Skip to content
OpenAdvisories
High ELSA-2019-4532 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Feb 6, 2019 · Updated Feb 6, 2019

Summary

kernel-uek
[3.8.13-118.30.1]
- ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094}
- ext4: always initialize the crc32c checksum driver (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094} {CVE-2018-1094}
- vfs: Add sb_rdonly(sb) to query the MS_RDONLY flag on s_flags (David Howells) [Orabug: 28220451] {CVE-2018-1094}
- ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen) [Orabug: 28852830] {CVE-2017-18204}
- Make file credentials available to the seqfile interfaces (Linus Torvalds) [Orabug: 29114878] {CVE-2018-17972}
- proc: restrict kernel stack dumps to root (Jann Horn) [Orabug: 29114878] {CVE-2018-17972}
- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (Qu Wenruo) [Orabug: 29301105] {CVE-2018-14609}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-118.30.1.el6uek 0:0.4.5-3.el6
Oracle Linux · 7 dtrace-modules-3.8.13-118.30.1.el7uek 0:0.4.5-3.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-118.30.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-118.30.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-118.30.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-118.30.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-118.30.1.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-118.30.1.el7uek

Vulnerabilities 4