Sigurnosni nedostaci programske jezgre

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security, bug fix, and enhancement update
Advisory ID: RHSA-2018:1318-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1318
Issue date: 2018-05-08
CVE Names: CVE-2017-16939 CVE-2018-1068 CVE-2018-1087
CVE-2018-1091 CVE-2018-8897 CVE-2018-1000199
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) – noarch, x86_64
Red Hat Enterprise Linux Client Optional (v. 7) – x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) – noarch, x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) – x86_64
Red Hat Enterprise Linux Server (v. 7) – noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) – ppc64, ppc64le, x86_64
Red Hat Enterprise Linux Workstation (v. 7) – noarch, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) – x86_64
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) – noarch, ppc64le, s390x
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) – noarch, ppc64le

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* Kernel: KVM: error in exception handling leads to wrong debug stack value
(CVE-2018-1087)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

* Kernel: ipsec: xfrm: use-after-free leading to potential privilege
escalation (CVE-2017-16939)

* kernel: Out-of-bounds write via userland offsets in ebt_entry struct in
netfilter/ebtables.c (CVE-2018-1068)

* kernel: ptrace() incorrect error handling leads to corruption and DoS
(CVE-2018-1000199)

* kernel: guest kernel crash during core dump on POWER9 host
(CVE-2018-1091)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Andy Lutomirski for reporting CVE-2018-1087 and
CVE-2018-1000199 and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski
for reporting CVE-2018-8897.

Bug Fix(es):

These updated kernel packages include also numerous bug fixes. Space
precludes documenting all of these bug fixes in this advisory. See the bug
fix descriptions in the related Knowledge Article:
https://access.redhat.com/articles/3431641

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1517220 – CVE-2017-16939 Kernel: ipsec: xfrm: use-after-free leading to potential privilege escalation
1552048 – CVE-2018-1068 kernel: Out-of-bounds write via userland offsets in ebt_entry struct in netfilter/ebtables.c
1558149 – CVE-2018-1091 kernel: guest kernel crash during core dump on POWER9 host
1566837 – CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS
1568477 – CVE-2018-1000199 kernel: ptrace() incorrect error handling leads to corruption and DoS

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
kernel-3.10.0-862.2.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-862.2.3.el7.noarch.rpm
kernel-doc-3.10.0-862.2.3.el7.noarch.rpm

x86_64:
kernel-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debug-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debug-devel-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-862.2.3.el7.x86_64.rpm
kernel-devel-3.10.0-862.2.3.el7.x86_64.rpm
kernel-headers-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-libs-3.10.0-862.2.3.el7.x86_64.rpm
perf-3.10.0-862.2.3.el7.x86_64.rpm
perf-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
python-perf-3.10.0-862.2.3.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
kernel-debug-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-862.2.3.el7.x86_64.rpm
perf-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-862.2.3.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
kernel-3.10.0-862.2.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-862.2.3.el7.noarch.rpm
kernel-doc-3.10.0-862.2.3.el7.noarch.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

Red Hat Enterprise Linux Server (v. 7):

Source:
kernel-3.10.0-862.2.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-862.2.3.el7.noarch.rpm
kernel-doc-3.10.0-862.2.3.el7.noarch.rpm

ppc64:
kernel-3.10.0-862.2.3.el7.ppc64.rpm
kernel-bootwrapper-3.10.0-862.2.3.el7.ppc64.rpm
kernel-debug-3.10.0-862.2.3.el7.ppc64.rpm
kernel-debug-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
kernel-debug-devel-3.10.0-862.2.3.el7.ppc64.rpm
kernel-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-862.2.3.el7.ppc64.rpm
kernel-devel-3.10.0-862.2.3.el7.ppc64.rpm
kernel-headers-3.10.0-862.2.3.el7.ppc64.rpm
kernel-tools-3.10.0-862.2.3.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
kernel-tools-libs-3.10.0-862.2.3.el7.ppc64.rpm
perf-3.10.0-862.2.3.el7.ppc64.rpm
perf-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
python-perf-3.10.0-862.2.3.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm

ppc64le:
kernel-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-debug-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-devel-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-headers-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-tools-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-862.2.3.el7.ppc64le.rpm
perf-3.10.0-862.2.3.el7.ppc64le.rpm
perf-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
python-perf-3.10.0-862.2.3.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm

s390x:
kernel-3.10.0-862.2.3.el7.s390x.rpm
kernel-debug-3.10.0-862.2.3.el7.s390x.rpm
kernel-debug-debuginfo-3.10.0-862.2.3.el7.s390x.rpm
kernel-debug-devel-3.10.0-862.2.3.el7.s390x.rpm
kernel-debuginfo-3.10.0-862.2.3.el7.s390x.rpm
kernel-debuginfo-common-s390x-3.10.0-862.2.3.el7.s390x.rpm
kernel-devel-3.10.0-862.2.3.el7.s390x.rpm
kernel-headers-3.10.0-862.2.3.el7.s390x.rpm
kernel-kdump-3.10.0-862.2.3.el7.s390x.rpm
kernel-kdump-debuginfo-3.10.0-862.2.3.el7.s390x.rpm
kernel-kdump-devel-3.10.0-862.2.3.el7.s390x.rpm
perf-3.10.0-862.2.3.el7.s390x.rpm
perf-debuginfo-3.10.0-862.2.3.el7.s390x.rpm
python-perf-3.10.0-862.2.3.el7.s390x.rpm
python-perf-debuginfo-3.10.0-862.2.3.el7.s390x.rpm

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7):

noarch:
kernel-abi-whitelists-3.10.0-862.2.3.el7.noarch.rpm
kernel-doc-3.10.0-862.2.3.el7.noarch.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
kernel-debug-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
kernel-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-862.2.3.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
kernel-tools-libs-devel-3.10.0-862.2.3.el7.ppc64.rpm
perf-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-862.2.3.el7.ppc64.rpm

ppc64le:
kernel-debug-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-862.2.3.el7.ppc64le.rpm
perf-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-862.2.3.el7.ppc64le.rpm

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7):

noarch:
kernel-doc-3.10.0-862.2.3.el7.noarch.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
kernel-3.10.0-862.2.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-862.2.3.el7.noarch.rpm
kernel-doc-3.10.0-862.2.3.el7.noarch.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2017-16939
https://access.redhat.com/security/cve/CVE-2018-1068
https://access.redhat.com/security/cve/CVE-2018-1087
https://access.redhat.com/security/cve/CVE-2018-1091
https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/cve/CVE-2018-1000199
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/articles/3431641

