Stay Connected:

ELSA-2015-1221

ELSA-2015-1221 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:MODERATE
Release Date:2015-07-14

Description


[2.6.32-504.30.3]
- [redhat] spec: Update dracut dependency to pull in drbg module (Frantisek Hrbata) [1241517 1241338]

[2.6.32-504.30.2]
- [crypto] rng: Remove krng (Herbert Xu) [1233512 1226418]
- [crypto] drbg: Add stdrng alias and increase priority (Herbert Xu) [1233512 1226418]
- [crypto] seqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]
- [crypto] eseqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]
- [crypto] chainiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]

[2.6.32-504.30.1]
- [net] Fix checksum features handling in netif_skb_features() (Vlad Yasevich) [1231690 1220247]

[2.6.32-504.29.1]
- [net] gso: fix skb_segment for non-offset skb pointers (Jiri Benc) [1229586 1200533]

[2.6.32-504.28.1]
- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1202860 1185166] {CVE-2015-1805}
- [net] ipv4: Missing sk_nulls_node_init in ping_unhash (Denys Vlasenko) [1218102 1218103] {CVE-2015-3636}
- [net] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition (Jesper Brouer) [1227467 1227468 1212801 1200541]
- [net] tcp: Restore RFC5961-compliant behavior for SYN packets (Jesper Brouer) [1227467 1227468 1212801 1200541]
- [x86] kernel: ignore NMI IOCK when in kdump kernel (Jerry Snitselaar) [1225054 1196263]
- [x86] asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Mateusz Guzik) [1209232 1209233] {CVE-2015-2830}
- [fs] gfs2: try harder to obtain journal lock during recovery (Abhijith Das) [1222588 1110846]
for core_pmu (Jiri Olsa) [1219149 1188336]
- [x86] mm: Linux stack ASLR implementation (Jacob Tanenbaum) [1195682 1195683] {CVE-2015-1593}
- [fs] xfs: DIO write completion size updates race (Brian Foster) [1218499 1198440]
- [net] ipv6: Don't reduce hop limit for an interface (Denys Vlasenko) [1208492 1208493]
- [net] vlan: more careful checksum features handling (Vlad Yasevich) [1221844 1212384]
- [kernel] tracing: Export tracing clock functions (Jerry Snitselaar) [1217986 1212502]
- [edac] sb_edac: fix corruption/crash on imbalanced Haswell home agents (Seth Jennings) [1213468 1210148]
- [netdrv] tun: Fix csum_start with VLAN acceleration (Jason Wang) [1217189 1036482]
- [netdrv] tun: unbreak truncated packet signalling (Jason Wang) [1217189 1036482]
- [netdrv] tuntap: hardware vlan tx support (Jason Wang) [1217189 1036482]
- [vhost] vhost-net: fix handle_rx buffer size (Jason Wang) [1217189 1036482]
- [netdrv] ixgbe: fix X540 Completion timeout (John Greene) [1215855 1150343]
- [char] tty: drop driver reference in tty_open fail path (Mateusz Guzik) [1201893 1201894]
- [netdrv] macvtap: Fix csum_start when VLAN tags are present (Vlad Yasevich) [1215914 1123697]
- [netdrv] macvtap: signal truncated packets (Vlad Yasevich) [1215914 1123697]
- [netdrv] macvtap: restore vlan header on user read (Vlad Yasevich) [1215914 1123697]
- [netdrv] macvlan: Initialize vlan_features to turn on offload support (Vlad Yasevich) [1215914 1123697]
- [netdrv] macvlan: Add support for 'always_on' offload features (Vlad Yasevich) [1215914 1123697]
- [netdrv] mactap: Fix checksum errors for non-gso packets in bridge mode (Vlad Yasevich) [1215914 1123697]
- [netdrv] revert 'macvlan: fix checksums error when we are in bridge mode' (Vlad Yasevich) [1215914 1123697]
- [net] core: Correctly set segment mac_len in skb_segment() (Vlad Yasevich) [1215914 1123697]
- [net] core: generalize skb_segment() (Vlad Yasevich) [1215914 1123697]
- [net] core: Add skb_headers_offset_update helper function (Vlad Yasevich) [1215914 1123697]
- [netdrv] ixgbe: Correctly disable VLAN filter in promiscuous mode (Vlad Yasevich) [1215914 1123697]
- [netdrv] ixgbe: remove vlan_filter_disable and enable functions (Vlad Yasevich) [1215914 1123697]
- [netdrv] qlge: Fix TSO for non-accelerated vlan traffic (Vlad Yasevich) [1215914 1123697]
- [netdrv] i40evf: Fix TSO and hw checksums for non-accelerated vlan packets (Vlad Yasevich) [1215914 1123697]
- [netdrv] i40e: Fix TSO and hw checksums for non-accelerated vlan packets (Vlad Yasevich) [1215914 1123697]
- [netdrv] ehea: Fix TSO and hw checksums with non-accelerated vlan packets (Vlad Yasevich) [1215914 1123697]
- [netdrv] e1000: Fix TSO for non-accelerated vlan traffic (Vlad Yasevich) [1215914 1123697]
- [kernel] ipc: sysv shared memory limited to 8TiB (George Beshers) [1224301 1171218]
- [mm] hugetlb: improve page-fault scalability (Larry Woodman) [1212300 1120365]
- [netdrv] hyperv: Fix the total_data_buflen in send path (Jason Wang) [1222556 1132918]
- [crypto] drbg: fix maximum value checks on 32 bit systems (Herbert Xu) [1225950 1219907]
- [crypto] drbg: remove configuration of fixed values (Herbert Xu) [1225950 1219907]

