Summary
- [4.18.0-80.7.2_0.OL8]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
[4.18.0-80.7.2_0]
- [x86] x86/entry/64: Use JMP instead of JMPQ (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
- [x86] x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
- [x86] x86/cpufeatures: Carve out CQM features retrieval (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
- [kernel] ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (Aristeu Rozanski) [1730958 1730959] {CVE-2019-13272}
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-abi-whitelists | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-core | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-cross-headers | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-debug | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-debug-core | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-debug-devel | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-debug-modules | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-debug-modules-extra | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-devel | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-doc | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-headers | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-modules | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-modules-extra | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-tools | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-tools-libs | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | kernel-tools-libs-devel | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | perf | 0:4.18.0-80.7.2.el8_0 |
| Oracle Linux · 8 | python3-perf | 0:4.18.0-80.7.2.el8_0 |
Vulnerabilities 2
-
High 7.8
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proc…
KEV Dec 10, 2021 -
Medium 5.6CVE-2019-1125 Public exploit
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…