ELSA-2015-0987

ELSA-2015-0987 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2015-05-12

Description

[3.10.0-229.4.2]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-229.4.2]
- [x86] crypto: aesni - fix memory usage in GCM decryption (Kurt Stutsman) [1213331 1212178] {CVE-2015-3331}

[3.10.0-229.4.1]
- [crypto] x86: sha256_ssse3 - also test for BMI2 (Herbert Xu) [1211484 1201563]
- [crypto] testmgr: fix RNG return code enforcement (Herbert Xu) [1211487 1198978]
- [crypto] rng: RNGs must return 0 in success case (Herbert Xu) [1211487 1198978]
- [crypto] x86: sha1 - reduce size of the AVX2 asm implementation (Herbert Xu) [1211291 1177968]
- [crypto] x86: sha1 - fix stack alignment of AVX2 variant (Herbert Xu) [1211291 1177968]
- [crypto] x86: sha1 - re-enable the AVX variant (Herbert Xu) [1211291 1177968]
- [crypto] sha: SHA1 transform x86_64 AVX2 (Herbert Xu) [1211291 1177968]
- [crypto] sha-mb: sha1_mb_alg_state can be static (Herbert Xu) [1211290 1173756]
- [crypto] mcryptd: mcryptd_flist can be static (Herbert Xu) [1211290 1173756]
- [crypto] sha-mb: SHA1 multibuffer job manager and glue code (Herbert Xu) [1211290 1173756]
- [crypto] sha-mb: SHA1 multibuffer crypto computation (x8 AVX2) (Herbert Xu) [1211290 1173756]
- [crypto] sha-mb: SHA1 multibuffer submit and flush routines for AVX2 (Herbert Xu) [1211290 1173756]
- [crypto] sha-mb: SHA1 multibuffer algorithm data structures (Herbert Xu) [1211290 1173756]
- [crypto] sha-mb: multibuffer crypto infrastructure (Herbert Xu) [1211290 1173756]
- [kernel] sched: Add function single_task_running to let a task check if it is the only task running on a cpu (Herbert Xu) [1211290 1173756]
- [crypto] ahash: initialize entry len for null input in crypto hash sg list walk (Herbert Xu) [1211290 1173756]
- [crypto] ahash: Add real ahash walk interface (Herbert Xu) [1211290 1173756]
- [char] random: account for entropy loss due to overwrites (Herbert Xu) [1211288 1110044]
- [char] random: allow fractional bits to be tracked (Herbert Xu) [1211288 1110044]
- [char] random: statically compute poolbitshift, poolbytes, poolbits (Herbert Xu) [1211288 1110044]

[3.10.0-229.3.1]
- [netdrv] mlx4_en: tx_info->ts_requested was not cleared (Doug Ledford) [1209240 1178070]

[3.10.0-229.2.1]
- [char] tpm: Added Little Endian support to vtpm module (Steve Best) [1207051 1189017]
- [powerpc] pseries: Fix endian problems with LE migration (Steve Best) [1207050 1183198]
- [iommu] vt-d: Work around broken RMRR firmware entries (Myron Stowe) [1205303 1195802]
- [iommu] vt-d: Store bus information in RMRR PCI device path (Myron Stowe) [1205303 1195802]
- [s390] zcrypt: enable s390 hwrng to seed kernel entropy (Hendrik Brueckner) [1205300 1196398]
- [s390] zcrypt: improve device probing for zcrypt adapter cards (Hendrik Brueckner) [1205300 1196398]
- [net] team: fix possible null pointer dereference in team_handle_frame (Jiri Pirko) [1202359 1188496]
- [fs] fsnotify: fix handling of renames in audit (Paul Moore) [1202358 1191562]
- [net] openvswitch: Fix net exit (Jiri Benc) [1202357 1200859]
- [fs] gfs2: Move gfs2_file_splice_write outside of #ifdef (Robert S Peterson) [1201256 1193910]
- [fs] gfs2: Allocate reservation during splice_write (Robert S Peterson) [1201256 1193910]
- [crypto] aesni: fix 'by8' variant for 128 bit keys (Herbert Xu) [1201254 1174971]
- [crypto] aesni: remove unused defines in 'by8' variant (Herbert Xu) [1201254 1174971]
- [crypto] aesni: fix counter overflow handling in 'by8' variant (Herbert Xu) [1201254 1174971]
- [crypto] aes: AES CTR x86_64 'by8' AVX optimization (Herbert Xu) [1201254 1174971]
- [kernel] audit: restore AUDIT_LOGINUID unset ABI (Richard Guy Briggs) [1197748 1120491]
- [kernel] audit: replace getname()/putname() hacks with reference counters (Paul Moore) [1197746 1155208]
- [kernel] audit: fix filename matching in __audit_inode() and __audit_inode_child() (Paul Moore) [1197746 1155208]
- [kernel] audit: enable filename recording via getname_kernel() (Paul Moore) [1197746 1155208]
- [fs] namei: simpler calling conventions for filename_mountpoint() (Paul Moore) [1197746 1155208]
- [fs] namei: create proper filename objects using getname_kernel() (Paul Moore) [1197746 1155208]
- [fs] namei: rework getname_kernel to handle up to PATH_MAX sized filenames (Paul Moore) [1197746 1155208]
- [fs] namei: cut down the number of do_path_lookup() callers (Paul Moore) [1197746 1155208]
- [fs] execve: use 'struct filename *' for executable name passing (Paul Moore) [1197746 1155208]
- [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181177 1179347] {CVE-2014-8159}

