Sigurnosni nedostataci jezgre operacijskog sustava

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: kernel security update
Advisory ID: RHSA-2020:4990-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2020:4990
Issue date: 2020-11-10
CVE Names: CVE-2020-12352
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.2
Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 7.2) – noarch, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 7.2) – x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* kernel: net: bluetooth: information leak when processing certain AMP
packets (CVE-2020-12352)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1886529 – CVE-2020-12352 kernel: net: bluetooth: information leak when processing certain AMP packets

6. Package List:

Red Hat Enterprise Linux Server AUS (v. 7.2):

Source:
kernel-3.10.0-327.93.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-327.93.1.el7.noarch.rpm
kernel-doc-3.10.0-327.93.1.el7.noarch.rpm

x86_64:
kernel-3.10.0-327.93.1.el7.x86_64.rpm
kernel-debug-3.10.0-327.93.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-327.93.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-327.93.1.el7.x86_64.rpm
kernel-devel-3.10.0-327.93.1.el7.x86_64.rpm
kernel-headers-3.10.0-327.93.1.el7.x86_64.rpm
kernel-tools-3.10.0-327.93.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-327.93.1.el7.x86_64.rpm
perf-3.10.0-327.93.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
python-perf-3.10.0-327.93.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 7.2):

x86_64:
kernel-debug-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-327.93.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-327.93.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-327.93.1.el7.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2020-12352
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/security/vulnerabilities/BleedingTooth

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
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=BUvG
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: kernel security and bug fix update
Advisory ID: RHSA-2020:4991-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2020:4991
Issue date: 2020-11-10
CVE Names: CVE-2020-12352
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.3
Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update
Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP
Solutions.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 7.3) – noarch, x86_64
Red Hat Enterprise Linux Server E4S (v. 7.3) – noarch, ppc64le, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 7.3) – x86_64
Red Hat Enterprise Linux Server Optional E4S (v. 7.3) – ppc64le, x86_64
Red Hat Enterprise Linux Server Optional TUS (v. 7.3) – x86_64
Red Hat Enterprise Linux Server TUS (v. 7.3) – noarch, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* kernel: net: bluetooth: information leak when processing certain AMP
packets (CVE-2020-12352)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Bug Fix(es):

* RHEL7.6: no-carrier configured interfaces causes soft lockups by
mount.nfs and hang booting/shutdown process (BZ#1889769)

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1886529 – CVE-2020-12352 kernel: net: bluetooth: information leak when processing certain AMP packets

6. Package List:

Red Hat Enterprise Linux Server AUS (v. 7.3):

Source:
kernel-3.10.0-514.85.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-514.85.1.el7.noarch.rpm
kernel-doc-3.10.0-514.85.1.el7.noarch.rpm

x86_64:
kernel-3.10.0-514.85.1.el7.x86_64.rpm
kernel-debug-3.10.0-514.85.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-514.85.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-514.85.1.el7.x86_64.rpm
kernel-devel-3.10.0-514.85.1.el7.x86_64.rpm
kernel-headers-3.10.0-514.85.1.el7.x86_64.rpm
kernel-tools-3.10.0-514.85.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-514.85.1.el7.x86_64.rpm
perf-3.10.0-514.85.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
python-perf-3.10.0-514.85.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm

Red Hat Enterprise Linux Server E4S (v. 7.3):

Source:
kernel-3.10.0-514.85.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-514.85.1.el7.noarch.rpm
kernel-doc-3.10.0-514.85.1.el7.noarch.rpm

ppc64le:
kernel-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-debug-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-devel-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-headers-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-tools-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-514.85.1.el7.ppc64le.rpm
perf-3.10.0-514.85.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
python-perf-3.10.0-514.85.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm

Red Hat Enterprise Linux Server TUS (v. 7.3):

Source:
kernel-3.10.0-514.85.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-514.85.1.el7.noarch.rpm
kernel-doc-3.10.0-514.85.1.el7.noarch.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 7.3):

x86_64:
kernel-debug-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-514.85.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-514.85.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-514.85.1.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional E4S (v. 7.3):

ppc64le:
kernel-debug-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-514.85.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-514.85.1.el7.ppc64le.rpm

Red Hat Enterprise Linux Server Optional TUS (v. 7.3):

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2020-12352
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/security/vulnerabilities/BleedingTooth

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
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=Kwj4
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: kernel security and bug fix update
Advisory ID: RHSA-2020:5023-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2020:5023
Issue date: 2020-11-10
CVE Names: CVE-2019-20811 CVE-2020-14331
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) – noarch, x86_64
Red Hat Enterprise Linux Client Optional (v. 7) – x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) – noarch, x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) – x86_64
Red Hat Enterprise Linux Server (v. 7) – noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) – ppc64, ppc64le, x86_64
Red Hat Enterprise Linux Workstation (v. 7) – noarch, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) – x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* kernel: buffer over write in vgacon_scroll (CVE-2020-14331)