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8evCXlSAg2UNWIIRArfVAJkBoBiLSeqFIz+baibVTReRFZDjygCff6YB
NvzATG53DXsBLux92Ow7M4o=
=Sknh
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2018:1319-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1319
Issue date: 2018-05-08
CVE Names: CVE-2017-7645 CVE-2017-8824 CVE-2017-13166
CVE-2017-18017 CVE-2017-1000410 CVE-2018-8897
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 6.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop (v. 6) – i386, noarch, x86_64
Red Hat Enterprise Linux Desktop Optional (v. 6) – i386, x86_64
Red Hat Enterprise Linux HPC Node (v. 6) – noarch, x86_64
Red Hat Enterprise Linux HPC Node Optional (v. 6) – x86_64
Red Hat Enterprise Linux Server (v. 6) – i386, noarch, ppc64, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 6) – i386, ppc64, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 6) – i386, noarch, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 6) – i386, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* hw: cpu: speculative execution permission faults handling (CVE-2017-5754)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

* kernel: nfsd: Incorrect handling of long RPC replies (CVE-2017-7645)

* kernel: Use-after-free vulnerability in DCCP socket (CVE-2017-8824)

* kernel: v4l2: disabled memory access protection mechanism allowing
privilege escalation (CVE-2017-13166)

* kernel: netfilter: use-after-free in tcpmss_mangle_packet function in
net/netfilter/xt_TCPMSS.c (CVE-2017-18017)

* kernel: Stack information leak in the EFS element (CVE-2017-1000410)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Google Project Zero for reporting
CVE-2017-5754; Nick Peterson (Everdox Tech LLC) and Andy Lutomirski for
reporting CVE-2018-8897; Mohamed Ghannam for reporting CVE-2017-8824; and
Armis Labs for reporting CVE-2017-1000410.

Bug Fix(es):

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1443615 – CVE-2017-7645 kernel: nfsd: Incorrect handling of long RPC replies
1519160 – CVE-2017-1000410 kernel: Stack information leak in the EFS element
1519591 – CVE-2017-8824 kernel: Use-after-free vulnerability in DCCP socket
1519781 – CVE-2017-5754 hw: cpu: speculative execution permission faults handling
1531135 – CVE-2017-18017 kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c
1548412 – CVE-2017-13166 kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS

6. Package List:

Red Hat Enterprise Linux Desktop (v. 6):

Source:
kernel-2.6.32-696.28.1.el6.src.rpm

i386:
kernel-2.6.32-696.28.1.el6.i686.rpm
kernel-debug-2.6.32-696.28.1.el6.i686.rpm
kernel-debug-debuginfo-2.6.32-696.28.1.el6.i686.rpm
kernel-debug-devel-2.6.32-696.28.1.el6.i686.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.i686.rpm
kernel-debuginfo-common-i686-2.6.32-696.28.1.el6.i686.rpm
kernel-devel-2.6.32-696.28.1.el6.i686.rpm
kernel-headers-2.6.32-696.28.1.el6.i686.rpm
perf-2.6.32-696.28.1.el6.i686.rpm
perf-debuginfo-2.6.32-696.28.1.el6.i686.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.i686.rpm

noarch:
kernel-abi-whitelists-2.6.32-696.28.1.el6.noarch.rpm
kernel-doc-2.6.32-696.28.1.el6.noarch.rpm
kernel-firmware-2.6.32-696.28.1.el6.noarch.rpm

x86_64:
kernel-2.6.32-696.28.1.el6.x86_64.rpm
kernel-debug-2.6.32-696.28.1.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-696.28.1.el6.i686.rpm
kernel-debug-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-696.28.1.el6.i686.rpm
kernel-debug-devel-2.6.32-696.28.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.i686.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm
kernel-debuginfo-common-i686-2.6.32-696.28.1.el6.i686.rpm
kernel-debuginfo-common-x86_64-2.6.32-696.28.1.el6.x86_64.rpm
kernel-devel-2.6.32-696.28.1.el6.x86_64.rpm
kernel-headers-2.6.32-696.28.1.el6.x86_64.rpm
perf-2.6.32-696.28.1.el6.x86_64.rpm
perf-debuginfo-2.6.32-696.28.1.el6.i686.rpm
perf-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.i686.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm

Red Hat Enterprise Linux Desktop Optional (v. 6):

i386:
kernel-debug-debuginfo-2.6.32-696.28.1.el6.i686.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.i686.rpm
kernel-debuginfo-common-i686-2.6.32-696.28.1.el6.i686.rpm
perf-debuginfo-2.6.32-696.28.1.el6.i686.rpm
python-perf-2.6.32-696.28.1.el6.i686.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.i686.rpm

x86_64:
kernel-debug-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-696.28.1.el6.x86_64.rpm
perf-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm
python-perf-2.6.32-696.28.1.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.x86_64.rpm

Red Hat Enterprise Linux HPC Node (v. 6):

Source:
kernel-2.6.32-696.28.1.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-696.28.1.el6.noarch.rpm
kernel-doc-2.6.32-696.28.1.el6.noarch.rpm
kernel-firmware-2.6.32-696.28.1.el6.noarch.rpm

Red Hat Enterprise Linux HPC Node Optional (v. 6):

Red Hat Enterprise Linux Server (v. 6):

Source:
kernel-2.6.32-696.28.1.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-696.28.1.el6.noarch.rpm
kernel-doc-2.6.32-696.28.1.el6.noarch.rpm
kernel-firmware-2.6.32-696.28.1.el6.noarch.rpm

ppc64:
kernel-2.6.32-696.28.1.el6.ppc64.rpm
kernel-bootwrapper-2.6.32-696.28.1.el6.ppc64.rpm
kernel-debug-2.6.32-696.28.1.el6.ppc64.rpm
kernel-debug-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm
kernel-debug-devel-2.6.32-696.28.1.el6.ppc64.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm
kernel-debuginfo-common-ppc64-2.6.32-696.28.1.el6.ppc64.rpm
kernel-devel-2.6.32-696.28.1.el6.ppc64.rpm
kernel-headers-2.6.32-696.28.1.el6.ppc64.rpm
perf-2.6.32-696.28.1.el6.ppc64.rpm
perf-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm

s390x:
kernel-2.6.32-696.28.1.el6.s390x.rpm
kernel-debug-2.6.32-696.28.1.el6.s390x.rpm
kernel-debug-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
kernel-debug-devel-2.6.32-696.28.1.el6.s390x.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
kernel-debuginfo-common-s390x-2.6.32-696.28.1.el6.s390x.rpm
kernel-devel-2.6.32-696.28.1.el6.s390x.rpm
kernel-headers-2.6.32-696.28.1.el6.s390x.rpm
kernel-kdump-2.6.32-696.28.1.el6.s390x.rpm
kernel-kdump-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
kernel-kdump-devel-2.6.32-696.28.1.el6.s390x.rpm
perf-2.6.32-696.28.1.el6.s390x.rpm
perf-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.s390x.rpm

