[El-errata] ELBA-2020-5669 Oracle Linux 7 iproute bug fix update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Wed May 6 16:07:04 PDT 2020


Oracle Linux Bug Fix Advisory ELBA-2020-5669

http://linux.oracle.com/errata/ELBA-2020-5669.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
iproute-5.4.0-1.0.1.el7.x86_64.rpm
iproute-devel-5.4.0-1.0.1.el7.x86_64.rpm
iproute-doc-5.4.0-1.0.1.el7.x86_64.rpm
iproute-tc-5.4.0-1.0.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/iproute-5.4.0-1.0.1.el7.src.rpm



Description of changes:

[5.4.0-1.0.1]
- Import rdma: Add "stat show mr" support [Orabug: 30511768]
- Import rdma: Document MR statistics [Orabug: 30511768]

[5.4.0-1]
- Update to v5.4.0 upstream [Orabug: 30518201]

[4.16.0-1.0.5]
- Fix rdma: Ignore unknown netlink attributes [Orabug: 29890190]
- Fix rdma: Fix incorrectly handled NLA validation. (also fixes upstream 
74bd75c)

[4.16.0-1.0.3]
- Backport upstream fix for geneve remote address error [Orabug: 29148668]

[4.16.0-1.0.1]
- [Orabug: 28571160]

[4.16.0-1]
- update to v4.16.0

[4.14.1-5.0.2]
- Build with kernel-uek-headers to provide __NR_bpf in order to pass BPF 
selftests [Orabug: 27728602]

[4.14.1.5.0.1]
- Use the standard, prebuilt package kernel-uek-devel and simulate
the include paths to replace with need of using kernel-uek-header.
The purpose is not to build a manual kernel-uek-header hack. [Orabug: 
27728602]

[4.14.1-5]
- Add further upstream suggested backports.

[4.14.1-4]
- Add missing patch files.

[4.14.1-3]
- Add upstream suggested backports.
- Make use of %autosetup macro.

[4.14.1-2]
- Drop unused build dependencies

[4.14.1-1]
- New version 4.14.1

[4.13.0-1]
- New version 4.13.0

[4.12.0-1]
- New version 4.12.0

[4.11.0-1]
- Add virtual capability to tc subpackage so it's easier found
- New version 4.11.0

[4.10.0-3]
- don't build docs for module builds to limit dependencies

[4.10.0-2]
- Add two fixes to 4.10.0 release from upstream.

[4.10.0-1]
- Ship new header iproute2/bpf_elf.h
- Document content of remaining docs fixup patch in spec file
- Drop patches already applied upstream
- New version 4.10.0

[4.9.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.9.0-3]
- Release bump for iptables-1.6.1 (libxtables.so.12)

[4.9.0-2]
- Fix for failing 'make install'

[4.9.0-1]
- New version 4.9.0

[4.8.0-2]
- Fix segfault in xt action

[4.8.0-1]
- New version 4.8.0

[4.7.0-1]
- New version 4.7.0

[4.6.0-1]
- New version 4.6.0

[4.5.0-4]
- Rebuild for new iptables-1.6.0 with libxtables so bump

[4.5.0-3]
- Fix upgrade path by adding correct Requires/Obsoletes statements to 
spec file
- Move README.iproute2+tc into tc subpackage

[4.5.0-2]
- Split tc into it's own subpackage

[4.5.0-1]
- New version 4.5.0

[4.4.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[4.4.0-1]
- New version 4.4.0

[4.2.0-4]
- Simplify RPM install stage by using package's install target

[4.2.0-3]
- Add missing build dependency to libmnl-devel
- Ship tipc utility

[4.2.0-2]
- Add missing build dependency to libselinux-devel

[4.2.0-1]
- new version 4.2.0

[4.1.1-1]
- new version 4.1.1

[4.0.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[4.0.0-3]
- remove patch rejected by upstream

[4.0.0-2]
- Remove patch rejected by upstream

[4.0.0-1]
- new version 4.0.0

[3.19.0-1]
- new version 3.19.0

[3.16.0-3]
- Backport fix for ip link add name regression that broke libvirt

[3.16.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[3.16.0-1]
- 3.16 bump

