A device-mapper-multipath security update has been released for Oracle Linux 7.

El-errata: ELSA-2022-7186 Important: Oracle Linux 7 device-mapper-multipath security update

Oracle Linux Security Advisory ELSA-2022-7186

  http://linux.oracle.com/errata/ELSA-2022-7186.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
device-mapper-multipath-0.4.9-136.0.1.el7_9.x86_64.rpm
device-mapper-multipath-devel-0.4.9-136.0.1.el7_9.i686.rpm
device-mapper-multipath-devel-0.4.9-136.0.1.el7_9.x86_64.rpm
device-mapper-multipath-libs-0.4.9-136.0.1.el7_9.i686.rpm
device-mapper-multipath-libs-0.4.9-136.0.1.el7_9.x86_64.rpm
device-mapper-multipath-sysvinit-0.4.9-136.0.1.el7_9.x86_64.rpm
kpartx-0.4.9-136.0.1.el7_9.x86_64.rpm
libdmmp-0.4.9-136.0.1.el7_9.i686.rpm
libdmmp-0.4.9-136.0.1.el7_9.x86_64.rpm
libdmmp-devel-0.4.9-136.0.1.el7_9.i686.rpm
libdmmp-devel-0.4.9-136.0.1.el7_9.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/device-mapper-multipath-0.4.9-136.0.1.el7_9.src.rpm

Related CVEs:

CVE-2022-41974



Description of changes:

[0.4.9-136.0.1]
- mpathpersist: Fix Register and Ignore with 0x00 SARK [Orabug: 32696195]
- mpathpersist: update prkeys file on changing registrations [Orabug: 32696195]
- Keep upstream patch 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
* fix segfault with disable_changed_wwids for orabug 29469903 (jianchao.w.wang@oracle.com)

[0.4.9-136]
- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905

_______________________________________________