Skip to content
OpenAdvisories
High ELSA-2019-4672 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jun 6, 2019 · Updated Jun 6, 2019

Ecosystem: Oracle Linux

Summary

kernel-uek
[3.8.13-118.35.1]
- Bluetooth: hidp: fix buffer overflow (Young Xiao) [Orabug: 29786787] {CVE-2011-1079} {CVE-2019-11884}
- x86/speculation/mds: Fix verw usage to use memory operand (Patrick Colp) [Orabug: 29791038] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}
- x86/speculation/mds: Make cpu_vuln_whitelist __cpuinitconst (Patrick Colp) [Orabug: 29792023]
- x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner) [Orabug: 29792061] {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-118.35.1.el6uek 0:0.4.5-3.el6
Oracle Linux · 7 dtrace-modules-3.8.13-118.35.1.el7uek 0:0.4.5-3.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-118.35.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-118.35.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-118.35.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-118.35.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-118.35.1.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-118.35.1.el7uek

Vulnerabilities 5