[2.6.32-504.27.1]
- [netdrv] mlx4_en: current_mac isn't updated in port up (Amir Vadai) [1224383 1081667]
- [netdrv] mlx4_en: Fix mac_hash database inconsistency (Amir Vadai) [1224383 1081667]
- [netdrv] mlx4_en: Protect MAC address modification with the state_lock mutex (Amir Vadai) [1224383 1081667]
- [netdrv] mlx4_en: Fix errors in MAC address changing when port is down (Amir Vadai) [1224383 1081667]
- [netdrv] mlx4: Verify port number in __mlx4_unregister_mac (Amir Vadai) [1224383 1081667]
- [netdrv] mlx4_en: Adding missing initialization of perm_addr (Amir Vadai) [1225489 1120930]

[2.6.32-504.26.1]
- [kernel] sched: Fix clock_gettime(CLOCK_[PROCESS/THREAD]_CPUTIME_ID) monotonicity (Seth Jennings) [1219501 1140024]
- [kernel] sched: Replace use of entity_key() (Larry Woodman) [1219123 1124603]

[2.6.32-504.25.1]
- [net] ipvs: allow rescheduling of new connections when port reuse is detected (Marcelo Leitner) [1222771 1108514]
- [net] ipvs: Fix reuse connection if real server is dead (Marcelo Leitner) [1222771 1108514]
- [netdrv] bonding: fix locking in enslave failure path (Nikolay Aleksandrov) [1222483 1221856]
- [netdrv] bonding: primary_slave & curr_active_slave are not cleaned on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
- [netdrv] bonding: vlans don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
- [netdrv] bonding: mc addresses don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
- [netdrv] bonding: IFF_BONDING is not stripped on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
- [netdrv] bonding: fix error handling if slave is busy v2 (Nikolay Aleksandrov) [1222483 1221856]

[2.6.32-504.24.1]
- [mm] readahead: get back a sensible upper limit (Rafael Aquini) [1215755 1187940]


