Skip to content
OpenAdvisories
High ELSA-2019-4823 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Oct 16, 2019 · Updated Oct 16, 2019

Summary

[4.1.12-124.32.3]
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke) [Orabug: 26941755] {CVE-2017-14991}
- failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu) [Orabug: 29707258]
- Revert 'net_failover: delay taking over primary device to accommodate udevd renaming' (Si-Wei Liu) [Orabug: 29707258]
- build: Revert 'repairing out-of-tree build functionality' (Todd Vierling) [Orabug: 30257829]
- rds: add ibmr to busy_list in flush code path (Manjunath Patil)
- rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)

[4.1.12-124.32.2]
- ext4: fix data exposure after a crash (Jan Kara) [Orabug: 30361860] {CVE-2017-7495}

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.1.12-124.32.3.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-124.32.3.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-124.32.3.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-124.32.3.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-124.32.3.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-124.32.3.el7uek

Vulnerabilities 2