[Announce] Kernel RHEL6 042stab141.3

Vasily Averin vvs at openvz.org
Thu Nov 21 20:37:35 MSK 2019


OpenVZ project released an updated RHEL6 based kernel.
Read below for more information. Everyone is advised to update.

Changes and Download
====================
(since 042stab140.3)

* Rebase to RHEL6u10 kernel 2.6.32-754.24.3.el6
* [Important] hw: Machine Check Error on Page Size Change (IFU) (CVE-2018-12207)
* [Important] hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155)
* [Important] Kernel: vhost_net: infinite loop while receiving packets leads to DoS (CVE-2019-3900)
* [Important] kernel: vhost-net: guest to host kernel escape during migration (CVE-2019-14835)
* [Moderate] hw: Intel GPU Denial Of Service while accessing MMIO in lower power state (CVE-2019-0154)
* [Moderate] hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135)

=== See also ===
https://access.redhat.com/errata/RHSA-2019:2863
https://access.redhat.com/errata/RHSA-2019:3836
https://access.redhat.com/errata/RHSA-2019:3878
https://www.redhat.com/security/data/cve/CVE-2018-12207.html
https://www.redhat.com/security/data/cve/CVE-2019-0155.html
https://www.redhat.com/security/data/cve/CVE-2019-3980.html
https://www.redhat.com/security/data/cve/CVE-2019-14835.html
https://www.redhat.com/security/data/cve/CVE-2019-0154.html
https://www.redhat.com/security/data/cve/CVE-2019-11135.html 

For more info and downloads, see:
https://openvz.org/Download/kernel/rhel6/042stab141.3

Bug reporting
=============
Use http://bugs.openvz.org/ to report any bugs found.

Regards,
    OpenVZ team


More information about the Announce mailing list