ELSA-2015-0102

ELSA-2015-0102 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2015-01-28

Description

[3.10.0-123.20.1]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-123.20.1]
- [fs] seq_file: don't include mm.h in genksyms calculation (Ian Kent) [1184152 1183280]

[3.10.0-123.19.1]
- [mm] shmem: fix splicing from a hole while it's punched (Denys Vlasenko) [1118244 1118245] {CVE-2014-4171}
- [mm] shmem: fix faulting into a hole, not taking i_mutex (Denys Vlasenko) [1118244 1118245] {CVE-2014-4171}
- [mm] shmem: fix faulting into a hole while it's punched (Denys Vlasenko) [118244 1118245] {CVE-2014-4171}
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172812 1172813] {CVE-2014-9322}
- [net] vxlan: fix incorrect initializer in union vxlan_addr (Daniel Borkmann) [1156611 1130643]
- [net] vxlan: fix crash when interface is created with no group (Daniel Borkmann) [1156611 1130643]
- [net] vxlan: fix nonfunctional neigh_reduce() (Daniel Borkmann) [1156611 1130643]
- [net] vxlan: fix potential NULL dereference in arp_reduce() (Daniel Borkmann) [1156611 1130643]
- [net] vxlan: remove unused port variable in vxlan_udp_encap_recv() (Daniel Borkmann) [1156611 1130643]
- [net] vxlan: remove extra newline after function definition (Daniel Borkmann) [1156611 1130643]
- [net] etherdevice: Use ether_addr_copy to copy an Ethernet address (Stefan Assmann) [1156611 1091126]
- [fs] splice: perform generic write checks (Eric Sandeen) [1163799 1155907] {CVE-2014-7822}
- [fs] eliminate BUG() call when there's an unexpected lock on file close (Frank Sorenson) [1172266 1148130]
- [net] sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [1163094 1154002] {CVE-2014-7841}
- [fs] lockd: Try to reconnect if statd has moved (Benjamin Coddington) [1150889 1120850]
- [fs] sunrpc: Don't wake tasks during connection abort (Benjamin Coddington) [1150889 1120850]
- [fs] cifs: NULL pointer dereference in SMB2_tcon (Jacob Tanenbaum) [1147528 1147529] {CVE-2014-7145}
- [net] ipv6: addrconf: implement address generation modes (Jiri Pirko) [1144876 1107369]
- [net] gre: add link local route when local addr is any (Jiri Pirko) [1144876 1107369]
- [net] gre6: don't try to add the same route two times (Jiri Pirko) [1144876 1107369]
- [fs] isofs: unbound recursion when processing relocated directories (Jacob Tanenbaum) [1142270 1142271] {CVE-2014-5471 CVE-2014-5472}
- [fs] fs: seq_file: fallback to vmalloc allocation (Ian Kent) [1140302 1095623]
- [fs] fs: /proc/stat: convert to single_open_size() (Ian Kent) [1140302 1095623]
- [fs] fs: seq_file: always clear m->count when we free m->buf (Ian Kent) [1140302 1095623]

[3.10.0-123.18.1]
- [net] ipv6: fib: fix fib dump restart (Panu Matilainen) [1172795 1163605]
- [net] ipv6: drop unused fib6_clean_all_ro() function and rt6_proc_arg struct (Panu Matilainen) [1172795 1163605]
- [net] ipv6: avoid high order memory allocations for /proc/net/ipv6_route (Panu Matilainen) [1172795 1163605]
- [mm] numa: Remove BUG_ON() in __handle_mm_fault() (Rik van Riel) [1170662 1119439]
- [fs] aio: fix race between aio event completion and reaping (Jeff Moyer) [1154172 1131312]

[3.10.0-123.17.1]
- [ethernet] mlx4: Protect port type setting by mutex (Amir Vadai) [1162733 1095345]

[3.10.0-123.16.1]
- [fs] aio: block exit_aio() until all context requests are completed (Jeff Moyer) [1163992 1122092]
- [fs] aio: add missing smp_rmb() in read_events_ring (Jeff Moyer) [1154172 1131312]
- [fs] aio: fix reqs_available handling (Jeff Moyer) [1163992 1122092]
- [fs] aio: report error from io_destroy() when threads race in io_destroy() (Jeff Moyer) [1163992 1122092]
- [fs] aio: block io_destroy() until all context requests are completed (Jeff Moyer) [1163992 1122092]
- [fs] aio: v4 ensure access to ctx->ring_pages is correctly serialised for migration (Jeff Moyer) [1163992 1122092]
- [fs] aio/migratepages: make aio migrate pages sane (Jeff Moyer) [1163992 1122092]
- [fs] aio: clean up and fix aio_setup_ring page mapping (Jeff Moyer) [1163992 1122092]

