Skip to content
OpenAdvisories
High ELSA-2017-3595 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jul 27, 2017 · Updated Jul 27, 2017

Summary

kernel-uek
[4.1.12-94.5.7]
- Revert 'net/rds: Revert 'RDS: add reconnect retry scheme for stalled connections'' (Ajaykumar Hotchandani) [Orabug: 26444722]
- Revert 'net/rds: use different workqueue for base_conn' (Ajaykumar Hotchandani) [Orabug: 26444722]
- Revert 'net/rds: determine active/passive connection with IP addresses' (Ajaykumar Hotchandani) [Orabug: 26444722]
- Revert 'net/rds: prioritize the base connection establishment' (Ajaykumar Hotchandani) [Orabug: 26444722]
- blk-mq: Export blk_mq_freeze_queue_wait (Keith Busch) [Orabug: 26385993]
- blk-mq: Provide freeze queue timeout (Keith Busch) [Orabug: 26385993]
- nvme: Complete all stuck requests (Keith Busch) [Orabug: 26385993]
- nvme: Don't suspend admin queue that wasn't created (Gabriel Krisman Bertazi) [Orabug: 26385993]
- nvme: Delete created IO queues on reset (Keith Busch) [Orabug: 26385993]
- nvme: Suspend all queues before deletion (Gabriel Krisman Bertazi) [Orabug: 26385993]
- nvme/pci: No special case for queue busy on IO (Keith Busch) [Orabug: 26385993]
- sg: Fix double-free when drives detach during SG_IO (Calvin Owens) [Orabug: 26408570]
- SUNRPC: Handle EADDRNOTAVAIL on connection failures (Trond Myklebust) [Orabug: 26221921]
- ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai) [Orabug: 26403952] {CVE-2017-1000380}
- ALSA: timer: Fix race between read and ioctl (Takashi Iwai) [Orabug: 26403952] {CVE-2017-1000380}
- xfs: Timely free truncated dirty pages (Jan Kara) [Orabug: 26452561]
- xfs: skip dirty pages in ->releasepage() (Brian Foster) [Orabug: 26452561]
- Revert 'SUNRPC: Refactor svc_set_num_threads()' (Kirtikar Kashyap) [Orabug: 26476721]
- Revert 'NFSv4: Fix callback server shutdown' (Kirtikar Kashyap) [Orabug: 26476721]

[4.1.12-94.5.6]
- net/rds: Replace printk in TX path with stat variable (Yuval Shaia) [Orabug: 26367820]
- net: properly release sk_frag.page (Eric Dumazet) [Orabug: 26354016]
- NVMe: Retain QUEUE_FLAG_SG_GAPS flag for bio vector alignment. (Ashok Vairavan) [Orabug: 26361950]
- btrfs: introduce device delete by devid (Anand Jain) [Orabug: 26362382]
- btrfs: enhance btrfs_find_device_by_user_input() to check device path (Anand Jain) [Orabug: 26362382]
- btrfs: make use of btrfs_find_device_by_user_input() (Anand Jain) [Orabug: 26362382]
- btrfs: create helper btrfs_find_device_by_user_input() (Anand Jain) [Orabug: 26362382]
- btrfs: clean up and optimize __check_raid_min_device() (Anand Jain) [Orabug: 26362382]
- btrfs: create helper function __check_raid_min_devices() (Anand Jain) [Orabug: 26362382]
- char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau) [Orabug: 26403937] {CVE-2017-1000363}
- NFSv4: Fix callback server shutdown (Trond Myklebust) [Orabug: 26403977] {CVE-2017-9059}
- SUNRPC: Refactor svc_set_num_threads() (Trond Myklebust) [Orabug: 26403977] {CVE-2017-9059}
- ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong) [Orabug: 26404000] {CVE-2017-9077}

[4.1.12-94.5.5]
- Signature verification support in kexec_file_load (Alexey Petrenko) [Orabug: 26426837]
- IB/cm: remove unnecessary ib_query_device in PSIF RNR WA (Wei Lin Guay) [Orabug: 26245885]
- aacraid: Update scsi_host_template to use tagged commands (Dave Carroll) [Orabug: 26291288]
- IB/mlx4: Suppress warning for not handled portmgmt event subtype (Mukesh Kacker) [Orabug: 26308324]
- aacraid: initialize scsi shared tag map (Joe Jin) [Orabug: 26308827]
- RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu) [Orabug: 26351414]
- bnxt_en: Fix netpoll handling. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add missing logic to handle TPA end error conditions. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Fix xmit_more with BQL. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Pass in sh parameter to bnxt_set_dflt_rings(). (Michael Chan) [Orabug: 26402533]
- bnxt_en: Implement xmit_more. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Optimize doorbell write operations for newer chips. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add additional chip ID definitions. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add a callback to inform RDMA driver during PCI shutdown. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add PCI IDs for BCM57454 VF devices. (Deepak Khungar) [Orabug: 26402533]
- bnxt_en: Support for Short Firmware Message (Deepak Khungar) [Orabug: 26402533]
- bnxt_en: Check status of firmware DCBX agent before setting DCB_CAP_DCBX_HOST. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Call bnxt_dcb_init() after getting firmware DCBX configuration. (Michael Chan) [Orabug: 26402533]
- bnxt: add dma mapping attributes (Shannon Nelson) [Orabug: 26366387]
- dma-mapping: add interfaces for mapping pages with attributes (Shannon Nelson) [Orabug: 26402533]
- bnxt_en: allocate enough space for ->ntp_fltr_bmap (Dan Carpenter) [Orabug: 26402533]
- bnxt_en: Restrict a PF in Multi-Host mode from changing port PHY configuration (Deepak Khungar) [Orabug: 26402533]
- bnxt_en: Check the FW_LLDP_AGENT flag before allowing DCBX host agent. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add 100G link speed reporting for BCM57454 ASIC in ethtool (Deepak Khungar) [Orabug: 26402533]
- bnxt_en: Fix VF attributes reporting. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Pass DCB RoCE app priority to firmware. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Cap the msix vector with the max completion rings. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add interrupt test to ethtool -t selftest. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add PHY loopback to ethtool self-test. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add ethtool mac loopback self test. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add basic ethtool -t selftest support. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add suspend/resume callbacks. (Michael Chan) [Orabug: 26402533]
- bnxt_en: Add ethtool set_wol method. (Michael Chan) [Orabug: 26402533]
- bn

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-4.1.12-94.5.7.el6uek 0:0.6.0-4.el6
Oracle Linux · 7 dtrace-modules-4.1.12-94.5.7.el7uek 0:0.6.0-4.el7
Oracle Linux · 7 kernel-uek 0:4.1.12-94.5.7.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-94.5.7.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-94.5.7.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-94.5.7.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-94.5.7.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-94.5.7.el7uek

Vulnerabilities 4