[3.15.0-2]
- fix license handling

[3.15.0-1]
- 3.15.0 bump

[3.14.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.14.0-2]
- Fix incorrect references in ss(8), #1092653

[3.14.0-1]
- 3.14 bump
- Drop out iplink_have_newlink() fix in favor of upstream's approach

[3.12.0-2]
- Drop libnl from dependencies (#1034454)

[3.12.0-1]
- 3.12.0 bump

[3.11.0-2]
- Fix the rtt time parsing again

[3.11.0-1]
- 3.11 bump

[3.10.0-8]
- Close file with bridge monitor file (bug #1011822)

[3.10.0-7]
- Add tc -OK option
- Document "bridge mdb" and "bridge monitor mdb"

[3.10.0-6]
- Fix lnstat -i properly this time

[3.10.0-5]
- Fix an 'ip link' hang (#996537)

[3.10.0-4]
- lnstat -i: Run indefinitely if the --count isn't specified (#977845)
- Switch to unversioned %docdir

[3.10.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[3.10.0-2]
- Fix the XFRM patch

[3.10.0-1]
- 3.10.0 bump
- Drop the SHAREDIR patch and revert to upstream ways (#966445)
- Fix an XFRM regression with FORTIFY_SOURCE

[3.9.0-1]
- 3.9.0 bump

[3.8.0-4]
- ATM is available in Fedora only

[3.8.0-3]
- Mention the "up" argument in documentation and help outputs (#907468)

[3.8.0-2]
- Bump for 1.4.18 rebuild

[3.8.0-1]
- 3.8.0 bump

[3.7.0-2]
- Don't propogate mounts out of ip (#882047)

[3.7.0-1]
- 3.7.0 bump

[3.6.0-3]
- Include section 7 manpages (#876857)
- Fix ancient bogus dates in the changelog (correction based upon commits)
- Explicitly require some TeX fonts no longer present in the base 
distribution

[3.6.0-2]
- List all interfaces by default

[3.6.0-1]
- 3.6.0 bump

[3.5.1-2]
- Remove the explicit iptables dependency (#852840)

[3.5.1-1]
- 3.5.1 bugfix release bump
- Rename 'br' to 'bridge'

[3.5.0-2]
- Install the new bridge utility

[3.5.0-1]
- 3.5.0 bump
- Move to db5.

[3.4.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.4.0-1]
- 3.4.0 bump
- Drop the print route patch (included upstream)

[3.3.0-2]
- Let's install rtmon too... (#814819)

[3.3.0-1]
- 3.3.0 bump
- Update source URL

[3.2.0-3]
- Address dangerous /tmp files security issue (CVE-2012-1088, #797881, 
#797878)

[3.2.0-2]
- Simplify the spec a bit thanks to the UsrMove feature

[3.2.0-1]
- 3.2.0 bump
- Removing a useless, now conflicting patch (initcwnd already decumented)

[3.1.0-1]
- 3.1.0 bump
- Point URL and Source to the new location on kernel.org
- Remove now obsolete defattr
- Dropping various patches now included upstream
- Dropping iproute2-2.6.25-segfault.patch; I fail to understand the 
reason for
this hack

[2.6.39-6]
- ss -ul should display UDP CLOSED sockets (#691100)

[2.6.39-5]
- Fix ss, lnstat and arpd usage and manpages

[2.6.39-4]
- lnstat should dump (-d) to stdout instead of stderr (#736332)

[2.6.39-3]
- Rebuild for xtables7

[2.6.39-2]
- Rebuild for xtables6

[2.6.39-1]
- 2.6.39 bump

[2.6.38.1-4]
- Link [cr]tstat to lnstat

[2.6.38.1-3]
- Install ctstat, rtstat and routef manpage symlinks
- Install m_xt & m_ipt tc modules
- Creating devel and virtual static subpackages with libnetlink

[2.6.38.1-2]
- General cleanup
- Use global instead of define
- Buildroot removal
- Correcting URL and Source links
- Install genl, ifstat, routef, routel and rtpr (rhbz#697319)