Related CVEs


CVE-2015-3636
CVE-2015-1593
CVE-2011-5321
CVE-2015-2830
CVE-2015-2922

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 6 (i386) kernel-2.6.32-504.30.3.el6.src.rpm6ac909ec15c8fbc8e2bd06e764f50311b4b6c4fe1d71f89ceb4c43f145d1fb66ELSA-2024-1831ol6_i386_latest_archive
kernel-2.6.32-504.30.3.el6.src.rpm6ac909ec15c8fbc8e2bd06e764f50311b4b6c4fe1d71f89ceb4c43f145d1fb66ELSA-2024-1831ol6_u6_i386_patch
kernel-2.6.32-504.30.3.el6.i686.rpm0f7824f5bfd932d6e9e4ee258836cc59fda65315e0ae87d7c768cf7182a4a6a0ELSA-2024-1831ol6_i386_latest_archive
kernel-2.6.32-504.30.3.el6.i686.rpm0f7824f5bfd932d6e9e4ee258836cc59fda65315e0ae87d7c768cf7182a4a6a0ELSA-2024-1831ol6_u6_i386_patch
kernel-abi-whitelists-2.6.32-504.30.3.el6.noarch.rpm48dfd1bf408c41544146139d5b7d8222328294229c3df7517fd0674a9bd5a968ELSA-2024-1831ol6_i386_latest_archive
kernel-abi-whitelists-2.6.32-504.30.3.el6.noarch.rpm48dfd1bf408c41544146139d5b7d8222328294229c3df7517fd0674a9bd5a968ELSA-2024-1831ol6_u6_i386_patch
kernel-debug-2.6.32-504.30.3.el6.i686.rpm6bb021a4097e6a4fec9540739e15ffbbdc703416c592bf823b320a2c921234edELSA-2024-1831ol6_i386_latest_archive
kernel-debug-2.6.32-504.30.3.el6.i686.rpm6bb021a4097e6a4fec9540739e15ffbbdc703416c592bf823b320a2c921234edELSA-2024-1831ol6_u6_i386_patch
kernel-debug-devel-2.6.32-504.30.3.el6.i686.rpm59e53dd6a7692c73dc3e53e61b9e47744c1c4834575f34134641c9b65c0564b6ELSA-2024-1831ol6_i386_latest_archive
kernel-debug-devel-2.6.32-504.30.3.el6.i686.rpm59e53dd6a7692c73dc3e53e61b9e47744c1c4834575f34134641c9b65c0564b6ELSA-2024-1831ol6_u6_i386_patch
kernel-devel-2.6.32-504.30.3.el6.i686.rpm700af2b799d03be3bff39212531f53d49f923e495a849be763034d7fdd5fdb6dELSA-2024-1831ol6_i386_latest_archive
kernel-devel-2.6.32-504.30.3.el6.i686.rpm700af2b799d03be3bff39212531f53d49f923e495a849be763034d7fdd5fdb6dELSA-2024-1831ol6_u6_i386_patch
kernel-doc-2.6.32-504.30.3.el6.noarch.rpm6c3e472564ce9a6faa4695e2bdaa6b44daee91ae809c89056b587bc99ea9f9b2ELSA-2024-1831ol6_i386_latest_archive
kernel-doc-2.6.32-504.30.3.el6.noarch.rpm6c3e472564ce9a6faa4695e2bdaa6b44daee91ae809c89056b587bc99ea9f9b2ELSA-2024-1831ol6_u6_i386_patch
kernel-firmware-2.6.32-504.30.3.el6.noarch.rpm9b93d39bc5db0a9a62fba7033e8dea2929c04f685ec4e6c59312d2fe9af118feELSA-2024-1831ol6_i386_latest_archive
kernel-firmware-2.6.32-504.30.3.el6.noarch.rpm9b93d39bc5db0a9a62fba7033e8dea2929c04f685ec4e6c59312d2fe9af118feELSA-2024-1831ol6_u6_i386_patch
kernel-headers-2.6.32-504.30.3.el6.i686.rpm7de0e3ef725df7e6e977eca7b5c7b0ab128a4393c1faf596e774397e2df2fa6fELSA-2024-1831ol6_i386_latest_archive
kernel-headers-2.6.32-504.30.3.el6.i686.rpm7de0e3ef725df7e6e977eca7b5c7b0ab128a4393c1faf596e774397e2df2fa6fELSA-2024-1831ol6_u6_i386_patch
perf-2.6.32-504.30.3.el6.i686.rpm0cebc201ef495961872e9cf83f2314ba7607d997da5564b8c8dd0ac7064b4f7eELSA-2024-1831ol6_i386_latest_archive
perf-2.6.32-504.30.3.el6.i686.rpm0cebc201ef495961872e9cf83f2314ba7607d997da5564b8c8dd0ac7064b4f7eELSA-2024-1831ol6_u6_i386_patch
python-perf-2.6.32-504.30.3.el6.i686.rpm94f161554ee74fcc356ce85608c5290f06de1e68baf538cca3b54e18d67ffa59ELSA-2024-1831ol6_i386_latest_archive
python-perf-2.6.32-504.30.3.el6.i686.rpm94f161554ee74fcc356ce85608c5290f06de1e68baf538cca3b54e18d67ffa59ELSA-2024-1831ol6_u6_i386_patch
