[ELSA-2019-1481] kernel security update

Severity Important

Affected Packages 13

CVEs 3

[3.10.0-957.21.3.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-957.21.3]
- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}

Package	Affected Version
pkg:rpm/oraclelinux/python-perf?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/perf?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-tools?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-tools-libs?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-tools-libs-devel?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-headers?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-doc?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-devel?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-debug?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-debug-devel?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/kernel-abi-whitelists?distro=oraclelinux-7	< 3.10.0-957.21.3.el7
pkg:rpm/oraclelinux/bpftool?distro=oraclelinux-7	< 3.10.0-957.21.3.el7

ID

ELSA-2019-1481

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2019-1481.html

Published

2019-06-18T00:00:00
(5 years ago)

Modified

2019-06-18T00:00:00
(5 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2019-1481	http://linux.oracle.com/errata/ELSA-2019-1481.html
CVE	CVE-2019-11477	http://linux.oracle.com/cve/CVE-2019-11477.html
CVE	CVE-2019-11479	http://linux.oracle.com/cve/CVE-2019-11479.html
CVE	CVE-2019-11478	http://linux.oracle.com/cve/CVE-2019-11478.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/python-perf?distro=oraclelinux-7	oraclelinux	python-perf	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/perf?distro=oraclelinux-7	oraclelinux	perf	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel?distro=oraclelinux-7	oraclelinux	kernel	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-tools?distro=oraclelinux-7	oraclelinux	kernel-tools	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-tools-libs?distro=oraclelinux-7	oraclelinux	kernel-tools-libs	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-tools-libs-devel?distro=oraclelinux-7	oraclelinux	kernel-tools-libs-devel	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-headers?distro=oraclelinux-7	oraclelinux	kernel-headers	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-doc?distro=oraclelinux-7	oraclelinux	kernel-doc	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-devel?distro=oraclelinux-7	oraclelinux	kernel-devel	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-debug?distro=oraclelinux-7	oraclelinux	kernel-debug	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-debug-devel?distro=oraclelinux-7	oraclelinux	kernel-debug-devel	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/kernel-abi-whitelists?distro=oraclelinux-7	oraclelinux	kernel-abi-whitelists	< 3.10.0-957.21.3.el7	oraclelinux-7
Affected	pkg:rpm/oraclelinux/bpftool?distro=oraclelinux-7	oraclelinux	bpftool	< 3.10.0-957.21.3.el7	oraclelinux-7

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date