[2.6.38.1-1]
- 2.6.38.1 bump

[2.6.38-1]
- 2.6.38 bump

[2.6.37-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[2.6.37-2]
- man-pages.patch update, ip(8) TYPE whitespace

[2.6.37-1]
- 2.6.37 upstream release
- ss(8) improvements patch removed (included upstream)

[2.6.35-10]
- fix a typo in ss(8) improvements patch, rhbz#661267

[2.6.35-9]
- ss(8) improvements patch by jpopelka; should be included in 2.6.36

[2.6.35-8]
- rhbz#641599, use the versioned path, man-pages.patch update, prep update

[2.6.35-7]
- Do not segfault if peer name is omitted when creating a peer veth 
link, rhbz#642322

[2.6.35-6]
- Man-pages update, rhbz#641599

* Wed Sep 29 2010 jkeating - 2.6.35-5
- Rebuilt for gcc bug 634757

[2.6.35-4]
- Modified man-pages.patch to fix cbq manpage, rhbz#635877

[2.6.35-3]
- Don't print routes with negative metric fix, rhbz#628739

[2.6.35-2]
- 'ip route get' fix, iproute2-2.6.35-print-route.patch
- rhbz#622782

[2.6.35-1]
- 2.6.35 version bump
- iproute2-tc-priority.patch removed (included in upstream now)

[2.6.34-5]
- Licensing guidelines compliance fix

[2.6.34-4]
- Requires: iptables >= 1.4.5, BuildRequires: iptables-devel >= 1.4.5

[2.6.34-3]
- Build now runs ./configure to regenerate Makefile for ipt/xt detection

[2.6.34-2]
- iproute-tc-priority.patch, rhbz#586112

[2.6.34-1]
- 2.6.34 version bump

[2.6.33-2]
- 578729 6rd tunnel correctly 3979ef91de9ed17d21672aaaefd6c228485135a2
- change BR texlive to tex according to guidelines

[2.6.33-1]
- update

[2.6.32-2]
- add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
- kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
are needed for macvlan features and probably for other added later.
- fix number of release which contains 2.6.32 kernel headers and features
but it was released as 2.6.31

[2.6.31-1]
- update to 2.6.31

[2.6.29-5.1.20091106gita7a9ddbb]
- 539232 patch cbq initscript

[2.6.29-5.0.20091106gita7a9ddbb]
- snapshot with kernel headers for 2.6.32

[2.6.29-5.0.20091009gitdaf49fd6]
- new official version isn't available but it's needed -> switch to git 
snapshots

[2.6.29-5]
- create missing man pages

[2.6.29-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[2.6.29-3]
- new iptables (xtables) bring problems to tc, when ipt is used.
rhbz#497344 still broken. tc_modules.patch brings correct paths to
xtables, but that doesn't fix whole issue.
- 497355 ip should allow creation of an IPsec SA with 'proto any'
and specified sport and dport as selectors

[2.6.29-2]
- c3651bf4763d7247e3edd4e20526a85de459041b ip6tunnel: Fix no default
display of ip4ip6 tunnels
- e48f73d6a5e90d2f883e15ccedf4f53d26bb6e74 missing arpd directory

[2.6.29-1]
- update to 2.6.29
- remove DDR patch which became part of sourc
- add patch with correct headers 1957a322c9932e1a1d2ca1fd37ce4b335ceb7113

[2.6.28-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[2.6.28-2]
- 483484 install distribution files into /usr/share and also fixed
install paths in spec
- add the latest change from git which add DRR support
c86f34942a0ce9f8203c0c38f9fe9604f96be706

[2.6.28-1]
- previous two patches were included into 2.6.28 release.
- update

[2.6.27-2]
- 475130 - Negative preferred lifetimes of IPv6 prefixes/addresses
displayed incorrectly
- 472878 - “ip maddr show” in IB interface causes a stack corruption
- both patches will be probably in iproute v2.6.28

[2.6.27-1]
- aead support was included into upstream version
- patch for moving libs is now deprecated
- update to 2.6.27

