Skip to content
OpenAdvisories
High ELSA-2019-4789 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 17, 2019 · Updated Sep 17, 2019

Ecosystem: Oracle Linux

Summary

[4.14.35-1902.5.2.1]
- vhost: make sure log_num < in_num (yongduan) [Orabug: 30312787] {CVE-2019-14835}
- vhost: block speculation of translated descriptors (Michael S. Tsirkin) [Orabug: 30312787] {CVE-2019-14835}
- vhost: Fix Spectre V1 vulnerability (Jason Wang) [Orabug: 30312787]

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 perf 0:4.14.35-1902.5.2.1.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-1902.5.2.1.el7uek

Vulnerabilities 1