Summary
[3.10.0-229.14.1.OL7]
- Oracle Linux certificates (Alexey Petrenko)
[3.10.0-229.14.1]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1248381 1238230]
[3.10.0-229.13.1]
- [dma] ioat: fix tasklet tear down (Herton R. Krzesinski) [1251523 1210093]
- [drm] radeon: Fix VGA switcheroo problem related to hotplug (missing hunk) (Rob Clark) [1207879 1223472]
- [security] keys: Ensure we free the assoc array edit if edit is valid (David Howells) [1246039 1244171] {CVE-2015-1333}
- [net] tcp: properly handle stretch acks in slow start (Florian Westphal) [1243903 1151756]
- [net] tcp: fix no cwnd growth after timeout (Florian Westphal) [1243903 1151756]
- [net] tcp: increase throughput when reordering is high (Florian Westphal) [1243903 1151756]
- [of] Fix sysfs_dirent cache integrity issue (Gustavo Duarte) [1249120 1225539]
- [tty] vt: don't set font mappings on vc not supporting this (Jarod Wilson) [1248384 1213538]
- [scsi] fix regression in scsi_send_eh_cmnd() (Ewan Milne) [1243412 1167454]
- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240760 1240761] {CVE-2015-5364 CVE-2015-5366}
- [fs] Convert MessageID in smb2_hdr to LE (Sachin Prabhu) [1238693 1161441]
- [x86] bpf_jit: fix compilation of large bpf programs (Denys Vlasenko) [1236938 1236939] {CVE-2015-4700}
- [net] sctp: fix ASCONF list handling (Marcelo Leitner) [1227960 1206474] {CVE-2015-3212}
- [fs] ext4: allocate entire range in zero range (Lukas Czerner) [1193909 1187071] {CVE-2015-0275}
- [x86] ASLR bruteforce possible for vdso library (Jacob Tanenbaum) [1184898 1184899] {CVE-2014-9585}
[3.10.0-229.12.1]
- [ethernet] ixgbe: remove CIAA/D register reads from bad VF check (John Greene) [1245597 1205903]
- [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Rik van Riel) [1241078 1236413]
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-abi-whitelists | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-debug | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-debug-devel | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-devel | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-doc | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-headers | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-tools | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-tools-libs | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | kernel-tools-libs-devel | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | perf | 0:3.10.0-229.14.1.el7 |
| Oracle Linux · 7 | python-perf | 0:3.10.0-229.14.1.el7 |
Vulnerabilities 7
-
Unscored —
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locati…
-
Unscored —
The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial o…
-
Unscored —
Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local use…
-
Unscored —
Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (l…
-
Unscored —
The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to …
-
Unscored —
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding …
-
Unscored —
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN retu…