Red Hat Enterprise Linux Server Optional (v. 6):

ppc64:
kernel-debug-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm
kernel-debuginfo-common-ppc64-2.6.32-696.28.1.el6.ppc64.rpm
perf-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm
python-perf-2.6.32-696.28.1.el6.ppc64.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.ppc64.rpm

s390x:
kernel-debug-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
kernel-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
kernel-debuginfo-common-s390x-2.6.32-696.28.1.el6.s390x.rpm
kernel-kdump-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
perf-debuginfo-2.6.32-696.28.1.el6.s390x.rpm
python-perf-2.6.32-696.28.1.el6.s390x.rpm
python-perf-debuginfo-2.6.32-696.28.1.el6.s390x.rpm

Red Hat Enterprise Linux Workstation (v. 6):

Source:
kernel-2.6.32-696.28.1.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-696.28.1.el6.noarch.rpm
kernel-doc-2.6.32-696.28.1.el6.noarch.rpm
kernel-firmware-2.6.32-696.28.1.el6.noarch.rpm

Red Hat Enterprise Linux Workstation Optional (v. 6):

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2017-7645
https://access.redhat.com/security/cve/CVE-2017-8824
https://access.redhat.com/security/cve/CVE-2017-13166
https://access.redhat.com/security/cve/CVE-2017-18017
https://access.redhat.com/security/cve/CVE-2017-1000410
https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/articles/3431591

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8fO8XlSAg2UNWIIRAnN0AKCBdjdw1bC12xju0GwoOedA1L8osACaA1Ze
4IKrbiFeHd+C9bqCjUFX4pw=
=3psi
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security update
Advisory ID: RHSA-2018:1345-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1345
Issue date: 2018-05-08
CVE Names: CVE-2018-1087 CVE-2018-8897 CVE-2018-1000199
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.4
Extended Update Support.

2. Relevant releases/architectures:

Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) – noarch, x86_64
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) – x86_64
Red Hat Enterprise Linux Server EUS (v. 7.4) – noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional EUS (v. 7.4) – noarch, ppc64, ppc64le, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* Kernel: KVM: error in exception handling leads to wrong debug stack value
(CVE-2018-1087)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

* kernel: ptrace() incorrect error handling leads to corruption and DoS
(CVE-2018-1000199)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Andy Lutomirski for reporting CVE-2018-1087 and
CVE-2018-1000199 and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski
for reporting CVE-2018-8897.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1566837 – CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS
1568477 – CVE-2018-1000199 kernel: ptrace() incorrect error handling leads to corruption and DoS

6. Package List:

Red Hat Enterprise Linux ComputeNode EUS (v. 7.4):

Source:
kernel-3.10.0-693.25.4.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-693.25.4.el7.noarch.rpm
kernel-doc-3.10.0-693.25.4.el7.noarch.rpm

x86_64:
kernel-3.10.0-693.25.4.el7.x86_64.rpm
kernel-debug-3.10.0-693.25.4.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
kernel-debug-devel-3.10.0-693.25.4.el7.x86_64.rpm
kernel-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-693.25.4.el7.x86_64.rpm
kernel-devel-3.10.0-693.25.4.el7.x86_64.rpm
kernel-headers-3.10.0-693.25.4.el7.x86_64.rpm
kernel-tools-3.10.0-693.25.4.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
kernel-tools-libs-3.10.0-693.25.4.el7.x86_64.rpm
perf-3.10.0-693.25.4.el7.x86_64.rpm
perf-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
python-perf-3.10.0-693.25.4.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4):

x86_64:
kernel-debug-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
kernel-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-693.25.4.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-693.25.4.el7.x86_64.rpm
perf-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-693.25.4.el7.x86_64.rpm

Red Hat Enterprise Linux Server EUS (v. 7.4):

Source:
kernel-3.10.0-693.25.4.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-693.25.4.el7.noarch.rpm
kernel-doc-3.10.0-693.25.4.el7.noarch.rpm

ppc64:
kernel-3.10.0-693.25.4.el7.ppc64.rpm
kernel-bootwrapper-3.10.0-693.25.4.el7.ppc64.rpm
kernel-debug-3.10.0-693.25.4.el7.ppc64.rpm
kernel-debug-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
kernel-debug-devel-3.10.0-693.25.4.el7.ppc64.rpm
kernel-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-693.25.4.el7.ppc64.rpm
kernel-devel-3.10.0-693.25.4.el7.ppc64.rpm
kernel-headers-3.10.0-693.25.4.el7.ppc64.rpm
kernel-tools-3.10.0-693.25.4.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
kernel-tools-libs-3.10.0-693.25.4.el7.ppc64.rpm
perf-3.10.0-693.25.4.el7.ppc64.rpm
perf-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
python-perf-3.10.0-693.25.4.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm

ppc64le:
kernel-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-debug-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-devel-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-headers-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-tools-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-693.25.4.el7.ppc64le.rpm
perf-3.10.0-693.25.4.el7.ppc64le.rpm
perf-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
python-perf-3.10.0-693.25.4.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm

s390x:
kernel-3.10.0-693.25.4.el7.s390x.rpm
kernel-debug-3.10.0-693.25.4.el7.s390x.rpm
kernel-debug-debuginfo-3.10.0-693.25.4.el7.s390x.rpm
kernel-debug-devel-3.10.0-693.25.4.el7.s390x.rpm
kernel-debuginfo-3.10.0-693.25.4.el7.s390x.rpm
kernel-debuginfo-common-s390x-3.10.0-693.25.4.el7.s390x.rpm
kernel-devel-3.10.0-693.25.4.el7.s390x.rpm
kernel-headers-3.10.0-693.25.4.el7.s390x.rpm
kernel-kdump-3.10.0-693.25.4.el7.s390x.rpm
kernel-kdump-debuginfo-3.10.0-693.25.4.el7.s390x.rpm
kernel-kdump-devel-3.10.0-693.25.4.el7.s390x.rpm
perf-3.10.0-693.25.4.el7.s390x.rpm
perf-debuginfo-3.10.0-693.25.4.el7.s390x.rpm
python-perf-3.10.0-693.25.4.el7.s390x.rpm
python-perf-debuginfo-3.10.0-693.25.4.el7.s390x.rpm

Red Hat Enterprise Linux Server Optional EUS (v. 7.4):

noarch:
kernel-doc-3.10.0-693.25.4.el7.noarch.rpm

ppc64:
kernel-debug-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
kernel-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-693.25.4.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
kernel-tools-libs-devel-3.10.0-693.25.4.el7.ppc64.rpm
perf-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-693.25.4.el7.ppc64.rpm

ppc64le:
kernel-debug-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-693.25.4.el7.ppc64le.rpm
perf-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-693.25.4.el7.ppc64le.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-1087
https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/cve/CVE-2018-1000199
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8f82XlSAg2UNWIIRAmdHAJsHdMunEKNUy8QOsW4n0kzPy2gwlgCfbvSi
i1pABwheuGvkWWsL1GHuQ+c=
=dDVY
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2018:1346-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1346
Issue date: 2018-05-08
CVE Names: CVE-2018-8897
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 6.7
Extended Update Support.

