Lucene search

K
oraclelinuxOracleLinuxELSA-2023-2459
HistoryMay 15, 2023 - 12:00 a.m.

device-mapper-multipath security and bug fix update

2023-05-1500:00:00
linux.oracle.com
23

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

14.4%

[0.8.7-20]

  • Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  • Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  • Change how the installation dir for kpartx_id is specified
  • Resolves: bz #1926147
    [0.8.7-19]
  • Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  • Resolves: bz #2166467
    [0.8.7-18]
  • Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  • Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  • Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  • Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  • Resolves: bz #2166467
    [0.8.7-17]
  • Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  • Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  • Resolves: bz #2145225
    [0.8.7-16]
  • Add 0076-multipath.conf-5-remove-io-affinity-information.patch
  • Resolves: bz #2143125
    [0.8.7-15]
  • Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    • Fixes bz #2141860
  • Add 0068-libmultipath-cleanup-remove_feature.patch
  • Add 0069-libmultipath-cleanup-add_feature.patch
  • Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  • Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  • Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  • Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  • Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  • Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    • Fixes bz #2033080
  • Resolves: bz #2033080, #2141860
    [0.8.7-14]
  • Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    • Fixes bz #2133999
  • Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    • Fixes bz #2133989
  • Resolves: bz #2133989, #2133999
    [0.8.7-13]
  • Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  • Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  • Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  • Resolves: bz #2125357

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

14.4%