ELSA-2016-1277

ELSA-2016-1277 - kernel security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2016-06-23

Description

- [3.10.0-327.22.2.OL7]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-327.22.2]
- [infiniband] security: Restrict use of the write() interface (Don Dutile) [1332553 1316685] {CVE-2016-4565}

[3.10.0-327.22.1]
- [mm] mmu_notifier: fix memory corruption (Jerome Glisse) [1335727 1307042]
- [misc] cxl: Increase timeout for detection of AFU mmio hang (Steve Best) [1335419 1329682]
- [misc] cxl: Configure the PSL for two CAPI ports on POWER8NVL (Steve Best) [1336389 1278793]
- [powerpc] Define PVR value for POWER8NVL processor (Steve Best) [1336389 1278793]
- [x86] Mark Intel Knights Landing-F processor as not supported (Steve Best) [1335407 1331516]
- [netdrv] ixgbevf: fix spoofed packets with random MAC (Ken Cox) [1335406 1247345]
- [netdrv] ixgbevf: use ether_addr_copy instead of memcpy (Ken Cox) [1335406 1247345]
- [scsi] hpsa: update rev to 3.4.10-0-RH3 (Joseph Szczypek) [1334773 1296287]
- [scsi] hpsa: check for a null phys_disk pointer in ioaccel2 path (Joseph Szczypek) [1334773 1296287]
- [cpufreq] intel_pstate: Fix divide by zero on Knights Landing (Steve Best) [1334438 1273305]
- [mm] hugetlbfs: optimize when NUMA=n (Rui Wang) [1334436 1274624]
- [mm] hugetlb: use memory policy when available (Rui Wang) [1334436 1274624]
- [mm] optimize put_mems_allowed() usage (Rui Wang) [1334436 1274624]
- [x86] Mark Intel Knights Landing processor as supported (Steve Best) [1332991 1158238]
- [block] virtio-blk: use VIRTIO_BLK_F_WCE and VIRTIO_BLK_F_CONFIG_WCE in virtio1 (Fam Zheng) [1327611 1266008]
- [x86] mm: suitable memory should go to ZONE_MOVABLE (Igor Mammedov) [1327588 1265880]
- [mm] memory-hotplug: add zone_for_memory() for selecting zone for new memory (Igor Mammedov) [1327588 1265880]
- [s390] mm: Fix memory hotplug for unaligned standby memory (Igor Mammedov) [1327588 1265880]
- [mm] memory-hotplug: Remove 'weak' from memory_block_size_bytes() declaration (Igor Mammedov) [1327588 1265880]
- [mm] Add prototype declaration to the header file (Igor Mammedov) [1327588 1265880]
- [mm] hotplug: verify hotplug memory range (Igor Mammedov) [1327588 1265880]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1327587 1284936]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Xin Long) [1324748 1270586] {CVE-2015-8767}
- [net] sctp: Whitespace fix (Xin Long) [1324748 1270586] {CVE-2015-8767}
- [fs] xfs: fix splice/direct-IO deadlock (Bill O'Donnell) [1324098 824796]
- [fs] vfs: split generic splice code from i_mutex locking (Bill O'Donnell) [1324098 824796]
- [lib] keys: Fix ASN.1 indefinite length object parsing (David Howells) [1308814 1308815] {CVE-2016-0758}