Related CVEs

CVE-2015-3331

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-229.4.2.el7.src.rpm	40d9972d861d13866a83772479024e27068c885d6565502ad3f10e80fa1a05a2	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-229.4.2.el7.src.rpm	40d9972d861d13866a83772479024e27068c885d6565502ad3f10e80fa1a05a2	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-229.4.2.el7.src.rpm	40d9972d861d13866a83772479024e27068c885d6565502ad3f10e80fa1a05a2	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-3.10.0-229.4.2.el7.x86_64.rpm	c3506db1ca6fa3a2ad14c2bdb431f109e63637638d347ae3c288c930b67bd724	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-229.4.2.el7.x86_64.rpm	c3506db1ca6fa3a2ad14c2bdb431f109e63637638d347ae3c288c930b67bd724	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-abi-whitelists-3.10.0-229.4.2.el7.noarch.rpm	700af60d35d5559c6e9bb9c0ea353d20d9f5f216f02429ccd9f7719c6bbb4e89	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-229.4.2.el7.noarch.rpm	700af60d35d5559c6e9bb9c0ea353d20d9f5f216f02429ccd9f7719c6bbb4e89	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-debug-3.10.0-229.4.2.el7.x86_64.rpm	3640741ad9008218ba368ea6bd15e8481427a3d94899d023675126609597e96c	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-229.4.2.el7.x86_64.rpm	3640741ad9008218ba368ea6bd15e8481427a3d94899d023675126609597e96c	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-debug-devel-3.10.0-229.4.2.el7.x86_64.rpm	6680183986f2a13f277d2a5b97d1ee0716ee331b0fe1a7803cbfb62628e3e6da	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-229.4.2.el7.x86_64.rpm	6680183986f2a13f277d2a5b97d1ee0716ee331b0fe1a7803cbfb62628e3e6da	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-devel-3.10.0-229.4.2.el7.x86_64.rpm	e498822795c59f6c21d640f214f8bb1ba15baee838f435c2c247726fe4909ab2	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-229.4.2.el7.x86_64.rpm	e498822795c59f6c21d640f214f8bb1ba15baee838f435c2c247726fe4909ab2	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-doc-3.10.0-229.4.2.el7.noarch.rpm	e1cbc5a9609c9452c18eaf656b44bc920c8019aad70854b0877f68926ab0e14f	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-headers-3.10.0-229.4.2.el7.x86_64.rpm	fceae2ac683cd475c2beff197301b975a479a2ce9f7ffa46b19eb931210f5eca	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-229.4.2.el7.x86_64.rpm	fceae2ac683cd475c2beff197301b975a479a2ce9f7ffa46b19eb931210f5eca	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-tools-3.10.0-229.4.2.el7.x86_64.rpm	64bdfd0fa2a03a9c3fe5709af70dd89e742b21d12417319db59a56965e3a0bbb	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-229.4.2.el7.x86_64.rpm	64bdfd0fa2a03a9c3fe5709af70dd89e742b21d12417319db59a56965e3a0bbb	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-tools-libs-3.10.0-229.4.2.el7.x86_64.rpm	730bffde250aa357fc0be2057f7a6e2fa886d0b8bbe4a1f82b691423d57c3bd5	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-229.4.2.el7.x86_64.rpm	730bffde250aa357fc0be2057f7a6e2fa886d0b8bbe4a1f82b691423d57c3bd5	ELSA-2025-1281	ol7_x86_64_u1_patch
	kernel-tools-libs-devel-3.10.0-229.4.2.el7.x86_64.rpm	b0569e893cc4eb4befe97f99a02902a9d7c18e8c7427477835ac42e960e0e70e	ELSA-2025-1281	ol7_x86_64_optional_archive
	perf-3.10.0-229.4.2.el7.x86_64.rpm	b0e8398c8ca5b55b66a71138572cb516ccf3499cd3dcfb2170b9c12a8a10dcfb	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-229.4.2.el7.x86_64.rpm	b0e8398c8ca5b55b66a71138572cb516ccf3499cd3dcfb2170b9c12a8a10dcfb	ELSA-2025-20019	ol7_x86_64_u1_patch
	python-perf-3.10.0-229.4.2.el7.x86_64.rpm	b55515d209d94aff2604edc316dba7a04499cdbf6e293cc5acd097dd784dcbef	ELSA-2025-20019	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team