Skip to content
OpenAdvisories
High ELSA-2021-9164 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Apr 8, 2021 · Updated Apr 8, 2021

Summary

[4.1.12-124.49.3.1]
- SecureBoot Digicert 2021 certificates update (Brian Maly) [Orabug: 32532671]

[4.1.12-124.49.3]
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross) [Orabug: 32485156]
- audit: fix error handling in audit_data_to_entry() (Paul Moore) [Orabug: 32608451] {CVE-2020-0444}

[4.1.12-124.49.2]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32640641]
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32640641] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [Orabug: 32640641] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches) [Orabug: 32640641]
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan) [Orabug: 32640641] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}

[4.1.12-124.49.1]
- hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo) [Orabug: 32576074]

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.1.12-124.49.3.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-124.49.3.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-124.49.3.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-124.49.3.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-124.49.3.1.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-124.49.3.1.el7uek

Vulnerabilities 4