Skip to content
OpenAdvisories
High ELSA-2016-3596 11 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Aug 26, 2016 · Updated Aug 26, 2016

Summary

kernel-uek
[4.1.12-61.1.6]
- blk-mq: avoid setting hctx->tags->cpumask before allocation (Akinobu Mita) [Orabug: 24464170]

[4.1.12-61.1.3]
- ocfs2: improve recovery performance (Junxiao Bi) [Orabug: 24395729]
- qed: Utilize FW 8.10.3.0 (Yuval Mintz) [Orabug: 24442553]
- blk-mq: mark request queue as mq asap (Ming Lei) [Orabug: 24318720]
- lpfc: fix oops in lpfc_sli4_scmd_to_wqidx_distr() from lpfc_send_taskmgmt() (Mauricio Faria de Oliveira) [Orabug: 24312616]

[4.1.12-61.1.2]
- KEYS: potential uninitialized variable (Dan Carpenter) [Orabug: 24402831] {CVE-2016-4470}

[4.1.12-61.1.1]
- ol6-spec: update linux-firmware dependency to 20160616-44.git43e96a1e.0.10 (Chuck Anderson) [Orabug: 24311968]
- ol7-spec: update dracut version dependency to 033-360.0.3 (Chuck Anderson) [Orabug: 24308248]
- [2d8747c2] fixup! blk-mq: prevent double-unlock of mutex (Dan Duval) [Orabug: 24376521]
- tcp: make challenge acks less predictable (Eric Dumazet) [Orabug: 24010102]
- IBCM: dereference timewait_info only when needed (Santosh Shilimkar) [Orabug: 24326732]
- ext4: update c/mtime on truncate up (Eryu Guan) [Orabug: 24325361]
- vfs: add vfs_select_inode() helper (Miklos Szeredi) [Orabug: 24009788] {CVE-2016-6198} {CVE-2016-6197}
- vfs: rename: check backing inode being equal (Miklos Szeredi) [Orabug: 24009788] {CVE-2016-6198} {CVE-2016-6197}
- ovl: verify upper dentry before unlink and rename (Miklos Szeredi) [Orabug: 24009788] {CVE-2016-6198} {CVE-2016-6197}
- xen-pciback: mark device to be hidden on AER error trigger (Elena Ufimtseva)

[4.1.12-61]
- block: Initialize max_dev_sectors to 0 (Keith Busch) [Orabug: 23615929]
- sd: Fix rw_max for devices that report an optimal xfer size (Martin K. Petersen) [Orabug: 23615929]
- sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes (Martin K. Petersen) [Orabug: 23615929]
- sd: Optimal I/O size is in bytes, not sectors (Martin K. Petersen) [Orabug: 23615929]
- sd: Reject optimal transfer length smaller than page size (Martin K. Petersen) [Orabug: 23615929]
- block/sd: Fix device-imposed transfer length limits (Joe Jin) [Orabug: 23615929]
- Fix kabi issue for upstream commit ca369d51 (Joe Jin) [Orabug: 23615929]
- Revert 'ocfs2: bump up o2cb network protocol version' (Junxiao Bi) [Orabug: 24292852]
- Btrfs: fix leaking of ordered extents after direct IO write error (Filipe Manana) [Orabug: 23717870]
- Btrfs: fix error path when failing to submit bio for direct IO write (Filipe Manana) [Orabug: 23717870]
- Btrfs: fix memory corruption on failure to submit bio for direct IO (Filipe Manana) [Orabug: 23717870]
- Btrfs: fix extent accounting for partial direct IO writes (Filipe Manana) [Orabug: 23717870]
- Btrfs: Direct I/O: Fix space accounting (chandan) [Orabug: 23717870]
- Btrfs: fix warning of bytes_may_use (Liu Bo) [Orabug: 23717870]
- xen: use same main loop for counting and remapping pages (Juergen Gross)