Oracle Linux 6 (x86_64) kernel-2.6.32-504.30.3.el6.src.rpm6ac909ec15c8fbc8e2bd06e764f50311b4b6c4fe1d71f89ceb4c43f145d1fb66ELSA-2024-1831ol6_u6_x86_64_patch
kernel-2.6.32-504.30.3.el6.src.rpm6ac909ec15c8fbc8e2bd06e764f50311b4b6c4fe1d71f89ceb4c43f145d1fb66ELSA-2024-1831ol6_x86_64_latest_archive
kernel-2.6.32-504.30.3.el6.x86_64.rpme6aa5c893e1a2951a4d220a7eae45c5ccf637b3087a16f183ca3b77c6776c9fcELSA-2024-1831ol6_u6_x86_64_patch
kernel-2.6.32-504.30.3.el6.x86_64.rpme6aa5c893e1a2951a4d220a7eae45c5ccf637b3087a16f183ca3b77c6776c9fcELSA-2024-1831ol6_x86_64_latest_archive
kernel-abi-whitelists-2.6.32-504.30.3.el6.noarch.rpm48dfd1bf408c41544146139d5b7d8222328294229c3df7517fd0674a9bd5a968ELSA-2024-1831ol6_u6_x86_64_patch
kernel-abi-whitelists-2.6.32-504.30.3.el6.noarch.rpm48dfd1bf408c41544146139d5b7d8222328294229c3df7517fd0674a9bd5a968ELSA-2024-1831ol6_x86_64_latest_archive
kernel-debug-2.6.32-504.30.3.el6.x86_64.rpm3919a8f72a003e3f70bdcaa3355ac9741b12e159b58146a69cdb7d38fd9954f1ELSA-2024-1831ol6_u6_x86_64_patch
kernel-debug-2.6.32-504.30.3.el6.x86_64.rpm3919a8f72a003e3f70bdcaa3355ac9741b12e159b58146a69cdb7d38fd9954f1ELSA-2024-1831ol6_x86_64_latest_archive
kernel-debug-devel-2.6.32-504.30.3.el6.x86_64.rpm73a02f8aa2c99a249193358d243be745a7034bd0bdda23a4f14644979e3da040ELSA-2024-1831ol6_u6_x86_64_patch
kernel-debug-devel-2.6.32-504.30.3.el6.x86_64.rpm73a02f8aa2c99a249193358d243be745a7034bd0bdda23a4f14644979e3da040ELSA-2024-1831ol6_x86_64_latest_archive
kernel-devel-2.6.32-504.30.3.el6.x86_64.rpm67af3aeb1a73889e7a58161af8125dfce6b0594f931c090dedf3e3db9733ea6dELSA-2024-1831ol6_u6_x86_64_patch
kernel-devel-2.6.32-504.30.3.el6.x86_64.rpm67af3aeb1a73889e7a58161af8125dfce6b0594f931c090dedf3e3db9733ea6dELSA-2024-1831ol6_x86_64_latest_archive
kernel-doc-2.6.32-504.30.3.el6.noarch.rpm6c3e472564ce9a6faa4695e2bdaa6b44daee91ae809c89056b587bc99ea9f9b2ELSA-2024-1831ol6_u6_x86_64_patch
kernel-doc-2.6.32-504.30.3.el6.noarch.rpm6c3e472564ce9a6faa4695e2bdaa6b44daee91ae809c89056b587bc99ea9f9b2ELSA-2024-1831ol6_x86_64_latest_archive
kernel-firmware-2.6.32-504.30.3.el6.noarch.rpm9b93d39bc5db0a9a62fba7033e8dea2929c04f685ec4e6c59312d2fe9af118feELSA-2024-1831ol6_u6_x86_64_patch
kernel-firmware-2.6.32-504.30.3.el6.noarch.rpm9b93d39bc5db0a9a62fba7033e8dea2929c04f685ec4e6c59312d2fe9af118feELSA-2024-1831ol6_x86_64_latest_archive
kernel-headers-2.6.32-504.30.3.el6.x86_64.rpmdb63f3bbee7c2a436a0df92bbfd7a3517a24311adc650d16a61ea5d6bb386686ELSA-2024-1831ol6_u6_x86_64_patch
kernel-headers-2.6.32-504.30.3.el6.x86_64.rpmdb63f3bbee7c2a436a0df92bbfd7a3517a24311adc650d16a61ea5d6bb386686ELSA-2024-1831ol6_x86_64_latest_archive
perf-2.6.32-504.30.3.el6.x86_64.rpmc7138cc124fa9876cbf8e9485515591013eba9b61f0271e034844c5e71562e89ELSA-2024-1831ol6_u6_x86_64_patch
perf-2.6.32-504.30.3.el6.x86_64.rpmc7138cc124fa9876cbf8e9485515591013eba9b61f0271e034844c5e71562e89ELSA-2024-1831ol6_x86_64_latest_archive
python-perf-2.6.32-504.30.3.el6.x86_64.rpm4a9bf4d032bcb53481f83b54d0b4cf1f8a7ac5078f64ada4ab719904902338abELSA-2024-1831ol6_u6_x86_64_patch
python-perf-2.6.32-504.30.3.el6.x86_64.rpm4a9bf4d032bcb53481f83b54d0b4cf1f8a7ac5078f64ada4ab719904902338abELSA-2024-1831ol6_x86_64_latest_archive



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights