A kernel security and bug fix update has been released for Oracle Linux 7.

El-errata: ELSA-2020-5437 Important: Oracle Linux 7 kernel security and bug fix update

Oracle Linux Security Advisory ELSA-2020-5437

  http://linux.oracle.com/errata/ELSA-2020-5437.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
bpftool-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-1160.11.1.el7.noarch.rpm
kernel-debug-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-devel-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-doc-3.10.0-1160.11.1.el7.noarch.rpm
kernel-headers-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-tools-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1160.11.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1160.11.1.el7.x86_64.rpm
perf-3.10.0-1160.11.1.el7.x86_64.rpm
python-perf-3.10.0-1160.11.1.el7.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-1160.11.1.el7.src.rpm


Description of changes:

[3.10.0-1160.11.1.el7.OL7]
- Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel
(olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 slots_ret under spin_lock_irq()
protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on
VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel)
[1880184]

[3.10.0-1160.10.1.el7]
- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct
(David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling
Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly
Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly
Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read
(Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu)
[1886792]

[3.10.0-1160.9.1.el7]
- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops
(Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp
(Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds
(Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed
(Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov)
[1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin
Coddington) [1880893] {CVE-2020-25212}

[3.10.0-1160.8.1.el7]
- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in
sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo
Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large
jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment"
(Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON
(Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari)
[1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally
(Mohammed Gamal) [1846667]

[3.10.0-1160.7.1.el7]
- [fs] xfs: fix off-by-one in inode alloc block reservation calculation
(Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian
Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute
(Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo
Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in
interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo
Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event
(Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new
sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte)
[1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614]
{CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric
Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg)
[1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len
(Herbert Xu) [1846355] {CVE-2020-10769}