[3.10.0-123.15.1]
- [scsi] ipr: wait for aborted command responses (Gustavo Duarte) [1162734 1156530]
- [scsi] reintroduce scsi_driver.init_command (Ewan Milne) [1146983 1105204]
- [block] implement an unprep function corresponding directly to prep (Ewan Milne) [1146983 1105204]
- [scsi] Revert: reintroduce scsi_driver.init_command (Ewan Milne) [1146983 1105204]

[3.10.0-123.14.1]
- [fs] nfs: Fix another nfs4_sequence corruptor (Steve Dickson) [1162073 1111170]

Related CVEs

CVE-2014-7145

CVE-2014-5472

CVE-2014-4171

CVE-2014-5471

CVE-2014-7841

CVE-2014-7822

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-123.20.1.el7.src.rpm	e69c7c2500a12a840902e8d5ab8aef71afe3fb8133bc6b6d7b4c31e285a2befb	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-123.20.1.el7.src.rpm	e69c7c2500a12a840902e8d5ab8aef71afe3fb8133bc6b6d7b4c31e285a2befb	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-123.20.1.el7.src.rpm	e69c7c2500a12a840902e8d5ab8aef71afe3fb8133bc6b6d7b4c31e285a2befb	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-3.10.0-123.20.1.el7.x86_64.rpm	206a3bb1af25bb3767caf8187b0aa5436f5fc2294f0ea0d071ec09336598010b	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-123.20.1.el7.x86_64.rpm	206a3bb1af25bb3767caf8187b0aa5436f5fc2294f0ea0d071ec09336598010b	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-abi-whitelists-3.10.0-123.20.1.el7.noarch.rpm	b8892ef1e0be4b7c0f175248eede7aa4c83a7e2c2e2bd36df6811031515a5b71	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-123.20.1.el7.noarch.rpm	b8892ef1e0be4b7c0f175248eede7aa4c83a7e2c2e2bd36df6811031515a5b71	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-debug-3.10.0-123.20.1.el7.x86_64.rpm	a4e50835c100b438b5075c50587fa9e4cba6591e61706e332e8f7926bc610e81	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-123.20.1.el7.x86_64.rpm	a4e50835c100b438b5075c50587fa9e4cba6591e61706e332e8f7926bc610e81	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-debug-devel-3.10.0-123.20.1.el7.x86_64.rpm	84145000ae310677610de265422054695185885d12918bdc1cb3824d26f7c176	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-123.20.1.el7.x86_64.rpm	84145000ae310677610de265422054695185885d12918bdc1cb3824d26f7c176	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-devel-3.10.0-123.20.1.el7.x86_64.rpm	da63c490dcd40290e705ebcb361db0c9c602c52575b792d732eb189c89338561	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-123.20.1.el7.x86_64.rpm	da63c490dcd40290e705ebcb361db0c9c602c52575b792d732eb189c89338561	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-doc-3.10.0-123.20.1.el7.noarch.rpm	1282636698f7e2f758f1fdab6965643212d4dcd2474607841ac36c4f22052d70	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-headers-3.10.0-123.20.1.el7.x86_64.rpm	8ae97a192ca60d6b506e2a9b63844c3ab253b5c902bab78770d40058499be35c	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-123.20.1.el7.x86_64.rpm	8ae97a192ca60d6b506e2a9b63844c3ab253b5c902bab78770d40058499be35c	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-tools-3.10.0-123.20.1.el7.x86_64.rpm	a4cbdc2a5b1868588df0747150835df5a0080c0ee1a1d427e3ee4774299c6ffd	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-123.20.1.el7.x86_64.rpm	a4cbdc2a5b1868588df0747150835df5a0080c0ee1a1d427e3ee4774299c6ffd	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-tools-libs-3.10.0-123.20.1.el7.x86_64.rpm	c32348f3583ab1395f93a9a5e57762dacaf9ca51ee7bde0a3991efbd002ee1c2	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-123.20.1.el7.x86_64.rpm	c32348f3583ab1395f93a9a5e57762dacaf9ca51ee7bde0a3991efbd002ee1c2	ELSA-2025-1281	ol7_x86_64_u0_patch
	kernel-tools-libs-devel-3.10.0-123.20.1.el7.x86_64.rpm	f7654e27152de719416092f599d3cdb6e7a8af77ad2a08dd94b7fea4f3c6b359	ELSA-2025-1281	ol7_x86_64_optional_archive
	perf-3.10.0-123.20.1.el7.x86_64.rpm	97012708f0a5d8dc30453c5916e23881d5441733af239128deab236618dc9e3a	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-123.20.1.el7.x86_64.rpm	97012708f0a5d8dc30453c5916e23881d5441733af239128deab236618dc9e3a	ELSA-2025-20019	ol7_x86_64_u0_patch
	python-perf-3.10.0-123.20.1.el7.x86_64.rpm	d93701b2f9a13449b00e28b64a145c6222defb8341764c7ae853d60df099ab85	ELSA-2025-20019	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team