ELSA-2013-0630

ELSA-2013-0630 - kernel security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2013-03-12

Description

[2.6.32-358.2.1]
- [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}

[2.6.32-358.1.1]
- [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
- [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
- [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [virt] xen: dont assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
- [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
- [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Dont allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
- [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
- [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
- [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
- [fs] nfs: Add debugging messages to NFSv4s CLOSE procedure (Steve Dickson) [910370 902965]
- [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
- [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
- [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
- [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
- [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
- [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
- [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
- [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
- [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
- [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
- [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
- [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
- [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
- [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
- [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
- [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
- [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
- [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
- [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]

Related CVEs

CVE-2013-0228

CVE-2013-0268

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	kernel-2.6.32-358.2.1.el6.src.rpm	30c043ea81e0840721af35f77ce35fa0	ELSA-2021-9212
	kernel-2.6.32-358.2.1.el6.i686.rpm	c53d75ec46964625acb0d45fb68f478d	ELSA-2021-9212
	kernel-debug-2.6.32-358.2.1.el6.i686.rpm	06be4d4ead38c6276b4ebf7d7e504c71	ELSA-2021-9212
	kernel-debug-devel-2.6.32-358.2.1.el6.i686.rpm	d45691cec02848b87683453709dffefc	ELSA-2021-9212
	kernel-devel-2.6.32-358.2.1.el6.i686.rpm	a0f9599f4e05fef02a8fbc108e4b9c3d	ELSA-2021-9212
	kernel-doc-2.6.32-358.2.1.el6.noarch.rpm	11f09952dd4c49e6d3a6cc85154985c5	ELSA-2021-9212
	kernel-firmware-2.6.32-358.2.1.el6.noarch.rpm	6479a833e3c6b83132885e8507478f5d	ELSA-2021-9212
	kernel-headers-2.6.32-358.2.1.el6.i686.rpm	b91969d4de86b57f409bbd6eebde97b1	ELSA-2021-9212
	perf-2.6.32-358.2.1.el6.i686.rpm	e44736e0ea3db83ed150d7361aba00e6	ELSA-2021-9212
	python-perf-2.6.32-358.2.1.el6.i686.rpm	06ea1a3e1ad3edb554b5d8bf05a81f00	ELSA-2021-9212
Oracle Linux 6 (x86_64)	kernel-2.6.32-358.2.1.el6.src.rpm	30c043ea81e0840721af35f77ce35fa0	ELSA-2021-9212
	kernel-2.6.32-358.2.1.el6.x86_64.rpm	9fd8583d83903b728073b3f435c900a9	ELSA-2021-9212
	kernel-debug-2.6.32-358.2.1.el6.x86_64.rpm	7a3f71cf380c981d2954dff3c1f92e69	ELSA-2021-9212
	kernel-debug-devel-2.6.32-358.2.1.el6.x86_64.rpm	aab837ed47a6d3417ec9331ac68b49dc	ELSA-2021-9212
	kernel-devel-2.6.32-358.2.1.el6.x86_64.rpm	1c923fe88c8283a18a17c80639248d2c	ELSA-2021-9212
	kernel-doc-2.6.32-358.2.1.el6.noarch.rpm	11f09952dd4c49e6d3a6cc85154985c5	ELSA-2021-9212
	kernel-firmware-2.6.32-358.2.1.el6.noarch.rpm	6479a833e3c6b83132885e8507478f5d	ELSA-2021-9212
	kernel-headers-2.6.32-358.2.1.el6.x86_64.rpm	7430bd1a7fc5ab94b46866dadf5810e3	ELSA-2021-9212
	perf-2.6.32-358.2.1.el6.x86_64.rpm	e872dcb5abb27f9509148e72b8a7be7f	ELSA-2021-9212
	python-perf-2.6.32-358.2.1.el6.x86_64.rpm	86b8d8cb4affa41d2d325e81feb1ff98	ELSA-2021-9212

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team