[ol7_UEKR4] kernel-uek-debug-4.1.12-124.66.3.el7uek.x86_64

The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system:  memory allocation, process allocation, device
input and output, etc.

This variant of the kernel has numerous debugging options enabled.
It should only be installed when trying to gather additional information
on kernel bugs, as some of these options impact performance noticably.

Changelog (Show File list) (Show related packages)

• Tue Aug 23 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.3.el7uek]

  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)  [Orabug: 33981149]  {CVE-2022-1011} 
  - vt: drop old FONT ioctls (Jiri Slaby)  [Orabug: 34408794]  {CVE-2021-33656} 
  - video: of_display_timing.h: include errno.h (Hsin-Yi Wang)  [Orabug: 34408910]  {CVE-2021-33655} 
  - fbcon: Disallow setting font bigger than screen size (Helge Deller)  [Orabug: 34408910]  {CVE-2021-33655} 
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419974]  {CVE-2022-21546} 
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Gulam Mohamed)  [Orabug: 33349684] [Orabug: 34492498]

• Wed Aug 10 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.2.el7uek]

  - mm: enforce min addr even if capable() in expand_downwards() (Jann Horn)  [Orabug: 29501997]  {CVE-2019-9213} 
  - ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss)   
  - ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit (Eric W. Biederman)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ipv4: igmp: guard against silly MTU values (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - inet: constify ip_dont_fragment() arguments (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ip: constify ip_build_and_send_pkt() socket argument (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Eric Biggers)  [Orabug: 34433461]  {CVE-2020-36557} 
  - vt: vt_ioctl: fix race in VT_RESIZEX (Eric Dumazet)  [Orabug: 34433476]  {CVE-2020-36558} 
  - VT_RESIZEX: get rid of field-by-field copyin (Al Viro)  [Orabug: 34433476]  
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460939] [Orabug: 34484730]  {CVE-2022-2588}

• Tue Aug 02 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.1.el7uek]

  - net: fix uninit-value in __hw_addr_add_ex() (Eric Dumazet)  [Orabug: 34395887]  
  - mac80211: silence an uninitialized variable warning (Dan Carpenter)  [Orabug: 34396283]

• Tue Jul 19 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.65.1.el7uek]

  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33825689]  {CVE-2022-0492} 
  - ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi)  [Orabug: 34091904]  
  - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel)  [Orabug: 34091904]  
  - ocfs2: dlmfs: don't clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi)  [Orabug: 34091904]  
  - uek: kabi: new kABI symbols by USM and fix kABI files (Saeed Mirzamohammadi)  [Orabug: 34233929]  
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  [Orabug: 34247343]  {CVE-2022-32250} 
  - netfilter: nf_tables: fix memory leak if expr init fails (Liping Zhang)  [Orabug: 34247343]  
  - floppy: disable FDRAWCMD by default (Willy Tarreau)  [Orabug: 34308428]  {CVE-2022-33981}

• Tue Jun 21 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.64.1.el7uek]

  - iscsi-target: Fix the issue with shutdown_session removal (Gulam Mohamed)  [Orabug: 29661566]  
  - scsi: target: fix hang when multiple threads try to destroy the same iscsi session (Gulam Mohamed)  [Orabug: 29661566]  
  - scsi: target: remove boilerplate code (Gulam Mohamed)  [Orabug: 29661566]  
  - iscsi-target: remove usage of ->shutdown_session (Gulam Mohamed)  [Orabug: 29661566]  
  - Drop the left-over iscsi-target hack (Gulam Mohamed)  [Orabug: 29661566]  
  - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  [Orabug: 34048290]  {CVE-2022-28388} 
  - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  [Orabug: 34048329]  {CVE-2022-28390} 
  - floppy: use a statically allocated error counter (Willy Tarreau)  [Orabug: 34218641]  {CVE-2022-1652}

• Fri Jun 10 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.3.1.el7uek]

  - uek-rpm: Update OL6 Secureboot certificate and shim versions (aloktiw)  [Orabug: 34266389]

• Thu Jun 09 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.3.el7uek]

  - xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky)  [Orabug: 34202040]  
  - uek-rpm: Update OL7 Secureboot certificate and shim versions (Jack Vogel)  [Orabug: 34265467]

• Fri May 27 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.2.el7uek]

  - debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34152701]  {CVE-2022-21499} 
  - xfs: prevent dropping ioend completions during buftarg wait (Brian Foster)  [Orabug: 34191201]

• Tue May 17 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.1.el7uek]

  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135346]  {CVE-2022-1353} 
  - memstick: rtsx_usb_ms: fix UAF (Tong Zhang)  [Orabug: 34132126]  {CVE-2022-0487}

• Tue Apr 19 2022 aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.62.3.el7uek]

  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679806]  {CVE-2021-0920} 
  - fs: add fget_many() and fput_many() (Jens Axboe)  [Orabug: 33679806]  
  - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)  [Orabug: 33679806]  {CVE-2021-0920} 
  - net: split out functions related to registering inflight socket files (Jens Axboe)  [Orabug: 33679806]