Oracle Linux Security Advisory ELSA-2024-12583

http://linux.oracle.com/errata/ELSA-2024-12583.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-4.14.35-2047.539.5.el7uek.x86_64.rpm
kernel-uek-debug-4.14.35-2047.539.5.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.14.35-2047.539.5.el7uek.x86_64.rpm
kernel-uek-devel-4.14.35-2047.539.5.el7uek.x86_64.rpm
kernel-uek-tools-4.14.35-2047.539.5.el7uek.x86_64.rpm
kernel-uek-doc-4.14.35-2047.539.5.el7uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-4.14.35-2047.539.5.el7uek.src.rpm

Related CVEs:

CVE-2024-41090
CVE-2024-41091




Description of changes:

[4.14.35-2047.539.5.el7uek]
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) 
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879158]  {CVE-2024-41090} {CVE-2024-41091}

[4.14.35-2047.539.4.el7uek]
- Fix parsing error in UEK5 kernel-uek-spec (Yifei Liu)  [Orabug: 36847179]

[4.14.35-2047.539.3.el7uek]
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) 
- nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) 
- nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) 
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann) 
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) 
- rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan)  [Orabug: 36760267]
- rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia)  [Orabug: 36529474]

[4.14.35-2047.539.2.el7uek]
- rds/rdma: Clear rds_info_socket before use (Juan Garcia)  [Orabug: 36613108]

[4.14.35-2047.539.1.el7uek]
- xfs: make sure sb_fdblocks is non-negative (Wengang Wang)  [Orabug: 36759719]
- xfs: fix sb write verify for lazysbcount (Wengang Wang)  [Orabug: 36759719]
- rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia)  [Orabug: 36529577]


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle7: ELSA-2024-12583: kernel Important Security Advisory Updates

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[4.14.35-2047.539.5.el7uek] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) - net/mlx5e: drop shorter ethernet frames (Manjunath Patil) [Orabug: 36879158] {CVE-2024-41090} {CVE-2024-41091} [4.14.35-2047.539.4.el7uek] - Fix parsing error in UEK5 kernel-uek-spec (Yifei Liu) [Orabug: 36847179] [4.14.35-2047.539.3.el7uek] - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann) - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) - rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan) [Orabug: 36760267] - rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia) [Orabug: 36529474] [4.14.35-2047.539.2.el7uek] - rds/rdma: Clear rds_info_socket before use (Juan Garcia) [Orabug: 36613108] [4.14.35-2047.539.1.el7uek] - xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [Orabug: 36759719] - xfs: fix sb write verify for lazysbcount (Wengang Wang) [Orabug: 36759719] - rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia) [Orabug: 36529577]

SRPMs

http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-4.14.35-2047.539.5.el7uek.src.rpm

x86_64

kernel-uek-4.14.35-2047.539.5.el7uek.x86_64.rpm kernel-uek-debug-4.14.35-2047.539.5.el7uek.x86_64.rpm kernel-uek-debug-devel-4.14.35-2047.539.5.el7uek.x86_64.rpm kernel-uek-devel-4.14.35-2047.539.5.el7uek.x86_64.rpm kernel-uek-tools-4.14.35-2047.539.5.el7uek.x86_64.rpm kernel-uek-doc-4.14.35-2047.539.5.el7uek.noarch.rpm

aarch64

i386

Severity
Related CVEs: CVE-2024-41090 CVE-2024-41091

Related News