Summary
kernel-uek
[3.8.13-118.51.2]
- Revert 'kexec: Validate pe files against the system_lacklist_keyring' (John Donnelly) [Orabug: 32171714] {CVE-2020-26541} {CVE-2020-26541}
[3.8.13-118.51.1]
- usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neukum) [Orabug: 31351090] {CVE-2019-19530}
- kexec: Validate pe files against the system_lacklist_keyring (Eric Snowberg) [Orabug: 31961121] {CVE-2020-26541}
- uek-rpm: Update secure boot UEK signing certificates (Brian Maly) [Orabug: 31974695]
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.51.2.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.51.2.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.51.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.51.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.51.2.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.51.2.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.51.2.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.51.2.el7uek |
Vulnerabilities 1
-
Unscored —
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dr…