* kernel: net-sysfs: *_queue_add_kobject refcount issue (CVE-2019-20811)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Bug Fix(es):

* [OSP13,mlx5] SRIOV VF still sending traffic when PF is down (BZ#1733181)

* gpf panic in virtio_check_driver_offered_fxature+6 when running sg_inq on
a dm map for a lost virtio_blk (BZ#1811893)

* GPF panic in qlt_free_session_done+626 (BZ#1826127)

* [ Brazos ] “Core(s) per socket” and “Socket” values are interchanged in
lscpu output. (kernel) (BZ#1826306)

* megaraid Aero: call trace observed during reboots (BZ#1828312)

* Crash in mptscsih_io_done() due to buffer overrun in sense_buf_pool
(BZ#1829803)

* The qedf driver fails to re-establish the online F/C port state when the
downstream F/C port is toggled unless a LIP is forced (BZ#1836443)

* tcp_fragment() limit causes packet drop under normal TCP load
(BZ#1847765)

* ip link command shows state as UNKNOWN for MACVLAN interface (BZ#1848950)

* Lenovo TS 7Z60 Cooper Lake: PCI BAR firmware bug (BZ#1849223)

* [RHEL-7/mlx4] ipoib_flush ipoib_ib_dev_flush_light [ib_ipoib]
(BZ#1858707)

* Uprobes crashes processes under GDB – SIGTRAP and SIGSEGV (BZ#1861396)

* kernel-3.10.0-1127.19.1.el7.x86_64 crashes after an SSH connection
attempt when running as a Xen PV guest on AMD Epyc Rome (BZ#1882468)

* Null ptr deref after nf_reinject->nf_queue_entry_release_refs hits
Attempt to release error doing inet_sock_destruct() (BZ#1885682)

Users of kernel are advised to upgrade to these updated packages, which fix
these bugs.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1846439 – CVE-2019-20811 kernel: net-sysfs: *_queue_add_kobject refcount issue
1858679 – CVE-2020-14331 kernel: kernel: buffer over write in vgacon_scroll

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
kernel-3.10.0-1160.6.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.6.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.6.1.el7.noarch.rpm

x86_64:
bpftool-3.10.0-1160.6.1.el7.x86_64.rpm
bpftool-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debug-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-devel-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-headers-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-tools-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1160.6.1.el7.x86_64.rpm
perf-3.10.0-1160.6.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
python-perf-3.10.0-1160.6.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
bpftool-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1160.6.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
kernel-3.10.0-1160.6.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.6.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.6.1.el7.noarch.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

Red Hat Enterprise Linux Server (v. 7):

Source:
kernel-3.10.0-1160.6.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.6.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.6.1.el7.noarch.rpm

ppc64:
bpftool-3.10.0-1160.6.1.el7.ppc64.rpm
bpftool-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-bootwrapper-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debug-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debug-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debug-devel-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-devel-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-headers-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-tools-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-tools-libs-3.10.0-1160.6.1.el7.ppc64.rpm
perf-3.10.0-1160.6.1.el7.ppc64.rpm
perf-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
python-perf-3.10.0-1160.6.1.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm

ppc64le:
bpftool-3.10.0-1160.6.1.el7.ppc64le.rpm
bpftool-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debug-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-devel-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-headers-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-tools-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-1160.6.1.el7.ppc64le.rpm
perf-3.10.0-1160.6.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
python-perf-3.10.0-1160.6.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm

s390x:
bpftool-3.10.0-1160.6.1.el7.s390x.rpm
bpftool-debuginfo-3.10.0-1160.6.1.el7.s390x.rpm
kernel-3.10.0-1160.6.1.el7.s390x.rpm
kernel-debug-3.10.0-1160.6.1.el7.s390x.rpm
kernel-debug-debuginfo-3.10.0-1160.6.1.el7.s390x.rpm
kernel-debug-devel-3.10.0-1160.6.1.el7.s390x.rpm
kernel-debuginfo-3.10.0-1160.6.1.el7.s390x.rpm
kernel-debuginfo-common-s390x-3.10.0-1160.6.1.el7.s390x.rpm
kernel-devel-3.10.0-1160.6.1.el7.s390x.rpm
kernel-headers-3.10.0-1160.6.1.el7.s390x.rpm
kernel-kdump-3.10.0-1160.6.1.el7.s390x.rpm
kernel-kdump-debuginfo-3.10.0-1160.6.1.el7.s390x.rpm
kernel-kdump-devel-3.10.0-1160.6.1.el7.s390x.rpm
perf-3.10.0-1160.6.1.el7.s390x.rpm
perf-debuginfo-3.10.0-1160.6.1.el7.s390x.rpm
python-perf-3.10.0-1160.6.1.el7.s390x.rpm
python-perf-debuginfo-3.10.0-1160.6.1.el7.s390x.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
bpftool-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debug-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
kernel-tools-libs-devel-3.10.0-1160.6.1.el7.ppc64.rpm
perf-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-1160.6.1.el7.ppc64.rpm

