ELSA-2023-2948

ELSA-2023-2948 - device-mapper-multipath security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-05-24

Description

[0.8.4-37]
- Fix bugzilla linked to the changes (was previously linked to
the wrong bug, 2162537)
- Resolves: bz #2166468

[0.8.4-36]
- Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch
- Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
- Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch
- Resolves: bz #2166468

[0.8.4-35]
- Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch
- Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch
- Resolves: bz #2155560

[0.8.4-34]
- Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
* Fixes bz #2126714
- Cleanup multiple CI tests
- Resolves: bz #2126714

[0.8.4-33]
- Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch
* Fixes bz #2141996
- Modify tests/multipath_conf_syntax/main.sh
* fix unrelated test error
- Resolves: bz #2141996

[0.8.4-32]
- Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch
* Fixes bz #2128885
- Add 0117-libmultipath-cleanup-remove_feature.patch
- Add 0118-libmultipath-cleanup-add_feature.patch
- Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch
- Add 0120-libmultipath-fix-queue_mode-feature-handling.patch
- Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch
- Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
- Add 0123-libmultipath-get-nvme-path-transport-protocol.patch
- Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
* Fixes bz #2022359
- Resolves: bz #2022359, #2128885

[0.8.4-31]
- Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
* Fixes bz #2133996
- Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
* Fixes bz #2133990
- Resolves: bz #2133990, #2133996

[0.8.4-30]
- Add 0111-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
- Add 0112-libmultipath-return-success-if-we-raced-to-remove-a-.patch
- Add 0113-multipathd-Handle-losing-all-path-in-update_map.patch
- Resolves: bz #2110485

[0.8.4-29]
- Rebuild for rhel-8.8.0
- Resolves: bz #2123446

Related CVEs

CVE-2022-41973

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	device-mapper-multipath-0.8.4-37.el8.src.rpm	391d7041ae02683eef8ff4b1e388e83a	-
	device-mapper-multipath-0.8.4-37.el8.aarch64.rpm	c77f01017e374051b59d9325488ea2a9	-
	device-mapper-multipath-devel-0.8.4-37.el8.aarch64.rpm	00367ed9f1da19d9e15d4d71de5aa851	-
	device-mapper-multipath-libs-0.8.4-37.el8.aarch64.rpm	efc5ad265c3d3ec8103f484260b7a8b6	-
	kpartx-0.8.4-37.el8.aarch64.rpm	539157905fbfdcb312ebba819d825895	-
	libdmmp-0.8.4-37.el8.aarch64.rpm	ca403467469cf1cf92c0dfccc4aee15b	-
Oracle Linux 8 (x86_64)	device-mapper-multipath-0.8.4-37.el8.src.rpm	391d7041ae02683eef8ff4b1e388e83a	-
	device-mapper-multipath-0.8.4-37.el8.x86_64.rpm	c2c6bfb7ecc9b4ea1a7b6dfeab8f9323	-
	device-mapper-multipath-devel-0.8.4-37.el8.i686.rpm	4d850c4809436f4a183b7b5f83f46732	-
	device-mapper-multipath-devel-0.8.4-37.el8.x86_64.rpm	cfb88c9f393c925256ac9b0ce4dac52b	-
	device-mapper-multipath-libs-0.8.4-37.el8.i686.rpm	e2621fb64eaa694ea781f1474986bf58	-
	device-mapper-multipath-libs-0.8.4-37.el8.x86_64.rpm	bed7f6311a07761781029d68edcdae5b	-
	kpartx-0.8.4-37.el8.x86_64.rpm	496854620ad3b254a2382bfb42bfe9ad	-
	libdmmp-0.8.4-37.el8.i686.rpm	a949f337bbbe5ca4ca05a2ae66fa7a72	-
	libdmmp-0.8.4-37.el8.x86_64.rpm	e66d4708a4c66083e6440a70c501f290	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team