2. Relevant releases/architectures:

Red Hat Enterprise Linux HPC Node EUS (v. 6.7) – noarch, x86_64
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) – x86_64
Red Hat Enterprise Linux Server EUS (v. 6.7) – i386, noarch, ppc64, s390x, x86_64
Red Hat Enterprise Linux Server Optional EUS (v. 6.7) – i386, ppc64, s390x, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* hw: cpu: speculative execution permission faults handling (CVE-2017-5754)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Google Project Zero for reporting CVE-2017-5754
and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski for reporting
CVE-2018-8897.

Bug Fix(es):

* The kernel build requirements have been updated to the GNU Compiler
Collection (GCC) compiler version that has the support for Retpolines. The
Retpolines mechanism is a software construct that leverages specific
knowledge of the underlying hardware to mitigate the branch target
injection, also known as Spectre variant 2 vulnerability described in
CVE-2017-5715. (BZ#1554253)

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1519781 – CVE-2017-5754 hw: cpu: speculative execution permission faults handling
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS

6. Package List:

Red Hat Enterprise Linux HPC Node EUS (v. 6.7):

Source:
kernel-2.6.32-573.55.2.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-573.55.2.el6.noarch.rpm
kernel-doc-2.6.32-573.55.2.el6.noarch.rpm
kernel-firmware-2.6.32-573.55.2.el6.noarch.rpm

x86_64:
kernel-2.6.32-573.55.2.el6.x86_64.rpm
kernel-debug-2.6.32-573.55.2.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-573.55.2.el6.i686.rpm
kernel-debug-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm
kernel-debug-devel-2.6.32-573.55.2.el6.i686.rpm
kernel-debug-devel-2.6.32-573.55.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.i686.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm
kernel-debuginfo-common-i686-2.6.32-573.55.2.el6.i686.rpm
kernel-debuginfo-common-x86_64-2.6.32-573.55.2.el6.x86_64.rpm
kernel-devel-2.6.32-573.55.2.el6.x86_64.rpm
kernel-headers-2.6.32-573.55.2.el6.x86_64.rpm
perf-2.6.32-573.55.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-573.55.2.el6.i686.rpm
perf-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.i686.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm

Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7):

x86_64:
kernel-debug-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-573.55.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm
python-perf-2.6.32-573.55.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.x86_64.rpm

Red Hat Enterprise Linux Server EUS (v. 6.7):

Source:
kernel-2.6.32-573.55.2.el6.src.rpm

i386:
kernel-2.6.32-573.55.2.el6.i686.rpm
kernel-debug-2.6.32-573.55.2.el6.i686.rpm
kernel-debug-debuginfo-2.6.32-573.55.2.el6.i686.rpm
kernel-debug-devel-2.6.32-573.55.2.el6.i686.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.i686.rpm
kernel-debuginfo-common-i686-2.6.32-573.55.2.el6.i686.rpm
kernel-devel-2.6.32-573.55.2.el6.i686.rpm
kernel-headers-2.6.32-573.55.2.el6.i686.rpm
perf-2.6.32-573.55.2.el6.i686.rpm
perf-debuginfo-2.6.32-573.55.2.el6.i686.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.i686.rpm

noarch:
kernel-abi-whitelists-2.6.32-573.55.2.el6.noarch.rpm
kernel-doc-2.6.32-573.55.2.el6.noarch.rpm
kernel-firmware-2.6.32-573.55.2.el6.noarch.rpm

ppc64:
kernel-2.6.32-573.55.2.el6.ppc64.rpm
kernel-bootwrapper-2.6.32-573.55.2.el6.ppc64.rpm
kernel-debug-2.6.32-573.55.2.el6.ppc64.rpm
kernel-debug-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm
kernel-debug-devel-2.6.32-573.55.2.el6.ppc64.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm
kernel-debuginfo-common-ppc64-2.6.32-573.55.2.el6.ppc64.rpm
kernel-devel-2.6.32-573.55.2.el6.ppc64.rpm
kernel-headers-2.6.32-573.55.2.el6.ppc64.rpm
perf-2.6.32-573.55.2.el6.ppc64.rpm
perf-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm

s390x:
kernel-2.6.32-573.55.2.el6.s390x.rpm
kernel-debug-2.6.32-573.55.2.el6.s390x.rpm
kernel-debug-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
kernel-debug-devel-2.6.32-573.55.2.el6.s390x.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
kernel-debuginfo-common-s390x-2.6.32-573.55.2.el6.s390x.rpm
kernel-devel-2.6.32-573.55.2.el6.s390x.rpm
kernel-headers-2.6.32-573.55.2.el6.s390x.rpm
kernel-kdump-2.6.32-573.55.2.el6.s390x.rpm
kernel-kdump-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
kernel-kdump-devel-2.6.32-573.55.2.el6.s390x.rpm
perf-2.6.32-573.55.2.el6.s390x.rpm
perf-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.s390x.rpm

Red Hat Enterprise Linux Server Optional EUS (v. 6.7):

i386:
kernel-debug-debuginfo-2.6.32-573.55.2.el6.i686.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.i686.rpm
kernel-debuginfo-common-i686-2.6.32-573.55.2.el6.i686.rpm
perf-debuginfo-2.6.32-573.55.2.el6.i686.rpm
python-perf-2.6.32-573.55.2.el6.i686.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.i686.rpm

ppc64:
kernel-debug-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm
kernel-debuginfo-common-ppc64-2.6.32-573.55.2.el6.ppc64.rpm
perf-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm
python-perf-2.6.32-573.55.2.el6.ppc64.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.ppc64.rpm

s390x:
kernel-debug-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
kernel-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
kernel-debuginfo-common-s390x-2.6.32-573.55.2.el6.s390x.rpm
kernel-kdump-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
perf-debuginfo-2.6.32-573.55.2.el6.s390x.rpm
python-perf-2.6.32-573.55.2.el6.s390x.rpm
python-perf-debuginfo-2.6.32-573.55.2.el6.s390x.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/security/cve/CVE-2017-5754

