[El-errata] ELSA-2016-1277 Important: Oracle Linux 7 kernel security and bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2016-1277

http://linux.oracle.com/errata/ELSA-2016-1277.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-3.10.0-327.22.2.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-327.22.2.el7.noarch.rpm
kernel-debug-3.10.0-327.22.2.el7.x86_64.rpm
kernel-debug-devel-3.10.0-327.22.2.el7.x86_64.rpm
kernel-devel-3.10.0-327.22.2.el7.x86_64.rpm
kernel-doc-3.10.0-327.22.2.el7.noarch.rpm
kernel-headers-3.10.0-327.22.2.el7.x86_64.rpm
kernel-tools-3.10.0-327.22.2.el7.x86_64.rpm
kernel-tools-libs-3.10.0-327.22.2.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-327.22.2.el7.x86_64.rpm
perf-3.10.0-327.22.2.el7.x86_64.rpm
python-perf-3.10.0-327.22.2.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-327.22.2.el7.src.rpm



Description of changes:

[3.10.0-327.22.2.el7.OL7]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-327.22.2.el7]
- [infiniband] security: Restrict use of the write() interface (Don 
Dutile) [1332553 1316685] {CVE-2016-4565}

[3.10.0-327.22.1.el7]
- [mm] mmu_notifier: fix memory corruption (Jerome Glisse) [1335727 1307042]
- [misc] cxl: Increase timeout for detection of AFU mmio hang (Steve 
Best) [1335419 1329682]
- [misc] cxl: Configure the PSL for two CAPI ports on POWER8NVL (Steve 
Best) [1336389 1278793]
- [powerpc] Define PVR value for POWER8NVL processor (Steve Best) 
[1336389 1278793]
- [x86] Mark Intel Knights Landing-F processor as not supported (Steve 
Best) [1335407 1331516]
- [netdrv] ixgbevf: fix spoofed packets with random MAC (Ken Cox) 
[1335406 1247345]
- [netdrv] ixgbevf: use ether_addr_copy instead of memcpy (Ken Cox) 
[1335406 1247345]
- [scsi] hpsa: update rev to 3.4.10-0-RH3 (Joseph Szczypek) [1334773 
1296287]
- [scsi] hpsa: check for a null phys_disk pointer in ioaccel2 path 
(Joseph Szczypek) [1334773 1296287]
- [cpufreq] intel_pstate: Fix divide by zero on Knights Landing (Steve 
Best) [1334438 1273305]
- [mm] hugetlbfs: optimize when NUMA=n (Rui Wang) [1334436 1274624]
- [mm] hugetlb: use memory policy when available (Rui Wang) [1334436 
1274624]
- [mm] optimize put_mems_allowed() usage (Rui Wang) [1334436 1274624]
- [x86] Mark Intel Knights Landing processor as supported (Steve Best) 
[1332991 1158238]
- [block] virtio-blk: use VIRTIO_BLK_F_WCE and VIRTIO_BLK_F_CONFIG_WCE 
in virtio1 (Fam Zheng) [1327611 1266008]
- [x86] mm: suitable memory should go to ZONE_MOVABLE (Igor Mammedov) 
[1327588 1265880]
- [mm] memory-hotplug: add zone_for_memory() for selecting zone for new 
memory (Igor Mammedov) [1327588 1265880]
- [s390] mm: Fix memory hotplug for unaligned standby memory (Igor 
Mammedov) [1327588 1265880]
- [mm] memory-hotplug: Remove "weak" from memory_block_size_bytes() 
declaration (Igor Mammedov) [1327588 1265880]
- [mm] Add prototype declaration to the header file (Igor Mammedov) 
[1327588 1265880]
- [mm] hotplug: verify hotplug memory range (Igor Mammedov) [1327588 
1265880]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1327587 1284936]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a 
timeout event (Xin Long) [1324748 1270586] {CVE-2015-8767}
- [net] sctp: Whitespace fix (Xin Long) [1324748 1270586] {CVE-2015-8767}
- [fs] xfs: fix splice/direct-IO deadlock (Bill O'Donnell) [1324098 824796]
- [fs] vfs: split generic splice code from i_mutex locking (Bill 
O'Donnell) [1324098 824796]
- [lib] keys: Fix ASN.1 indefinite length object parsing (David Howells) 
[1308814 1308815] {CVE-2016-0758}

[3.10.0-327.21.1.el7]
- [lib] klist: fix starting point removed bug in klist iterators (Ewan 
Milne) [1333403 1309433]
- [acpi] tables: test the correct variable (Prarit Bhargava) [1331681 
1242556]
- [x86] acpi: Handle apic/x2apic entries in MADT in correct order 
(Prarit Bhargava) [1331681 1242556]
- [acpi] tables: Add acpi_subtable_proc to ACPI table parsers (Prarit 
Bhargava) [1331681 1242556]
- [acpi] table: Always count matched and successfully parsed entries 
(Prarit Bhargava) [1331681 1242556]
- [acpi] table: Add new function to get table entries (Prarit Bhargava) 
[1331681 1242556]
- [netdrv] mlx4_en: Fix IRQ affinity on s390x (Kamal Heib) [1327583 1264148]
- [usb] xhci: Workaround to get Intel xHCI reset working more reliably 
(Torez Smith) [1327581 1318570]
- [block] Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric 
Sandeen) [1324530 1285549]
- [powerpc] eeh: Fix PE location code (Gustavo Duarte) [1324528 1302537]
- [powerpc] eeh: Wrong place to call pci_get_slot() (Steve Best) 
[1327834 1273996]
- [net] ipv6: Nonlocal bind (Sabrina Dubroca) [1324502 1315968]
- [net] ipv4: bind ip_nonlocal_bind to current netns (Sabrina Dubroca) 
[1324502 1315968]

[3.10.0-327.20.1.el7]
- [kernel] audit: stop an old auditd being starved out by a new auditd 
(Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: try harder to send to auditd upon netlink failure 
(Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: remove stray newlines from audit_log_lost messages 
(Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: get rid of *NO* daemon at audit_pid=0 message (Richard 
Guy Briggs) [1328802 1253123]
- [kernel] audit: prevent an older auditd shutdown from orphaning a 
newer auditd startup (Richard Guy Briggs) [1328802 1253123]
- [net] netlink: don't hold mutex in rcu callback when releasing mmapd 
ring (Phil Sutter) [1328801 1238749]
- [lib] rhashtable: Wait for RCU readers after final unzip work (Phil 
Sutter) [1328801 1238749]
- [net] netlink: Lockless lookup with RCU grace period in socket release 
(Phil Sutter) [1328801 1238749]
- [net] netlink: use jhash as hashfn for rhashtable (Phil Sutter) 
[1328801 1238749]

[3.10.0-327.19.1.el7]
- [net] tcp, dccp: warn user for preferred ip_local_port_range (Florian 
Westphal) [1323960 1305525]
- [net] tcp, dccp: try to not exhaust ip_local_port_range in connect() 
(Florian Westphal) [1323960 1305525]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian 
Westphal) [1323960 1305525]