1. 내용

- CPU speculative execution 관련 업데이트

- SegmentSmack라는 TCP 패킷 관련 결함 수정

- 권한상승 결함 수정

- 경쟁조건 결함 수정

- use-after-free 결함 수정

2. 업데이트 방법

yum update kernel

3. 관련 패키지

kernel-doc-3.10.0-862.11.6.el7.noarch.rpm

kernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm

python-perf-3.10.0-862.11.6.el7.x86_64.rpm

perf-3.10.0-862.11.6.el7.x86_64.rpm

kernel-tools-libs-devel-3.10.0-862.11.6.el7.x86_64.rpm

kernel-tools-libs-3.10.0-862.11.6.el7.x86_64.rpm

kernel-tools-3.10.0-862.11.6.el7.x86_64.rpm

kernel-headers-3.10.0-862.11.6.el7.x86_64.rpm

kernel-devel-3.10.0-862.11.6.el7.x86_64.rpm

kernel-debug-devel-3.10.0-862.11.6.el7.x86_64.rpm

kernel-debug-3.10.0-862.11.6.el7.x86_64.rpm

kernel-3.10.0-862.11.6.el7.x86_64.rpm

4. CVE ID (http://cve.mitre.org)

CVE-2017-13215

CVE-2018-3620

CVE-2018-3646

CVE-2018-3693

CVE-2018-5390

CVE-2018-7566

CVE-2018-10675

5. 참고

https://www.sulinux.net/bbs2014/write.php?bo_table=update_2&sca=17