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8g7oXlSAg2UNWIIRAndxAKCjJ6nGTifr5N0rmAwWKT7WceVyAQCdH82L
J6aZnn57/d8D1n9wFnC2OOg=
=YzSF
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security update
Advisory ID: RHSA-2018:1347-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1347
Issue date: 2018-05-08
CVE Names: CVE-2018-1087 CVE-2018-8897 CVE-2018-1000199
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.2
Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update
Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP
Solutions.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 7.2) – noarch, x86_64
Red Hat Enterprise Linux Server E4S (v. 7.2) – noarch, ppc64le, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 7.2) – x86_64
Red Hat Enterprise Linux Server Optional E4S (v. 7.2) – ppc64le, x86_64
Red Hat Enterprise Linux Server Optional TUS (v. 7.2) – x86_64
Red Hat Enterprise Linux Server TUS (v. 7.2) – noarch, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* Kernel: KVM: error in exception handling leads to wrong debug stack value
(CVE-2018-1087)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

* kernel: ptrace() incorrect error handling leads to corruption and DoS
(CVE-2018-1000199)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Andy Lutomirski for reporting CVE-2018-1087 and
CVE-2018-1000199 and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski
for reporting CVE-2018-8897.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

6. Package List:

Red Hat Enterprise Linux Server AUS (v. 7.2):

Source:
kernel-3.10.0-327.66.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-327.66.3.el7.noarch.rpm
kernel-doc-3.10.0-327.66.3.el7.noarch.rpm

x86_64:
kernel-3.10.0-327.66.3.el7.x86_64.rpm
kernel-debug-3.10.0-327.66.3.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
kernel-debug-devel-3.10.0-327.66.3.el7.x86_64.rpm
kernel-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-327.66.3.el7.x86_64.rpm
kernel-devel-3.10.0-327.66.3.el7.x86_64.rpm
kernel-headers-3.10.0-327.66.3.el7.x86_64.rpm
kernel-tools-3.10.0-327.66.3.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
kernel-tools-libs-3.10.0-327.66.3.el7.x86_64.rpm
perf-3.10.0-327.66.3.el7.x86_64.rpm
perf-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
python-perf-3.10.0-327.66.3.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm

Red Hat Enterprise Linux Server E4S (v. 7.2):

Source:
kernel-3.10.0-327.66.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-327.66.3.el7.noarch.rpm
kernel-doc-3.10.0-327.66.3.el7.noarch.rpm

ppc64le:
kernel-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-debug-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-devel-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-headers-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-tools-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-327.66.3.el7.ppc64le.rpm
perf-3.10.0-327.66.3.el7.ppc64le.rpm
perf-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
python-perf-3.10.0-327.66.3.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm

Red Hat Enterprise Linux Server TUS (v. 7.2):

Source:
kernel-3.10.0-327.66.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-327.66.3.el7.noarch.rpm
kernel-doc-3.10.0-327.66.3.el7.noarch.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 7.2):

x86_64:
kernel-debug-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
kernel-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-327.66.3.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-327.66.3.el7.x86_64.rpm
perf-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-327.66.3.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional E4S (v. 7.2):

ppc64le:
kernel-debug-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-327.66.3.el7.ppc64le.rpm
perf-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-327.66.3.el7.ppc64le.rpm

Red Hat Enterprise Linux Server Optional TUS (v. 7.2):

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8hjAXlSAg2UNWIIRAkH1AKCosff5yYgtYpdAUcf3SnlQOGVZfgCgiEYR
g6/4/EzMBa+lSt9QhxSqC18=
=IYAU
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security update
Advisory ID: RHSA-2018:1348-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1348
Issue date: 2018-05-08
CVE Names: CVE-2018-1087 CVE-2018-8897 CVE-2018-1000199
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.3
Extended Update Support.

2. Relevant releases/architectures:

Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) – noarch, x86_64
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) – x86_64
Red Hat Enterprise Linux Server EUS (v. 7.3) – noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional EUS (v. 7.3) – ppc64, ppc64le, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* Kernel: KVM: error in exception handling leads to wrong debug stack value
(CVE-2018-1087)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

* kernel: ptrace() incorrect error handling leads to corruption and DoS
(CVE-2018-1000199)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Andy Lutomirski for reporting CVE-2018-1087 and
CVE-2018-1000199 and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski
for reporting CVE-2018-8897.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

6. Package List:

Red Hat Enterprise Linux ComputeNode EUS (v. 7.3):

Source:
kernel-3.10.0-514.48.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-514.48.3.el7.noarch.rpm
kernel-doc-3.10.0-514.48.3.el7.noarch.rpm

x86_64:
kernel-3.10.0-514.48.3.el7.x86_64.rpm
kernel-debug-3.10.0-514.48.3.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
kernel-debug-devel-3.10.0-514.48.3.el7.x86_64.rpm
kernel-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-514.48.3.el7.x86_64.rpm
kernel-devel-3.10.0-514.48.3.el7.x86_64.rpm
kernel-headers-3.10.0-514.48.3.el7.x86_64.rpm
kernel-tools-3.10.0-514.48.3.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
kernel-tools-libs-3.10.0-514.48.3.el7.x86_64.rpm
perf-3.10.0-514.48.3.el7.x86_64.rpm
perf-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
python-perf-3.10.0-514.48.3.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3):

x86_64:
kernel-debug-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
kernel-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-514.48.3.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-514.48.3.el7.x86_64.rpm
perf-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-514.48.3.el7.x86_64.rpm

Red Hat Enterprise Linux Server EUS (v. 7.3):

Source:
kernel-3.10.0-514.48.3.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-514.48.3.el7.noarch.rpm
kernel-doc-3.10.0-514.48.3.el7.noarch.rpm

ppc64:
kernel-3.10.0-514.48.3.el7.ppc64.rpm
kernel-bootwrapper-3.10.0-514.48.3.el7.ppc64.rpm
kernel-debug-3.10.0-514.48.3.el7.ppc64.rpm
kernel-debug-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
kernel-debug-devel-3.10.0-514.48.3.el7.ppc64.rpm
kernel-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-514.48.3.el7.ppc64.rpm
kernel-devel-3.10.0-514.48.3.el7.ppc64.rpm
kernel-headers-3.10.0-514.48.3.el7.ppc64.rpm
kernel-tools-3.10.0-514.48.3.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
kernel-tools-libs-3.10.0-514.48.3.el7.ppc64.rpm
perf-3.10.0-514.48.3.el7.ppc64.rpm
perf-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
python-perf-3.10.0-514.48.3.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm

ppc64le:
kernel-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-debug-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-devel-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-headers-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-tools-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-514.48.3.el7.ppc64le.rpm
perf-3.10.0-514.48.3.el7.ppc64le.rpm
perf-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
python-perf-3.10.0-514.48.3.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm

s390x:
kernel-3.10.0-514.48.3.el7.s390x.rpm
kernel-debug-3.10.0-514.48.3.el7.s390x.rpm
kernel-debug-debuginfo-3.10.0-514.48.3.el7.s390x.rpm
kernel-debug-devel-3.10.0-514.48.3.el7.s390x.rpm
kernel-debuginfo-3.10.0-514.48.3.el7.s390x.rpm
kernel-debuginfo-common-s390x-3.10.0-514.48.3.el7.s390x.rpm
kernel-devel-3.10.0-514.48.3.el7.s390x.rpm
kernel-headers-3.10.0-514.48.3.el7.s390x.rpm
kernel-kdump-3.10.0-514.48.3.el7.s390x.rpm
kernel-kdump-debuginfo-3.10.0-514.48.3.el7.s390x.rpm
kernel-kdump-devel-3.10.0-514.48.3.el7.s390x.rpm
perf-3.10.0-514.48.3.el7.s390x.rpm
perf-debuginfo-3.10.0-514.48.3.el7.s390x.rpm
python-perf-3.10.0-514.48.3.el7.s390x.rpm
python-perf-debuginfo-3.10.0-514.48.3.el7.s390x.rpm

