An Unbreakable Enterprise kernel security update has been released for Oracle Linux 7

Oracle Linux Security Advisory ELSA-2020-5508

  http://linux.oracle.com/errata/ELSA-2020-5508.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.35.1.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.35.1.el7uek.noarch.rpm
kernel-uek-4.1.12-124.35.1.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.35.1.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.35.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.35.1.el7uek.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.35.1.el7uek.src.rpm


Description of changes:

[4.1.12-124.35.1.el7uek]
- ixgbe: protect TX timestamping from API misuse (Manjunath Patil) [Orabug: 30275491]
- block: init flush rq ref count to 1 (Josef Bacik) [Orabug: 30360559]
- block: fix null pointer dereference in blk_mq_rq_timed_out() (Yufen Yu) [Orabug: 30360559]
- blk-mq: Remove generation seqeunce (Keith Busch) [Orabug: 30360559]
- scsi: libsas: delete sas port if expander discover failed (Jason Yan) [Orabug: 30580687] {CVE-2019-15807}
- scsi: qla2xxx: fix a potential NULL pointer dereference (Allen Pais) [Orabug: 30618784] {CVE-2019-16233}
- printk: Default console logging level should be set to 4 (Boris Ostrovsky) [Orabug: 30657070]

[4.1.12-124.34.2.el7uek]
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart) [Orabug: 30569875]
- scsi: lpfc: Make PBDE optimizations configurable (James Smart) [Orabug: 30569875]
- scsi: lpfc: Update driver version to 11.4.0.8 and Copyright updates (Ketan Mukadam) [Orabug: 30569875]
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart) [Orabug: 30569875]
- scsi: lpfc: Correct race with abort on completion path (James Smart) [Orabug: 30569875]
- scsi: lpfc: update manufacturer attribute to reflect Broadcom (James Smart) [Orabug: 30569875] [Orabug: 29212758]
- scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart) [Orabug: 30569875] [Orabug: 29212758]
- scsi: lpfc: Correct topology type reporting on G7 adapters (James Smart) [Orabug: 30569875] [Orabug: 29212758]
- scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart) [Orabug: 30569875]
- scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (James Smart) [Orabug: 30569875]
- scsi: lpfc: Enhance log messages when reporting CQE errors (James Smart) [Orabug: 30569875]
- scsi: lpfc: Fix frequency of Release WQE CQEs (James Smart) [Orabug: 30569875]
- scsi: lpfc: Code cleanup for 128byte wqe data type (James Smart) [Orabug: 30569875]
- scsi: lpfc: use __raw_writeX on DPP copies (James Smart) [Orabug: 30569875]
- scsi: lpfc: Add embedded data pointers for enhanced performance (James Smart) [Orabug: 30569875]
- scsi: lpfc: Enable fw download on if_type=6 devices (James Smart) [Orabug: 30569875]
- scsi: lpfc: Add if_type=6 support for cycling valid bits (James Smart) [Orabug: 30569875]
- scsi: lpfc: Add 64G link speed support (James Smart) [Orabug: 30569875]
- scsi: lpfc: Add PCI Ids for if_type=6 hardware (James Smart) [Orabug: 30569875]
- scsi: lpfc: Add push-to-adapter support to sli4 (James Smart) [Orabug: 30569875]
- scsi: lpfc: Add SLI-4 if_type=6 support to the code base (James Smart) [Orabug: 30569875]
- scsi: lpfc: Rework sli4 doorbell infrastructure (James Smart) [Orabug: 30569875]
- scsi: lpfc: Rework lpfc to allow different sli4 cq and eq handlers (James Smart) [Orabug: 30569875]
- x86/bugs: use check_bugs instead of microcode_late_select_mitigation (Mihai Carabas) [Orabug: 30332499]
- x86/bugs: spec_ctrl_mutex taken in stop_machine context (Mihai Carabas) [Orabug: 30332499]
- x86/microcode: moved cpu feature late eval to stop_machine (Mihai Carabas) [Orabug: 30332499]
- x86/cpu: Re-apply forced caps every time CPU caps are re-read (Andy Lutomirski) [Orabug: 30332499]
- x86/microcode/intel: Check microcode revision before updating sibling threads (Ashok Raj) [Orabug: 30332499]
- tracing: Fix possible double free on failure of allocating trace buffer (Steven Rostedt (VMware)) [Orabug: 30633873] {CVE-2017-18595}