Skip to content
OpenAdvisories
High ELSA-2021-9116 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

Published Mar 18, 2021 · Updated Mar 18, 2021

Summary

[4.14.35-2047.501.2.el7]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek-container 0:4.14.35-2047.501.2.el7

Vulnerabilities 3