Red Hat Enterprise Linux Server Optional EUS (v. 7.3):

ppc64:
kernel-debug-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
kernel-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-514.48.3.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
kernel-tools-libs-devel-3.10.0-514.48.3.el7.ppc64.rpm
perf-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-514.48.3.el7.ppc64.rpm

ppc64le:
kernel-debug-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-514.48.3.el7.ppc64le.rpm
perf-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-514.48.3.el7.ppc64le.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8hyBXlSAg2UNWIIRAneEAKCislWXxms+w2cocgWLD3Mu2HMHkwCgiR+2
i4C0UytgQXhOcPkztivUlaU=
=N2cw
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2018:1349-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1349
Issue date: 2018-05-08
CVE Names: CVE-2018-8897
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 6.4
Advanced Update Support.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 6.4) – noarch, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) – x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* hw: cpu: speculative execution permission faults handling (CVE-2017-5754)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Google Project Zero for reporting CVE-2017-5754
and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski for reporting
CVE-2018-8897.

Bug Fix(es):

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1519781 – CVE-2017-5754 hw: cpu: speculative execution permission faults handling
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS

6. Package List:

Red Hat Enterprise Linux Server AUS (v. 6.4):

Source:
kernel-2.6.32-358.88.2.el6.src.rpm

noarch:
kernel-doc-2.6.32-358.88.2.el6.noarch.rpm
kernel-firmware-2.6.32-358.88.2.el6.noarch.rpm

x86_64:
kernel-2.6.32-358.88.2.el6.x86_64.rpm
kernel-debug-2.6.32-358.88.2.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm
kernel-debug-devel-2.6.32-358.88.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-358.88.2.el6.x86_64.rpm
kernel-devel-2.6.32-358.88.2.el6.x86_64.rpm
kernel-headers-2.6.32-358.88.2.el6.x86_64.rpm
perf-2.6.32-358.88.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 6.4):

Source:
kernel-2.6.32-358.88.2.el6.src.rpm

x86_64:
kernel-debug-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-358.88.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm
python-perf-2.6.32-358.88.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-358.88.2.el6.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/security/vulnerabilities/speculativeexecution
https://access.redhat.com/security/cve/CVE-2017-5754

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8htTXlSAg2UNWIIRAsuqAKC93+HCKfnfgMDO8v1w/ycDQbI/yQCfZ/ks
BEICWonS5nSGHJnO4nnuGC4=
=t1PV
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2018:1350-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1350
Issue date: 2018-05-08
CVE Names: CVE-2018-8897
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 6.5
Advanced Update Support.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 6.5) – noarch, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 6.5) – x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* hw: cpu: speculative execution permission faults handling (CVE-2017-5754)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Google Project Zero for reporting CVE-2017-5754
and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski for reporting
CVE-2018-8897.

Bug Fix(es):

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1519781 – CVE-2017-5754 hw: cpu: speculative execution permission faults handling
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS

6. Package List:

Red Hat Enterprise Linux Server AUS (v. 6.5):

Source:
kernel-2.6.32-431.89.2.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-431.89.2.el6.noarch.rpm
kernel-doc-2.6.32-431.89.2.el6.noarch.rpm
kernel-firmware-2.6.32-431.89.2.el6.noarch.rpm

x86_64:
kernel-2.6.32-431.89.2.el6.x86_64.rpm
kernel-debug-2.6.32-431.89.2.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm
kernel-debug-devel-2.6.32-431.89.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-431.89.2.el6.x86_64.rpm
kernel-devel-2.6.32-431.89.2.el6.x86_64.rpm
kernel-headers-2.6.32-431.89.2.el6.x86_64.rpm
perf-2.6.32-431.89.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 6.5):

Source:
kernel-2.6.32-431.89.2.el6.src.rpm

x86_64:
kernel-debug-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-431.89.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm
python-perf-2.6.32-431.89.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-431.89.2.el6.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/security/vulnerabilities/pop_ss

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8hvKXlSAg2UNWIIRAvCoAKCrEraZTAKb6k1+NKGxkKuoFJmjxQCfd3+W
M3Tnq5O0vVssiAFfRAailKM=
=MXkg
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2018:1351-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1351
Issue date: 2018-05-08
CVE Names: CVE-2018-8897
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 6.6
Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended
Update Support.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 6.6) – noarch, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 6.6) – x86_64
Red Hat Enterprise Linux Server Optional TUS (v. 6.6) – x86_64
Red Hat Enterprise Linux Server TUS (v. 6.6) – noarch, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* hw: cpu: speculative execution permission faults handling (CVE-2017-5754)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Google Project Zero for reporting CVE-2017-5754
and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski for reporting
CVE-2018-8897.

Bug Fix(es):

* If an NFSv3 client mounted a subdirectory of an exported file system, a
directory entry to the mount hosting the export was incorrectly held even
after clearing the cache. Consequently, attempts to unmount the
subdirectory with the umount command failed with the EBUSY error. With this
update, the underlying source code has been fixed, and the unmount
operation now succeeds as expected in the described situation. (BZ#1538588)

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1519781 – CVE-2017-5754 hw: cpu: speculative execution permission faults handling
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS

6. Package List:

Red Hat Enterprise Linux Server AUS (v. 6.6):

Source:
kernel-2.6.32-504.68.2.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-504.68.2.el6.noarch.rpm
kernel-doc-2.6.32-504.68.2.el6.noarch.rpm
kernel-firmware-2.6.32-504.68.2.el6.noarch.rpm

x86_64:
kernel-2.6.32-504.68.2.el6.x86_64.rpm
kernel-debug-2.6.32-504.68.2.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm
kernel-debug-devel-2.6.32-504.68.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-504.68.2.el6.x86_64.rpm
kernel-devel-2.6.32-504.68.2.el6.x86_64.rpm
kernel-headers-2.6.32-504.68.2.el6.x86_64.rpm
perf-2.6.32-504.68.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm

Red Hat Enterprise Linux Server TUS (v. 6.6):

