Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9306)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9306 advisory. - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9222)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9222 advisory. - bpf, x86: Validate computation of branch displacements for x86-64 Piotr Krysiuk Orabug: 32759961 CVE-2021-29154 - ext4: handle error of...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9220)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9220 advisory. - Revert 'x86/vmlinux: Use INT3 instead of NOP for linker fill bytes' John Donnelly Orabug: 32576398 CVE-2021-3411 - netfilter: xtables: Use correc...

Unbreakable Enterprise kernel security update

4.14.35-2047.503.1 - bpf, x86: Validate computation of branch displacements for x86-64 Piotr Krysiuk Orabug: 32759961 CVE-2021-29154 - uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. Somasundaram Krishnasamy Orabug: 32781585 - ext4: handle error of ext4setupsystemzone on remount J...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9221)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9221 advisory. - Revert 'x86/vmlinux: Use INT3 instead of NOP for linker fill bytes' John Donnelly Orabug: 32576398 CVE-2021-3411 - netfilter: xtables: Use correc...

Unbreakable Enterprise kernel security update

4.1.12-124.50.2 - btrfs: fix race when cloning extent buffer during rewind of an old root Filipe Manana Orabug: 32669454 CVE-2021-28964 - xen-blkback: don't leak persistent grants from xenblkbkmap Jan Beulich Orabug: 32697855 CVE-2021-28688 - netfilter: xtables: Use correct memory barriers. Mark...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9037)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9037 advisory. - netfilter: add and use nfhookslowlist Florian Westphal Orabug: 32372530 CVE-2021-20177 - target: fix XCOPY NAA identifier lookup David Disseldorp...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9051)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9051 advisory. - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492113 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulic...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9057)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9057 advisory. - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492109 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulic...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9172)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9172 advisory. - Xen/gnttab: handle p2m update errors on a per-slot basis Jan Beulich Orabug: 32651477 CVE-2021-28038 - scsi: iscsi: Verify lengths on passthrough PDU...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9140)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9140 advisory. - bpf, selftests: Fix up some testverifier cases for unprivileged Piotr Krysiuk Orabug: 32656761 CVE-2020-27170 CVE-2020-27171 - bpf: Add sanity...

Unbreakable Enterprise kernel security update

4.14.35-2047.502.4 - Revert 'rds: ib: Remove two ibmodifyqp calls' Sharath Srinivasan Orabug: 32715567 - uek-rpm: Update SecureBoot Digicert 2021 certificates Somasundaram Krishnasamy Orabug: 32532514 4.14.35-2047.502.3 - video: hypervfb: Fix the mmap regression for v5.4.y and older Dexuan Cui...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9164)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9164 advisory. - audit: fix error handling in auditdatatoentry Paul Moore Orabug: 32608451 CVE-2020-0444 - scsi: iscsi: Ensure sysfs attributes are limited to...

Unbreakable Enterprise kernel security update

4.14.35-2047.500.9.3.el7uek - net/rds: Reject error code change Ka-Cheong Poon Orabug: 32577425 - PCI: hotplug: Add module parameter to allow user control of LEDs James Puthukattukaran Orabug: 32577399 - net/rds: increase 1MB MR pool size for RDS Manjunath Patil Orabug: 32577394...

Unbreakable Enterprise kernel security update

4.14.35-2047.501.2 - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32634994 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Ensure sysfs attributes are limited to PAGESIZE Chris Leech Orabug: 32634994 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi:...

Unbreakable Enterprise kernel security update

4.1.12-124.48.6 - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32603382 - scsi: iscsi: Ensure sysfs attributes are limited to PAGESIZE Chris Leech Orabug: 32603382 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Report connection state in sysfs Gabriel Krisman...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9114)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9114 advisory. - scsi: iscsi: Verify lengths on passthrough PDUs Chris Leech Orabug: 32603379 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi: iscsi: Ensure...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9113)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9113 advisory. - scsi: iscsi: Ensure sysfs attributes are limited to PAGESIZE Chris Leech Orabug: 32603382 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 - scsi:...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9052)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9052 advisory. - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492110 CVE-2021-26930 - xen-scsiback: dont 'handle' error by BUG Jan Beulich...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9079)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9079 advisory. - An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where ...