[4.1.12-60]
- xen-blkfront: dynamic configuration of per-vbd resources (Bob Liu) [Orabug: 23720696]
- xen-blkfront: introduce blkif_set_queue_limits() (Bob Liu) [Orabug: 23720696]
- xen-blkfront: fix places not updated after introducing 64KB page granularity (Bob Liu) [Orabug: 23720696]
- IB: Add RNR timer workaround for PSIF (Santosh Shilimkar) [Orabug: 23633926]
- IB/core: Add encode/decode FDR/EDR rates (Hans Westgaard Ry) [Orabug: 23084916]
- bfa: Fix for crash when bfa_itnim is NULL (Sudarsana Reddy Kalluru) [Orabug: 23950878]
- bfa:Update driver version to 3.2.25.0 (Anil Gurumurthy) [Orabug: 23950878]
- bfa:File header and user visible string changes (Anil Gurumurthy) [Orabug: 23950878]
- bfa:Updating copyright messages (Anil Gurumurthy) [Orabug: 23950878]
- bfa: Fix incorrect de-reference of pointer (Anil Gurumurthy) [Orabug: 23950878]
- bfa: Fix indentation (Anil Gurumurthy) [Orabug: 23950878]
- lpfc updates to 11.1.0.4 for uek4-r2 (rkennedy) [Orabug: 23762058]
- lpfc: Update modified file copyrights (James Smart) [Orabug: 23762058]
- lpfc: Fix interaction between fdmi_on and enable_SmartSAN (James Smart) [Orabug: 23762058]
- lpfc: Add support for SmartSAN 2.0 (James Smart) [Orabug: 23762058]
- lpfc: Fix Device discovery failures during switch reboot test. (James Smart) [Orabug: 23762058]
- lpfc: Utilize embedded CDB logic to minimize IO latency (James Smart) [Orabug: 23762058]
- lpfc: Fix crash when unregistering default rpi. (James Smart) [Orabug: 23762058]
- lpfc: Fix DMA faults observed upon plugging loopback connector (James Smart) [Orabug: 23762058]
- lpfc: Correct LOGO handling during login (James Smart) [Orabug: 23762058]
- lpfc: fix misleading indentation (Arnd Bergmann) [Orabug: 23762058]
- lpfc: fix missing zero termination in debugfs (Alan) [Orabug: 23762058]
- lpfc: Remove redundant code block in lpfc_scsi_cmd_iocb_cmpl (Johannes Thumshirn) [Orabug: 23762058]
- qla2xxx: Update driver version to 8.07.00.38.40.0-k. (Sawan Chandak) [Orabug: 23755773]
- qla2xxx: Fix BBCR offset (Sawan Chandak) [Orabug: 23755773]
- qla2xxx: Disable the adapter and skip error recovery in case of register disconnect. (Sawan Chandak) [Orabug: 23755773]
- qla2xxx: Separate ISP type bits out from device type. (Joe Carnuccio) [Orabug: 23755773]
- qla2xxx: Correction to function qla26xx_dport_diagnostics(). (Joe Carnuccio) [Orabug: 23755773]
- qla2xxx: Add support to handle Loop Init error Asynchronus event. (Joe Carnuccio) [Orabug: 23755773]
- qla2xxx: Let DPORT be enabled purely by nvram. (Joe Carnuccio) [Orabug: 23755773]
- qla2xxx: Add bsg interface to support statistics counter reset. (Sawan Chandak) [Orabug: 23755773]
- qla2xxx: Add bsg interface to support D_Port Diagnostics. (Joe Carnuccio) [Orabug: 23755773]
- qla2xxx: Check for device state before unloading the driver. (Sawan Chandak) [Orabug: 23755773]
- qla2xxx: Properly reset firmware statistics. (Joe Carnuccio) [Orabug: 23755773]
- qla2xxx: Properly initialize IO statistics. (Joe Carnuccio) [Orabug: 23755773]
- qla2x

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-4.1.12-61.1.6.el6uek 0:0.5.3-2.el6
Oracle Linux · 7 dtrace-modules-4.1.12-61.1.6.el7uek 0:0.5.3-2.el7
Oracle Linux · 7 kernel-uek 0:4.1.12-61.1.6.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-61.1.6.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-61.1.6.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-61.1.6.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-61.1.6.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-61.1.6.el7uek

Vulnerabilities 11