Source:
kernel-2.6.32-504.68.2.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-504.68.2.el6.noarch.rpm
kernel-doc-2.6.32-504.68.2.el6.noarch.rpm
kernel-firmware-2.6.32-504.68.2.el6.noarch.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 6.6):

x86_64:
kernel-debug-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm
kernel-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-504.68.2.el6.x86_64.rpm
perf-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm
python-perf-2.6.32-504.68.2.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-504.68.2.el6.x86_64.rpm

Red Hat Enterprise Linux Server Optional TUS (v. 6.6):

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8hvVXlSAg2UNWIIRAvxpAKCyATOJJVz4FToyT99jA7Pkzy2vTACcD5H5
F4NmZtCYwfkBTxlNHHeXy/8=
=SAH1
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: kernel security update
Advisory ID: RHSA-2018:1352-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1352
Issue date: 2018-05-08
CVE Names: CVE-2018-8897
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long
Life.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Long Life (v. 5.9 server) – i386, ia64, noarch, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Nick Peterson (Everdox Tech LLC) and Andy
Lutomirski for reporting this issue.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS

6. Package List:

Red Hat Enterprise Linux Long Life (v. 5.9 server):

Source:
kernel-2.6.18-348.39.2.el5.src.rpm

i386:
kernel-2.6.18-348.39.2.el5.i686.rpm
kernel-PAE-2.6.18-348.39.2.el5.i686.rpm
kernel-PAE-debuginfo-2.6.18-348.39.2.el5.i686.rpm
kernel-PAE-devel-2.6.18-348.39.2.el5.i686.rpm
kernel-debug-2.6.18-348.39.2.el5.i686.rpm
kernel-debug-debuginfo-2.6.18-348.39.2.el5.i686.rpm
kernel-debug-devel-2.6.18-348.39.2.el5.i686.rpm
kernel-debuginfo-2.6.18-348.39.2.el5.i686.rpm
kernel-debuginfo-common-2.6.18-348.39.2.el5.i686.rpm
kernel-devel-2.6.18-348.39.2.el5.i686.rpm
kernel-headers-2.6.18-348.39.2.el5.i386.rpm
kernel-xen-2.6.18-348.39.2.el5.i686.rpm
kernel-xen-debuginfo-2.6.18-348.39.2.el5.i686.rpm
kernel-xen-devel-2.6.18-348.39.2.el5.i686.rpm

ia64:
kernel-2.6.18-348.39.2.el5.ia64.rpm
kernel-debug-2.6.18-348.39.2.el5.ia64.rpm
kernel-debug-debuginfo-2.6.18-348.39.2.el5.ia64.rpm
kernel-debug-devel-2.6.18-348.39.2.el5.ia64.rpm
kernel-debuginfo-2.6.18-348.39.2.el5.ia64.rpm
kernel-debuginfo-common-2.6.18-348.39.2.el5.ia64.rpm
kernel-devel-2.6.18-348.39.2.el5.ia64.rpm
kernel-headers-2.6.18-348.39.2.el5.ia64.rpm
kernel-xen-2.6.18-348.39.2.el5.ia64.rpm
kernel-xen-debuginfo-2.6.18-348.39.2.el5.ia64.rpm
kernel-xen-devel-2.6.18-348.39.2.el5.ia64.rpm

noarch:
kernel-doc-2.6.18-348.39.2.el5.noarch.rpm

x86_64:
kernel-2.6.18-348.39.2.el5.x86_64.rpm
kernel-debug-2.6.18-348.39.2.el5.x86_64.rpm
kernel-debug-debuginfo-2.6.18-348.39.2.el5.x86_64.rpm
kernel-debug-devel-2.6.18-348.39.2.el5.x86_64.rpm
kernel-debuginfo-2.6.18-348.39.2.el5.x86_64.rpm
kernel-debuginfo-common-2.6.18-348.39.2.el5.x86_64.rpm
kernel-devel-2.6.18-348.39.2.el5.x86_64.rpm
kernel-headers-2.6.18-348.39.2.el5.x86_64.rpm
kernel-xen-2.6.18-348.39.2.el5.x86_64.rpm
kernel-xen-debuginfo-2.6.18-348.39.2.el5.x86_64.rpm
kernel-xen-devel-2.6.18-348.39.2.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/security/vulnerabilities/pop_ss

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8iljXlSAg2UNWIIRAvmYAKCHs98MQveddDxl5IsUrff81Y5KEQCfS75t
OSJtRV6NzUVQPHUwd6iJZRA=
=+RKK
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: kernel security update
Advisory ID: RHSA-2018:1353-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1353
Issue date: 2018-05-08
CVE Names: CVE-2018-8897
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 5
Extended Lifecycle Support.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server (v. 5 ELS) – i386, noarch, s390x, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Nick Peterson (Everdox Tech LLC) and Andy
Lutomirski for reporting this issue.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS

6. Package List:

Red Hat Enterprise Linux Server (v. 5 ELS):

Source:
kernel-2.6.18-431.el5.src.rpm

i386:
kernel-2.6.18-431.el5.i686.rpm
kernel-PAE-2.6.18-431.el5.i686.rpm
kernel-PAE-debuginfo-2.6.18-431.el5.i686.rpm
kernel-PAE-devel-2.6.18-431.el5.i686.rpm
kernel-debug-2.6.18-431.el5.i686.rpm
kernel-debug-debuginfo-2.6.18-431.el5.i686.rpm
kernel-debug-devel-2.6.18-431.el5.i686.rpm
kernel-debuginfo-2.6.18-431.el5.i686.rpm
kernel-debuginfo-common-2.6.18-431.el5.i686.rpm
kernel-devel-2.6.18-431.el5.i686.rpm
kernel-headers-2.6.18-431.el5.i386.rpm
kernel-xen-2.6.18-431.el5.i686.rpm
kernel-xen-debuginfo-2.6.18-431.el5.i686.rpm
kernel-xen-devel-2.6.18-431.el5.i686.rpm

noarch:
kernel-doc-2.6.18-431.el5.noarch.rpm

s390x:
kernel-2.6.18-431.el5.s390x.rpm
kernel-debug-2.6.18-431.el5.s390x.rpm
kernel-debug-debuginfo-2.6.18-431.el5.s390x.rpm
kernel-debug-devel-2.6.18-431.el5.s390x.rpm
kernel-debuginfo-2.6.18-431.el5.s390x.rpm
kernel-debuginfo-common-2.6.18-431.el5.s390x.rpm
kernel-devel-2.6.18-431.el5.s390x.rpm
kernel-headers-2.6.18-431.el5.s390x.rpm
kernel-kdump-2.6.18-431.el5.s390x.rpm
kernel-kdump-debuginfo-2.6.18-431.el5.s390x.rpm
kernel-kdump-devel-2.6.18-431.el5.s390x.rpm

x86_64:
kernel-2.6.18-431.el5.x86_64.rpm
kernel-debug-2.6.18-431.el5.x86_64.rpm
kernel-debug-debuginfo-2.6.18-431.el5.x86_64.rpm
kernel-debug-devel-2.6.18-431.el5.x86_64.rpm
kernel-debuginfo-2.6.18-431.el5.x86_64.rpm
kernel-debuginfo-common-2.6.18-431.el5.x86_64.rpm
kernel-devel-2.6.18-431.el5.x86_64.rpm
kernel-headers-2.6.18-431.el5.x86_64.rpm
kernel-xen-2.6.18-431.el5.x86_64.rpm
kernel-xen-debuginfo-2.6.18-431.el5.x86_64.rpm
kernel-xen-devel-2.6.18-431.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/security/vulnerabilities/pop_ss

