RHSA-2019:0641: Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.<br>Security Fix(es):<br><li> kernel: MIDI driver race condition leads to a double-free (CVE-2018-10902)</li> <li> kernel: net/rxrpc: overflow in decoding of krb5 principal (CVE-2017-7482)</li> <li> kernel: Missing length check of payload in net/sctp/smmakechunk.c:sctpmakechunk() function allows denial of service (CVE-2018-5803)</li> <li> kernel: use-after-free in ntfsreadlockedinode in the ntfs.ko (CVE-2018-12929)</li> <li> kernel: stack-based out-of-bounds write in ntfsendbufferasyncread in the ntfs.ko (CVE-2018-12930)</li> <li> kernel: stack-based out-of-bounds write in ntfsattrfind in the ntfs.ko (CVE-2018-12931)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> Remove the NTFS module from the MRG 2.5.x realtime kernel (BZ#1674523)</li> <li> update the MRG 2.5.z 3.10 kernel-rt sources (BZ#1674935)</li> Users of kernel-rt are advised to upgrade to these updated packages, which fix these bugs.