[2.6.26-1]
- update to 2.6.26
- clean patches

[2.6.25-5]
- fix iproute2-2.6.25-segfault.patch

[2.6.25-4]
- rebuild for new db4-4.7

[2.6.25-3]
- 449933 instead of failing strncpy use copying byte after byte

[2.6.25-2]
- allow replay setting, solve also 444724

[2.6.25-1]
- update
- remove patch for backward compatibility
- add patch for AEAD compatibility

[2.6.23-4]
- add creating ps file again. Fix was done in texlive

[2.6.23-3]
- rebuild without tetex files. It isn't working in rawhide yet. Added
new source for ps files.
- #431179 backward compatibility for previous iproute versions

[2.6.23-2]
- rebuild with fix tetex and linuxdoc-tools -> manual pdf
- clean unnecessary patches
- add into spec *.so objects, new BR linux-atm-libs-devel

[2.6.23-1]
- new version from upstrem 2.3.23

[2.6.22-5]
- move files from /usr/lib/tc to /usr/share/tc
- remove listing files twice

[2.6.22-3]
- package review #225903

[2.6.22-2]
- rebuild for new db4

[2.6.22-1]
- upgrade to 2.6.22

[2.6.20-2]
- fix broken tc-pfifo man page (#232891)

[2.6.20-1]
- upgrade to 2.6.20

[2.6.19-1]
- upgrade to 2.6.19

[2.6.18-5]
- fix snapshot version

[2.6.18-4]
- spec file cleanup
- one more rebuilt against db4

[2.6.18-3]
- fix defective manpage for tc-pfifo (#215399)

[2.6.18-2]
- rebuilt against new db4

[2.6.18-1]
- upgrade to upstream 2.6.18
- initcwnd patch merged
- bug fix for xfrm monitor
- alignment fixes for cris
- documentation corrections

[2.6.16-7]
- fix ip.8 man page, add initcwnd option

[2.6.16-6]
- rebuilt for unwind info generation, broken in gcc-4.1.1-21

[2.6.16-5]
- fix crash when resolving ip address

[2.6.16-4]
- add LOWER_UP and DORMANT flags (#202199)
- use dist tag

[2.6.16-3.1]
- rebuild

[2.6.16-3]
- improve handling of initcwnd value (#179719)

[2.6.16-2]
- fix BuildRequires: flex (#193403)

[2.6.16-1]
- upgrade to 2.6.16-060323
- don't hardcode /usr/lib in tc (#186607)

[2.6.15-2]
- own /usr/lib/tc (#181953)
- obsoletes shapecfg (#182284)

[2.6.15-1.2]
- bump again for double-long bug on ppc(64)

[2.6.15-1.1]
- rebuilt for new gcc4.1 snapshot and glibc changes

[2.6.15-1]
- upgrade to 2.6.15-060110

[2.6.14-11]
- rebuilt

[2.6.14-10]
- remove backup of config files (#175302)

[2.6.14-9]
- use tc manpages and cbq.init from source tarball (#172851)

[2.6.14-8]
- new upstream source

[2.6.14-7]
- add warning to ip tunnel add command (#128107)

[2.6.14-6]
- update from upstream (appears to fix #170111)

[2.6.14-5]
- update from upstream
- fixed host_len size for memcpy (#168903) <Matt_Domsch at dell.com>

[2.6.14-4]
- add RPM_OPT_FLAGS

[2.6.14-3]
- forget to apply the patch :(

[2.6.14-2]
- make ip help work again (#168449)

[2.6.14-1]
- upgrade to ss050901 for 2.6.14 kernel headers

[2.6.13-3]
- added /sbin/cbq script and sample configuration files (#166301)

[2.6.13-2]
- upgrade to iproute2-050816

[2.6.13-1]
- update to snapshot for 2.6.13+ kernel

[2.6.11-2]
- removed useless initvar patch (#150798)
- new upstream source

[2.6.11-1]
- update to iproute-2.6.11

[2.6.10-2]
- gcc4 rebuilt

[2.6.10-1]
- update to iproute-2.6.10

[2.6.9-6]
- added arpd into sbin

[2.6.9-5]
- debug info removed from makefile and from spec (#140891)

[2.6.9-4]
- source file updated from snapshot version
- endian patch adding <endian.h>

[2.6.9-3]
- added installation of netem module for tc

[2.6.9-2]
- fixed possible buffer owerflow, path by Steve Grubb 
<linux_4ever at yahoo.com>

[2.6.9-1]
- updated to iproute-2.6.9, spec file change, patches cleared

* Tue Jun 15 2004 Elliot Lee <sopwith at redhat.com>
- rebuilt

[2.4.7-16]
- Took tons of manpages from debian, much more complete (#123952).

