Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek
[4.1.12-61.1.10]
- netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal) [Orabug: 24682076] {CVE-2016-4997} {CVE-2016-4998}
- netfilter: x_tables: validate e->target_offset early (Florian Westphal) [Orabug: 24682076] {CVE-2016-4997} {CVE-2016-4998}

[4.1.12-61.1.9]
- xen-blkback: don't get ref for each queue (Bob Liu) [Orabug: 24616917]
- NVMe: Fix obtaining command result (Keith Busch) [Orabug: 24655742]

[4.1.12-61.1.8]
- Revert 'ixgbe: make a workaround to tx hang issue under dom' (Brian Maly) [Orabug: 24618738]

[4.1.12-61.1.7]
- x86/xen: Add x86_platform.is_untracked_pat_range quirk to ignore ISA regions. (Konrad Rzeszutek Wilk) [Orabug: 24566046]