Summary
[3.10.0-1160.15.2.OL7]
- Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.3
[3.10.0-1160.15.2]
- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
[3.10.0-1160.15.1]
- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert 'mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query' (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
[3.10.0-1160.14.1]
- [fs] nfsd: fix incorrect umasks ('J. Bruce Fields') [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
[3.10.0-1160.13.1]
- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
[3.10.0-1160.12.1]
- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bpftool | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-abi-whitelists | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-debug | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-debug-devel | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-devel | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-doc | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-headers | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-tools | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-tools-libs | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | kernel-tools-libs-devel | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | perf | 0:3.10.0-1160.15.2.el7 |
| Oracle Linux · 7 | python-perf | 0:3.10.0-1160.15.2.el7 |
Vulnerabilities 2
-
Unscored —CVE-2020-15436 Public exploit
Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or …
-
Unscored —
A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionalit…