ELSA-2013-1173

ELSA-2013-1173 - kernel security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2013-08-27

Description

[2.6.32-358.18.1]
- [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
- [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
- [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
- [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
- [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
- [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
- [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
- [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
- [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
- [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
- [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
- [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
- [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
- [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
- [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
- [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
- [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
- [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
- [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
- [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
- [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
- [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
- [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
- [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
- [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
- [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
- [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
- [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
- [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]

[2.6.32-358.17.1]
- [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
- [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
- [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]

[2.6.32-358.16.1]
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
- [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
- [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
- [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]

[2.6.32-358.15.1]
- [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
- [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
- [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
- [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
- [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
- [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
- [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]

Related CVEs

CVE-2012-6544

CVE-2013-2206

CVE-2013-2224

CVE-2013-2232

CVE-2013-2237

CVE-2013-2146

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	kernel-2.6.32-358.18.1.el6.src.rpm	af13e27ff0fedeca31b96df790838396	ELSA-2021-9212
	kernel-2.6.32-358.18.1.el6.i686.rpm	3e5b6d15c3b5fd1672de7f58031c0b3d	ELSA-2021-9212
	kernel-debug-2.6.32-358.18.1.el6.i686.rpm	1dc8f5c0132d6d8825c3687ac684aa58	ELSA-2021-9212
	kernel-debug-devel-2.6.32-358.18.1.el6.i686.rpm	1842939e6a62974220c4ce4d81d7975c	ELSA-2021-9212
	kernel-devel-2.6.32-358.18.1.el6.i686.rpm	be10de41301e7e562a1eee4646291ce6	ELSA-2021-9212
	kernel-doc-2.6.32-358.18.1.el6.noarch.rpm	6cea8b8a58c22e0511e621525490456f	ELSA-2021-9212
	kernel-firmware-2.6.32-358.18.1.el6.noarch.rpm	36938f9052a3c3d59235083a7e262ebc	ELSA-2021-9212
	kernel-headers-2.6.32-358.18.1.el6.i686.rpm	aab08f5a845367ed23712472adc475a9	ELSA-2021-9212
	perf-2.6.32-358.18.1.el6.i686.rpm	0435a5b42d70bd46c78fa8bc8f8a68a4	ELSA-2021-9212
	python-perf-2.6.32-358.18.1.el6.i686.rpm	65c2afd1a571054230a67cda00981c27	ELSA-2021-9212
Oracle Linux 6 (x86_64)	kernel-2.6.32-358.18.1.el6.src.rpm	af13e27ff0fedeca31b96df790838396	ELSA-2021-9212
	kernel-2.6.32-358.18.1.el6.x86_64.rpm	44f51d140a50f6675cea869652186f5e	ELSA-2021-9212
	kernel-debug-2.6.32-358.18.1.el6.x86_64.rpm	6f640d21f19b8ca65f39dfef7bcbbd80	ELSA-2021-9212
	kernel-debug-devel-2.6.32-358.18.1.el6.x86_64.rpm	7d2bb5c2f2429e3e56d33282d6c43272	ELSA-2021-9212
	kernel-devel-2.6.32-358.18.1.el6.x86_64.rpm	f571dcd4b38fded4d7842a0b9657ba47	ELSA-2021-9212
	kernel-doc-2.6.32-358.18.1.el6.noarch.rpm	6cea8b8a58c22e0511e621525490456f	ELSA-2021-9212
	kernel-firmware-2.6.32-358.18.1.el6.noarch.rpm	36938f9052a3c3d59235083a7e262ebc	ELSA-2021-9212
	kernel-headers-2.6.32-358.18.1.el6.x86_64.rpm	bcb63131a1933cac836a48a165840894	ELSA-2021-9212
	perf-2.6.32-358.18.1.el6.x86_64.rpm	a864d135393fc2439ea52510cfc8bd0a	ELSA-2021-9212
	python-perf-2.6.32-358.18.1.el6.x86_64.rpm	886c85c9746b87733dc87bb79b9d19a4	ELSA-2021-9212

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team