ELSA-2023-2459

ELSA-2023-2459 - device-mapper-multipath security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-05-15

Description

[0.8.7-20]
- Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
- Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
- Change how the installation dir for kpartx_id is specified
- Resolves: bz #1926147

[0.8.7-19]
- Fix bugzilla linked to the changes (was previously linked to
the wrong bug, 2162536)
- Resolves: bz #2166467

[0.8.7-18]
- Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
- Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
- Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
- Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
- Resolves: bz #2166467

[0.8.7-17]
- Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
- Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
- Resolves: bz #2145225

[0.8.7-16]
- Add 0076-multipath.conf-5-remove-io-affinity-information.patch
- Resolves: bz #2143125

[0.8.7-15]
- Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
* Fixes bz #2141860
- Add 0068-libmultipath-cleanup-remove_feature.patch
- Add 0069-libmultipath-cleanup-add_feature.patch
- Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
- Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
- Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
- Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
- Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
- Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
* Fixes bz #2033080
- Resolves: bz #2033080, #2141860

[0.8.7-14]
- Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
* Fixes bz #2133999
- Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
* Fixes bz #2133989
- Resolves: bz #2133989, #2133999

[0.8.7-13]
- Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
- Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
- Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
- Resolves: bz #2125357

Related CVEs

CVE-2022-41973

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 9 (aarch64)	device-mapper-multipath-0.8.7-20.el9.src.rpm	a8d031e5cb13a10679cdbaedba95f8d9	-
	device-mapper-multipath-0.8.7-20.el9.aarch64.rpm	5bd726150db9cbbb5e304b02a1600ebc	-
	device-mapper-multipath-devel-0.8.7-20.el9.aarch64.rpm	c991355da2b944bfc37aeeaffe3c73db	-
	device-mapper-multipath-libs-0.8.7-20.el9.aarch64.rpm	71f180ef2f5448120080dc3aa5990ac2	-
	kpartx-0.8.7-20.el9.aarch64.rpm	805f92d29a6655f2614ff5a2429c22a2	-
Oracle Linux 9 (x86_64)	device-mapper-multipath-0.8.7-20.el9.src.rpm	a8d031e5cb13a10679cdbaedba95f8d9	-
	device-mapper-multipath-0.8.7-20.el9.x86_64.rpm	04b6aa27410321e3dc56835e92668797	-
	device-mapper-multipath-devel-0.8.7-20.el9.i686.rpm	0e119002c47149e83d75be8fbc8cf97f	-
	device-mapper-multipath-devel-0.8.7-20.el9.x86_64.rpm	1a30f7ffc81b8e19da1547f2d4876d24	-
	device-mapper-multipath-libs-0.8.7-20.el9.i686.rpm	4c6ff43d6b996820daae0c75e7b74a0f	-
	device-mapper-multipath-libs-0.8.7-20.el9.x86_64.rpm	c2d2b8984cc47aceeab1a264d356d976	-
	kpartx-0.8.7-20.el9.x86_64.rpm	ec76af0d22f8e97bc4c3962ae738ae30	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team