ppc64le:
bpftool-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-1160.6.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-1160.6.1.el7.ppc64le.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
kernel-3.10.0-1160.6.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.6.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.6.1.el7.noarch.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2019-20811
https://access.redhat.com/security/cve/CVE-2020-14331
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iQIVAwUBX6qTytzjgjWX9erEAQgpsQ//d5SO0sNqzdnCPNr6dyXWteKogId1Fr5s
2/MXzsJNgYuyf7J5uULw1tMOj0Hini/x2uzXuTQQhk1h59uDlETMqvXmu6iBV+7V
rWbrEruOLBTAszF99/uAs5LEC3OLymTewctGOllnIyR4cOaYkljw7Vp0sEt+UcI/
Izt9k+2ExgBCpq5nYwLSAlR1apa6H3mo0xxbc5Y+T72nueh9g0DrPiiMRBwhQZ23
ZLQI0/0h9RkXXFPPj8DkpqCCC8HzN5AsvQ8Uu56dkxq8dlQQMaMO9yRhJj8kaPCF
3S/NW0jRoW4WasCpAq5MnqxHlBNWtEGMFREIOwsA5H4I1rJPOKV2qaSRYyHTsbBA
RHzsmtCrZx2zd97EAG/igzp6zToufJ45Qbeh/tSASwvH2CFhIUbkjhKRftjXT+9U
VPZPqe6rMQPoDHo0WrRdoE5bExI1ySYBtkMHVR12IpyK3PCFmJtWafoRqcnfwmVr
oHSE6w2mDzjhCHlE/49yDMKsrVEIr4/7b12LPg1dKWeTT5C4cFUfy5glWPW9MZxZ
1Ip4dR6Ay8AzUngqhtebD3lAc0SCfRbO+KvANPRDQet1hUbr22my1xVDvQmxcUMP
SW/rNd/5N25lRH+NuTu1oDh7GqJrT+f4OafavOoexKjdRczTGxZns8T/YYNT8nbd
xvAVkDIV6pg=
=SH1a
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: kernel-rt security and bug fix update
Advisory ID: RHSA-2020:5026-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2020:5026
Issue date: 2020-11-10
CVE Names: CVE-2019-20811 CVE-2020-14331
=====================================================================

1. Summary:

An update for kernel-rt is now available for Red Hat Enterprise Linux 7.

2. Relevant releases/architectures:

Red Hat Enterprise Linux for Real Time (v. 7) – noarch, x86_64
Red Hat Enterprise Linux for Real Time for NFV (v. 7) – noarch, x86_64

3. Description:

The kernel-rt packages provide the Real Time Linux Kernel, which enables
fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: kernel: buffer over write in vgacon_scroll (CVE-2020-14331)

* kernel: net-sysfs: *_queue_add_kobject refcount issue (CVE-2019-20811)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Bug Fix(es):

* [RHEL-7.9] net/ipv6/ip6_flowlabel.c:85 suspicious rcu_dereference_check()
usage! (kernel-rt-debug) (BZ#1836846)

* md/raid: sleeping function called from invalid context triggered by CKI
storage/swraid/trim test (BZ#1857872)

* Infinite looping when trying to acquire eventpoll->mtx during
eventpoll_release_file, 2nd try (BZ#1877695)

* kernel-rt: update to the latest RHEL7.9.z1 source tree (BZ#1883995)

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1846439 – CVE-2019-20811 kernel: net-sysfs: *_queue_add_kobject refcount issue
1858679 – CVE-2020-14331 kernel: kernel: buffer over write in vgacon_scroll

6. Package List:

Red Hat Enterprise Linux for Real Time for NFV (v. 7):

Source:
kernel-rt-3.10.0-1160.6.1.rt56.1139.el7.src.rpm

noarch:
kernel-rt-doc-3.10.0-1160.6.1.rt56.1139.el7.noarch.rpm

x86_64:
kernel-rt-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-debug-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-debug-debuginfo-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-debug-devel-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-debug-kvm-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-debug-kvm-debuginfo-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-debuginfo-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-debuginfo-common-x86_64-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-devel-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-kvm-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-kvm-debuginfo-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-trace-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-trace-debuginfo-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-trace-devel-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-trace-kvm-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm
kernel-rt-trace-kvm-debuginfo-3.10.0-1160.6.1.rt56.1139.el7.x86_64.rpm

Red Hat Enterprise Linux for Real Time (v. 7):

Source:
kernel-rt-3.10.0-1160.6.1.rt56.1139.el7.src.rpm

noarch:
kernel-rt-doc-3.10.0-1160.6.1.rt56.1139.el7.noarch.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2019-20811
https://access.redhat.com/security/cve/CVE-2020-14331
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
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=qTwS
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

Sigurnosni nedostataci jezgre operacijskog sustava

Archives

More in Preporuke

Sigurnosni nedostaci programskog paketa bind