано: 05 фев. 2020
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2020-0374: kernel security and bug fix update (IMPORTANT)

[3.10.0-1062.12.1.OL7]

  • Oracle Linux certificates (Alexey Petrenko)
  • Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
  • Update x509.genkey [Orabug: 24817676]

[3.10.0-1062.12.1]

  • [powerpc] powerpc/pseries: Remove confusing warning message (Gustavo Duarte) [1780148 1748306]
  • [powerpc] powerpc/pseries: Call H_BLOCK_REMOVE when supported (Gustavo Duarte) [1780148 1748306]
  • [powerpc] powerpc/pseries: Read TLB Block Invalidate Characteristics (Gustavo Duarte) [1780148 1748306]
  • [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1776290 1750577]
  • [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1776290 1750577]
  • [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1776290 1750577]
  • [scsi] scsi: bnx2fc: remove set but not used variable 'fh' (Nilesh Javali) [1776290 1750577]
  • [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1767621 1764567]

[3.10.0-1062.11.1]

  • [tty] TTY: serial_core, add ->install (Kenneth Yin) [1780163 1443152]
  • [net] gro: fix use-after-free read in napi_gro_frags() (Paolo Abeni) [1780033 1750810]
  • [net] cfg80211: wext: avoid copying malformed SSIDs (Stanislaw Gruszka) [1778631 1778632]
  • [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777351 1749766]
  • [fs] gfs2: Use async glocks for rename (Robert S Peterson) [1777297 1677686]
  • [fs] gfs2: create function gfs2_glock_update_hold_time (Robert S Peterson) [1777297 1677686]
  • [fs] gfs2: separate holder for rgrps in gfs2_rename (Robert S Peterson) [1777297 1677686]
  • [wireless] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Stanislaw Gruszka) [1776615 1776616]
  • [x86] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1776289 1771849]
  • [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1776289 1756843]
  • [wireless] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Stanislaw Gruszka) [1776205 1776206]
  • [wireless] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Stanislaw Gruszka) [1776156 1776157] {CVE-2019-14901}
  • [fs] vfs: Fix EOVERFLOW testing in put_compat_statfs64 (Eric Sandeen) [1775678 1758001]
  • [x86] x86/atomic: Fix smp_mb__{before,after}_atomic() (Prarit Bhargava) [1772812 1769569]
  • [mm] mm-vmstat-reduce-zone-lock-holding-time-by-proc-pagetypeinfo-fix (Waiman Long) [1770732 1757943]
  • [mm] mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (Waiman Long) [1770732 1757943]
  • [mm] mm, vmstat: hide /proc/pagetypeinfo from normal users (Waiman Long) [1770732 1757943]
  • [md] dm rq: fix handling underlying queue busy (Ming Lei) [1770113 1767482]
  • [pci] hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1766097 1634251]
  • [pci] hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1766097 1634251]
  • [pci] hv: Serialize the present and eject work items (Mohammed Gamal) [1766097 1634251]
  • [netdrv] hv_netvsc: fix network namespace issues with VF support (Mohammed Gamal) [1766093 1741334]
  • [netdrv] hv_netvsc: move VF to same namespace as netvsc device (Mohammed Gamal) [1766093 1741334]
  • [netdrv] hv_netvsc: set master device (Mohammed Gamal) [1766093 1741334]
  • [pci] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it (Mohammed Gamal) [1766089 1737567]

[3.10.0-1062.10.1]

  • [net] netfilter: masquerade: don't flush all conntracks if only one address deleted on device (Patrick Talbert) [1779564 1771396]
  • [net] netfilter: conntrack: resched in nf_ct_iterate_cleanup (Patrick Talbert) [1779564 1771396]

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

bpftool

3.10.0-1062.12.1.el7

kernel

3.10.0-1062.12.1.el7

kernel-abi-whitelists

3.10.0-1062.12.1.el7

kernel-debug

3.10.0-1062.12.1.el7

kernel-debug-devel

3.10.0-1062.12.1.el7

kernel-devel

3.10.0-1062.12.1.el7

kernel-doc

3.10.0-1062.12.1.el7

kernel-headers

3.10.0-1062.12.1.el7

kernel-tools

3.10.0-1062.12.1.el7

kernel-tools-libs

3.10.0-1062.12.1.el7

kernel-tools-libs-devel

3.10.0-1062.12.1.el7

perf

3.10.0-1062.12.1.el7

python-perf

3.10.0-1062.12.1.el7

Связанные уязвимости

oracle-oval
больше 5 лет назад

ELSA-2020-0339: kernel security and bug fix update (IMPORTANT)

CVSS3: 9.8
ubuntu
больше 5 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

CVSS3: 8
redhat
больше 5 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

CVSS3: 9.8
nvd
больше 5 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

CVSS3: 9.8
debian
больше 5 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/w ...