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8iluXlSAg2UNWIIRAi5iAJ4+wIwTfmInR/1kLdvl5/1rUC6MSwCggmOL
vhk2OZ5JHDZkIQQLgSpKaMk=
=khoT
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel-rt security update
Advisory ID: RHSA-2018:1354-01
Product: Red Hat Enterprise MRG for RHEL-6
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1354
Issue date: 2018-05-08
CVE Names: CVE-2018-8897 CVE-2018-1000199
=====================================================================

1. Summary:

An update for kernel-rt is now available for Red Hat Enterprise MRG 2.

2. Relevant releases/architectures:

Red Hat MRG Realtime for RHEL 6 Server v.2 – noarch, x86_64

3. Description:

The kernel-rt packages provide the Real Time Linux Kernel, which enables
fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

* kernel: ptrace() incorrect error handling leads to corruption and DoS
(CVE-2018-1000199)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Nick Peterson (Everdox Tech LLC) and Andy
Lutomirski for reporting CVE-2018-8897 and Andy Lutomirski for reporting
CVE-2018-1000199.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS
1568477 – CVE-2018-1000199 kernel: ptrace() incorrect error handling leads to corruption and DoS

6. Package List:

Red Hat MRG Realtime for RHEL 6 Server v.2:

Source:
kernel-rt-3.10.0-693.25.4.rt56.613.el6rt.src.rpm

noarch:
kernel-rt-doc-3.10.0-693.25.4.rt56.613.el6rt.noarch.rpm
kernel-rt-firmware-3.10.0-693.25.4.rt56.613.el6rt.noarch.rpm

x86_64:
kernel-rt-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-debug-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-debug-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-debug-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-debuginfo-common-x86_64-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-trace-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-trace-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-trace-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-vanilla-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-vanilla-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm
kernel-rt-vanilla-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/cve/CVE-2018-1000199
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/security/vulnerabilities/pop_ss

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8iQ8XlSAg2UNWIIRAoqDAJ9siam0IVq9gIDIU9hUCVefEzXhqwCeM+yZ
9HmYQhip/gvWW/HC78IzkF4=
=ChKJ
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel-rt security and bug fix update
Advisory ID: RHSA-2018:1355-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1355
Issue date: 2018-05-08
CVE Names: CVE-2017-16939 CVE-2018-1068 CVE-2018-1087
CVE-2018-8897 CVE-2018-1000199
=====================================================================

1. Summary:

An update for kernel-rt is now available for Red Hat Enterprise Linux 7.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Realtime (v. 7) – noarch, x86_64
Red Hat Enterprise Linux for Real Time for NFV (v. 7) – noarch, x86_64

3. Description:

The kernel-rt packages provide the Real Time Linux Kernel, which enables
fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* Kernel: KVM: error in exception handling leads to wrong debug stack value
(CVE-2018-1087)

* Kernel: error in exception handling leads to DoS (CVE-2018-8897)

* Kernel: ipsec: xfrm: use-after-free leading to potential privilege
escalation (CVE-2017-16939)

* kernel: Out-of-bounds write via userland offsets in ebt_entry struct in
netfilter/ebtables.c (CVE-2018-1068)

* kernel: ptrace() incorrect error handling leads to corruption and DoS
(CVE-2018-1000199)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank Andy Lutomirski for reporting CVE-2018-1087 and
CVE-2018-1000199 and Nick Peterson (Everdox Tech LLC) and Andy Lutomirski
for reporting CVE-2018-8897.

Bug Fix(es):

* The kernel-rt packages have been upgraded to the 3.10.0-862.2.3 source
tree, which provides a number of bug fixes over the previous version.
(BZ#1549768)

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1517220 – CVE-2017-16939 Kernel: ipsec: xfrm: use-after-free leading to potential privilege escalation
1549768 – kernel-rt: update to the RHEL7.5.z batch#1 source tree
1552048 – CVE-2018-1068 kernel: Out-of-bounds write via userland offsets in ebt_entry struct in netfilter/ebtables.c
1566837 – CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value
1567074 – CVE-2018-8897 Kernel: error in exception handling leads to DoS
1568477 – CVE-2018-1000199 kernel: ptrace() incorrect error handling leads to corruption and DoS

6. Package List:

Red Hat Enterprise Linux for Real Time for NFV (v. 7):

Source:
kernel-rt-3.10.0-862.2.3.rt56.806.el7.src.rpm

noarch:
kernel-rt-doc-3.10.0-862.2.3.rt56.806.el7.noarch.rpm

x86_64:
kernel-rt-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-devel-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-kvm-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-kvm-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debuginfo-common-x86_64-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-devel-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-kvm-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-kvm-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-devel-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-kvm-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-kvm-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm

Red Hat Enterprise Linux Realtime (v. 7):

Source:
kernel-rt-3.10.0-862.2.3.rt56.806.el7.src.rpm

noarch:
kernel-rt-doc-3.10.0-862.2.3.rt56.806.el7.noarch.rpm

x86_64:
kernel-rt-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-devel-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debug-kvm-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-debuginfo-common-x86_64-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-devel-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-kvm-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-devel-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm
kernel-rt-trace-kvm-debuginfo-3.10.0-862.2.3.rt56.806.el7.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2017-16939
https://access.redhat.com/security/cve/CVE-2018-1068
https://access.redhat.com/security/cve/CVE-2018-1087
https://access.redhat.com/security/cve/CVE-2018-8897
https://access.redhat.com/security/cve/CVE-2018-1000199
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/security/vulnerabilities/pop_ss

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

iD8DBQFa8iPFXlSAg2UNWIIRAimcAJ9PyhLNkFZaSyrDi2gHNnGgpwAs8gCfUqkW
HAZMOG7hwIVzN1vkw37Q1X4=
=0Sxa
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

Sigurnosni nedostaci programske jezgre

Archives

More in Preporuke

Sigurnosni nedostaci programske biblioteke libraw