Summary
[4.1.12-124.32.3]
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke) [Orabug: 26941755] {CVE-2017-14991}
- failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu) [Orabug: 29707258]
- Revert 'net_failover: delay taking over primary device to accommodate udevd renaming' (Si-Wei Liu) [Orabug: 29707258]
- build: Revert 'repairing out-of-tree build functionality' (Todd Vierling) [Orabug: 30257829]
- rds: add ibmr to busy_list in flush code path (Manjunath Patil)
- rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)
[4.1.12-124.32.2]
- ext4: fix data exposure after a crash (Jan Kara) [Orabug: 30361860] {CVE-2017-7495}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.32.3.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.32.3.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.32.3.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.32.3.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.32.3.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.32.3.el7uek |
Vulnerabilities 2
-
Unscored —
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive inf…
-
Unscored —
fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-befo…