Oracle7: ELSA-2022-9761: kernel Important Security Update | LinuxSe...
Oracle Linux Security Advisory ELSA-2022-9761

https://linux.oracle.com/errata/ELSA-2022-9761.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.66.3.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.66.3.el7uek.noarch.rpm
kernel-uek-4.1.12-124.66.3.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.66.3.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.66.3.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.66.3.el7uek.x86_64.rpm


SRPMS:
https://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.66.3.el7uek.src.rpm

Related CVEs:

CVE-2022-1011
CVE-2021-33656
CVE-2021-33655
CVE-2022-21546
CVE-2019-9213
CVE-2020-36516
CVE-2020-36557
CVE-2020-36558
CVE-2022-2588



Description of changes:

[4.1.12-124.66.3.el7uek]
- fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)  [Orabug: 33981149]  {CVE-2022-1011}
- vt: drop old FONT ioctls (Jiri Slaby)  [Orabug: 34408794]  {CVE-2021-33656}
- video: of_display_timing.h: include errno.h (Hsin-Yi Wang)  [Orabug: 34408910]  {CVE-2021-33655}
- fbcon: Disallow setting font bigger than screen size (Helge Deller)  [Orabug: 34408910]  {CVE-2021-33655}
- scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419974]  {CVE-2022-21546}
- scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Gulam Mohamed)  [Orabug: 33349684] [Orabug: 34492498]

[4.1.12-124.66.2.el7uek]
- mm: enforce min addr even if capable() in expand_downwards() (Jann Horn)  [Orabug: 29501997]  {CVE-2019-9213}
- ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss) 
- ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516}
- ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit (Eric W. Biederman)  [Orabug: 33917058]  {CVE-2020-36516}
- ipv4: igmp: guard against silly MTU values (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516}
- inet: constify ip_dont_fragment() arguments (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516}
- ip: constify ip_build_and_send_pkt() socket argument (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516}
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Eric Biggers)  [Orabug: 34433461]  {CVE-2020-36557}
- vt: vt_ioctl: fix race in VT_RESIZEX (Eric Dumazet)  [Orabug: 34433476]  {CVE-2020-36558}
- VT_RESIZEX: get rid of field-by-field copyin (Al Viro)  [Orabug: 34433476]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460939] [Orabug: 34484730]  {CVE-2022-2588}

[4.1.12-124.66.1.el7uek]
- net: fix uninit-value in __hw_addr_add_ex() (Eric Dumazet)  [Orabug: 34395887]
- mac80211: silence an uninitialized variable warning (Dan Carpenter)  [Orabug: 34396283]


_______________________________________________
El-errata mailing list
El-erra[email protected]
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle7: ELSA-2022-9761: kernel Important Security Update

Summary

Description of changes: [4.1.12-124.66.3.el7uek] - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [Orabug: 33981149] {CVE-2022-1011} - vt: drop old FONT ioctls (Jiri Slaby) [Orabug: 34408794] {CVE-2021-33656} - video: of_display_timing.h: include errno.h (Hsin-Yi Wang) [Orabug: 34408910] {CVE-2021-33655} - fbcon: Disallow setting font bigger than screen size (Helge Deller) [Orabug: 34408910] {CVE-2021-33655} - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie) [Orabug: 34419974] {CVE-2022-21546} - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Gulam Mohamed) [Orabug: 33349684] [Orabug: 34492498] [4.1.12-124.66.2.el7uek] - mm: enforce min addr even if capable() in expand_downwards() (Jann Horn) [Orabug: 29501997] {CVE-2019-9213} - ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss) - ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet) [Orabug: 33917058] {CVE-2020-36516} - ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit (Eric W. Biederman) [Orabug: 33917058] {CVE-2020-36516} - ipv4: igmp: guard against silly MTU values (Eric Dumazet) [Orabug: 33917058] {CVE-2020-36516} - inet: constify ip_dont_fragment() arguments (Eric Dumazet) [Orabug: 33917058] {CVE-2020-36516} - ip: constify ip_build_and_send_pkt() socket argument (Eric Dumazet) [Orabug: 33917058] {CVE-2020-36516} - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Eric Biggers) [Orabug: 34433461] {CVE-2020-36557} - vt: vt_ioctl: fix race in VT_RESIZEX (Eric Dumazet) [Orabug: 34433476] {CVE-2020-36558} - VT_RESIZEX: get rid of field-by-field copyin (Al Viro) [Orabug: 34433476] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460939] [Orabug: 34484730] {CVE-2022-2588} [4.1.12-124.66.1.el7uek] - net: fix uninit-value in __hw_addr_add_ex() (Eric Dumazet) [Orabug: 34395887] - mac80211: silence an uninitialized variable warning (Dan Carpenter) [Orabug: 34396283]

i386

x86_64

kernel-uek-doc-4.1.12-124.66.3.el7uek.noarch.rpm kernel-uek-firmware-4.1.12-124.66.3.el7uek.noarch.rpm kernel-uek-4.1.12-124.66.3.el7uek.x86_64.rpm kernel-uek-devel-4.1.12-124.66.3.el7uek.x86_64.rpm kernel-uek-debug-4.1.12-124.66.3.el7uek.x86_64.rpm kernel-uek-debug-devel-4.1.12-124.66.3.el7uek.x86_64.rpm

SRPMS

https://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.66.3.el7uek.src.rpm

Severity
Related CVEs: CVE-2022-1011 CVE-2021-33656 CVE-2021-33655 CVE-2022-21546 CVE-2019-9213 CVE-2020-36516 CVE-2020-36557 CVE-2020-36558 CVE-2022-2588

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.