[2.4.7-15]
- rebuilt

[2.4.7-13.2]
- Built security errata version for FC1.

[2.4.7-14]
- Fixed -f option for ss (#118355).
- Small description fix (#110997).
- Added initialization of some vars (#74961).
- Added patch to initialize "default" rule as well (#60693).

* Fri Feb 13 2004 Elliot Lee <sopwith at redhat.com>
- rebuilt

[2.4.7-12]
- Security errata for netlink (CAN-2003-0856).

* Thu Oct 23 2003 Phil Knirsch <pknirsch at redhat.com>
- Updated to latest version. Used by other distros, so seems stable. ;-)
- Quite a few patches needed updating in that turn.
- Added ss (#107363) and several other new nifty tools.

* Tue Jun 17 2003 Phil Knirsch <pknirsch at redhat.com>
- rebuilt

* Wed Jun 04 2003 Elliot Lee <sopwith at redhat.com>
- rebuilt

* Wed Jan 22 2003 Tim Powers <timp at redhat.com>
- rebuilt

[2.4.7-7]
- Added htb3-tc patch from http://luxik.cdi.cz/~devik/qos/htb/ (#75486).

[2.4.7-6]
- remove flags patch at author's request

* Fri Jun 21 2002 Tim Powers <timp at redhat.com>
- automated rebuild

[2.4.7-4]
- Don't forcibly strip binaries

[2.4.7-3]
- Fixed missing diffserv and atm support in config (#57278).
- Fixed inconsistent numeric base problem for command line (#65473).

[2.4.7-2]
- Added patch to fix crosscompiling by Adrian Linkins.

[2.4.7-1]
- Update to latest stable release 2.4.7-now-ss010824.
- Added simple man page for ip.

* Wed Aug 08 2001 Bill Nottingham <notting at redhat.com>
- allow setting of allmulti & promisc flags (#48669)

* Mon Jul 02 2001 Than Ngo <than at redhat.com>
- fix build problem in beehive if kernel-sources is not installed

* Fri May 25 2001 Helge Deller <hdeller at redhat.de>
- updated to iproute2-2.2.4-now-ss001007.tar.gz
- bzip2 source tar file
- "License" replaces "Copyright"
- added "BuildPrereq: tetex-latex tetex-dvips psutils"
- rebuilt for 7.2

* Tue May 01 2001 Bill Nottingham <notting at redhat.com>
- use the system headers - the included ones are broken
- ETH_P_ECHO went away

* Sat Jan 06 2001 Jeff Johnson <jbj at redhat.com>
- test for specific KERNEL_INCLUDE directories.

* Thu Oct 12 2000 Than Ngo <than at redhat.com>
- rebuild for 7.1

* Thu Oct 12 2000 Than Ngo <than at redhat.com>
- add default configuration files for iproute (Bug #10549, #18887)

* Tue Jul 25 2000 Jakub Jelinek <jakub at redhat.com>
- fix include-glibc/ to cope with glibc 2.2 new resolver headers

* Thu Jul 13 2000 Prospector <bugzilla at redhat.com>
- automatic rebuild

* Sun Jun 18 2000 Than Ngo <than at redhat.de>
- rebuilt in the new build environment
- use RPM macros
- handle RPM_OPT_FLAGS

* Sat Jun 03 2000 Than Ngo <than at redhat.de>
- fix iproute to build with new glibc

* Fri May 26 2000 Ngo Than <than at redhat.de>
- update to 2.2.4-now-ss000305
- add configuration files

* Mon Sep 13 1999 Bill Nottingham <notting at redhat.com>
- strip binaries

* Mon Aug 16 1999 Cristian Gafton <gafton at redhat.com>
- first build





More information about the El-errata mailing list