Stay Secure with the Latest Linux Advisories

security advisorycriticalsecurity fix

Oracle Linux 7 ELSA-2022-9012 Critical Kernel Security Fix Overview

The following updated rpms for Oracle Linux 7 have been uploaded to the Unb= reakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-9012 https://linux.oracle.com/errata/ELSA-2022-9012.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-5.4.17-2136.302.7.2.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.302.7.2.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.302.7.2.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.302.7.2.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.302.7.2.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.302.7.2.el7uek.x86_64.rpm aarch64: kernel-uek-5.4.17-2136.302.7.2.el7uek.aarch64.rpm kernel-uek-debug-5.4.17-2136.302.7.2.el7uek.aarch64.rpm kernel-uek-debug-devel-5.4.17-2136.302.7.2.el7uek.aarch64.rpm kernel-uek-devel-5.4.17-2136.302.7.2.el7uek.aarch64.rpm kernel-uek-doc-5.4.17-2136.302.7.2.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.302.7.2.el7uek.aarch64.rpm kernel-uek-tools-libs-5.4.17-2136.302.7.2.el7uek.aarch64.rpm perf-5.4.17-2136.302.7.2.el7uek.aarch64.rpm python-perf-5.4.17-2136.302.7.2.el7uek.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.302.7.2.el7uek.src.rpm Related CVEs: CVE-2021-0920 CVE-2021-4155 Description of changes: [5.4.17-2136.302.7.2.el7uek] - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33699625] {CVE-2021-4155} [5.4.17-2136.302.7.1.el7uek] - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33691332] {CVE-2021-0920} [5.4.17-2136.302.7.el7uek] - rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju) [Orabug: 33671425] - rds: ib: Ack seq not always received in monotonic increasing order (H=E5kon Bugge) [Orabug: 33671414] - net/rds: Don't pummel the subnet-manager (Gerd Rausch) [Orabug: 33671407] - EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo) [Orabug: 33601775] - EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo) [Orabug: 33601775] - EDAC, skx_common: Refactor so that we initialize "dev" in result of adxl decode. (Tony Luck) [Orabug: 33601775] - uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly) [Orabug: 33671383] - cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich) [Orabug: 33671378] - net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann) [Orabug: 33671371] - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [Orabug: 33671363] - rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug: 33671236] _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 8 upgrade resolves severe kernel vulnerabilities. Refer to ELSA-2023-1023 for comprehensive information on the security improvements.. Kernel Security Update, Oracle Linux 7, Critical Patch, Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Jan 10, 2022 •Critical Oracle