[3.10.0-327.21.1]
- [lib] klist: fix starting point removed bug in klist iterators (Ewan Milne) [1333403 1309433]
- [acpi] tables: test the correct variable (Prarit Bhargava) [1331681 1242556]
- [x86] acpi: Handle apic/x2apic entries in MADT in correct order (Prarit Bhargava) [1331681 1242556]
- [acpi] tables: Add acpi_subtable_proc to ACPI table parsers (Prarit Bhargava) [1331681 1242556]
- [acpi] table: Always count matched and successfully parsed entries (Prarit Bhargava) [1331681 1242556]
- [acpi] table: Add new function to get table entries (Prarit Bhargava) [1331681 1242556]
- [netdrv] mlx4_en: Fix IRQ affinity on s390x (Kamal Heib) [1327583 1264148]
- [usb] xhci: Workaround to get Intel xHCI reset working more reliably (Torez Smith) [1327581 1318570]
- [block] Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric Sandeen) [1324530 1285549]
- [powerpc] eeh: Fix PE location code (Gustavo Duarte) [1324528 1302537]
- [powerpc] eeh: Wrong place to call pci_get_slot() (Steve Best) [1327834 1273996]
- [net] ipv6: Nonlocal bind (Sabrina Dubroca) [1324502 1315968]
- [net] ipv4: bind ip_nonlocal_bind to current netns (Sabrina Dubroca) [1324502 1315968]

[3.10.0-327.20.1]
- [kernel] audit: stop an old auditd being starved out by a new auditd (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: try harder to send to auditd upon netlink failure (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: remove stray newlines from audit_log_lost messages (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: get rid of *NO* daemon at audit_pid=0 message (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: prevent an older auditd shutdown from orphaning a newer auditd startup (Richard Guy Briggs) [1328802 1253123]
- [net] netlink: don't hold mutex in rcu callback when releasing mmapd ring (Phil Sutter) [1328801 1238749]
- [lib] rhashtable: Wait for RCU readers after final unzip work (Phil Sutter) [1328801 1238749]
- [net] netlink: Lockless lookup with RCU grace period in socket release (Phil Sutter) [1328801 1238749]
- [net] netlink: use jhash as hashfn for rhashtable (Phil Sutter) [1328801 1238749]

[3.10.0-327.19.1]
- [net] tcp, dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1323960 1305525]
- [net] tcp, dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1323960 1305525]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1323960 1305525]

Related CVEs

CVE-2015-8767

CVE-2016-4565

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	kernel-3.10.0-327.22.2.el7.src.rpm	f52b006159a95b220c809ae9bd68248b	ELBA-2021-1397-1
	kernel-3.10.0-327.22.2.el7.x86_64.rpm	08f04cabeac9d6668d45119a2d5208bc	ELBA-2021-1397-1
	kernel-abi-whitelists-3.10.0-327.22.2.el7.noarch.rpm	4c064c4720e770d9678c23b570fba920	ELBA-2021-1397-1
	kernel-debug-3.10.0-327.22.2.el7.x86_64.rpm	973eb3525bd050c766d80e36cf74cff7	ELBA-2021-1397-1
	kernel-debug-devel-3.10.0-327.22.2.el7.x86_64.rpm	dbb807e22822fab8feeba0299d532f4e	ELBA-2021-1397-1
	kernel-devel-3.10.0-327.22.2.el7.x86_64.rpm	2884f06c3aeab3c1ccf949b40ef6f52d	ELBA-2021-1397-1
	kernel-doc-3.10.0-327.22.2.el7.noarch.rpm	25720d599a5796fd8e2640a25583c879	ELBA-2021-1397-1
	kernel-headers-3.10.0-327.22.2.el7.x86_64.rpm	cd67f238900dd2b3eebe42425865c472	ELBA-2021-1397-1
	kernel-tools-3.10.0-327.22.2.el7.x86_64.rpm	fa119cd9179aaadd4153f2b76773e0cb	ELBA-2021-1397-1
	kernel-tools-libs-3.10.0-327.22.2.el7.x86_64.rpm	2cf1a732f9c4b471ab81021ef06630fc	ELBA-2021-1397-1
	kernel-tools-libs-devel-3.10.0-327.22.2.el7.x86_64.rpm	105623456b5a050f4d4f954b0861fbd6	ELBA-2021-1397-1
	perf-3.10.0-327.22.2.el7.x86_64.rpm	5da1b6f3a5148e97dfbd755bd936a8e5	ELSA-2021-9220
	python-perf-3.10.0-327.22.2.el7.x86_64.rpm	32e7b3d16143dabde7ba01c8ed30539e	ELSA-2021-9220

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team