ELSA-2013-2513

ELSA-2013-2513 - Unbreakable Enterprise kernel security and bugfix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2013-04-11

Description

[2.6.39-400.21.1]
- SPEC: v2.6.39-400.21.1 (Maxim Uvarov)
- xen/mmu: On early bootup, flush the TLB when changing RO->RW bits Xen provided pagetables. (Konrad Rzeszutek Wilk)

[2.6.39-400.20.1]
- SPEC: v2.6.39-400.20.1 (Maxim Uvarov)
- PCI: Set device power state to PCI_D0 for device without native PM support (Ajaykumar Hotchandani) [Orabug: 16482495]
- sched: Fix cgroup movement of waking process (Daisuke Nishimura) [Orabug: 13740515]
- sched: Fix cgroup movement of newly created process (Daisuke Nishimura) [Orabug: 13740515]
- sched: Fix cgroup movement of forking process (Daisuke Nishimura) [Orabug: 13740515]

[2.6.39-400.19.1]
- IB/core: Allow device-specific per-port sysfs files (Ralph Campbell)
- RDMA/cma: Pass QP type into rdma_create_id() (Sean Hefty)
- IB: Rename RAW_ETY to RAW_ETHERTYPE (Aleksey Senin)
- IB: Warning Resolution. (Ajaykumar Hotchandani)
- mlx4_core: fix FMR flags in free MTT range (Saeed Mahameed)
- mlx4_core/ib: sriov fmr bug fixes (Saeed Mahameed)
- mlx4_core: Change bitmap allocator to work in round-robin fashion (Saeed
Mahameed)
- mlx4_vnic: move host admin vnics to closed state when closing the vnic.
(Saeed Mahameed)
- mlx4_ib: make sure to flush clean_wq while closing sriov device (Saeed
Mahameed)
- ib_sdp: fix deadlock when sdp_cma_handler is called while socket is being
closed (Saeed Mahameed)
- ib_sdp: add unhandled events to rdma_cm_event_str (Saeed Mahameed)
- mlx4_core: use dev->sriov instead of hardcoed 127 vfs when initializing FMR
MPT tables (Saeed Mahameed)
- mlx4_vnic: print vnic keep alive info in mlx4_vnic_info (Saeed Mahameed)
- rds: Congestion flag does not get cleared causing the connection to hang
(Bang Nguyen) [Orabug: 16424692]
- dm table: set flush capability based on underlying devices (Mike Snitzer)
[Orabug: 16392584]
- wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED task
(Oleg Nesterov) [Orabug: 16405869] {CVE-2013-0871}
- ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg
Nesterov) [Orabug: 16405869] {CVE-2013-0871}
- ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up() (Oleg
Nesterov) [Orabug: 16405869] {CVE-2013-0871}
- drm/i915: bounds check execbuffer relocation count (Kees Cook) [Orabug:
16482650] {CVE-2013-0913}
- NLS: improve UTF8 -> UTF16 string conversion routine (Alan Stern) [Orabug:
16425571] {CVE-2013-1773}
- ipmi: make kcs timeout parameters as module options (Pavel Bures) [Orabug:
16470881]
- drm/i915/lvds: ditch ->prepare special case (Daniel Vetter) [Orabug:
14394113]
- drm/i915: Leave LVDS registers unlocked (Keith Packard) [Orabug: 14394113]
- drm/i915: dont clobber the pipe param in sanitize_modesetting (Daniel
Vetter) [Orabug: 14394113]
- drm/i915: Sanitize BIOS debugging bits from PIPECONF (Chris Wilson) [Orabug:
14394113]

[2.6.39-400.18.1]
- SPEC: fix doc build (Guru Anbalagane)
- floppy: Fix a crash during rmmod (Vivek Goyal) [Orabug: 16040504]
- x86: ignore changes to paravirt_lazy_mode while in an interrupt context
(Chuck Anderson) [Orabug: 16417326]
- x86/msr: Add capabilities check (Alan Cox) [Orabug: 16405007] {CVE-2013-0268}
- spec: unique debuginfo (Maxim Uvarov) [Orabug: 16245366]
- xfs: Use preallocation for inodes with extsz hints (Dave Chinner) [Orabug:
16307993]
- Add SIOCRDSGETTOS to get the current TOS for the socket (bang.nguyen)
[Orabug: 16397197]
- Changes to connect/TOS interface (bang.nguyen) [Orabug: 16397197]
- floppy: Cleanup disk->queue before caling put_disk() if add_disk() was never
called (Vivek Goyal) [Orabug: 16040504]

Related CVEs

CVE-2013-0871

CVE-2013-0913

CVE-2013-1773

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.21.1.el5uek.src.rpm	25de92013caafa6bd7ef40f2370db78b	ELSA-2020-5936
	kernel-uek-2.6.39-400.21.1.el5uek.i686.rpm	71c3519791a739ffed8c86140077d2c9	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.21.1.el5uek.i686.rpm	afb12f8150edebbf4e1b049e45a65172	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.21.1.el5uek.i686.rpm	394d4cd1ae005656b7725167556cafc2	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.21.1.el5uek.i686.rpm	aac4a2ddf9d30cacb74ff71f6996ff40	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.21.1.el5uek.noarch.rpm	808e2ce62c0a4723221aabbe1b15aaa6	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.21.1.el5uek.noarch.rpm	76ec9823845aba1e10e5339729aa200d	ELSA-2020-5936
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.21.1.el5uek.src.rpm	25de92013caafa6bd7ef40f2370db78b	ELSA-2020-5936
	kernel-uek-2.6.39-400.21.1.el5uek.x86_64.rpm	ff120bc22a532a1eea0326ddbafdb654	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.21.1.el5uek.x86_64.rpm	491d7814dc711379bd6342abb0782e2a	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.21.1.el5uek.x86_64.rpm	f3f6df064fc138c366a242b7a14ec177	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.21.1.el5uek.x86_64.rpm	e1a07e489784d5dd61305c137b15d184	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.21.1.el5uek.noarch.rpm	808e2ce62c0a4723221aabbe1b15aaa6	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.21.1.el5uek.noarch.rpm	76ec9823845aba1e10e5339729aa200d	ELSA-2020-5936
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.21.1.el6uek.src.rpm	f6eeb16558d37a2172d33475a177e79f	ELSA-2021-9215
	kernel-uek-2.6.39-400.21.1.el6uek.i686.rpm	7b4ee0e59e7913282763064ab0ad4a33	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.21.1.el6uek.i686.rpm	a687b0829d9c889a9b755f4cd328cbb8	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.21.1.el6uek.i686.rpm	c49969d4d26d0098360dd81fa2358bf4	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.21.1.el6uek.i686.rpm	9ab837529a102faa8b7a3d2eedd60f70	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.21.1.el6uek.noarch.rpm	7acd64cae5f09274e3cd77f8f9ff9db2	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.21.1.el6uek.noarch.rpm	06b45c2c5141c425434e988cfce43292	ELSA-2021-9215
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.21.1.el6uek.src.rpm	f6eeb16558d37a2172d33475a177e79f	ELSA-2021-9215
	kernel-uek-2.6.39-400.21.1.el6uek.x86_64.rpm	a5a696e74970f1c3f9f5839bab1b19eb	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.21.1.el6uek.x86_64.rpm	9df5d7823c79ea6a7c5718d191edc1c8	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.21.1.el6uek.x86_64.rpm	04e969849b004e45a86a880a2fec405c	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.21.1.el6uek.x86_64.rpm	9fd10a339be90d1c01636cee1b28d456	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.21.1.el6uek.noarch.rpm	7acd64cae5f09274e3cd77f8f9ff9db2	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.21.1.el6uek.noarch.rpm	06b45c2c5141c425434e988cfce43292	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team