[El-errata] ELSA-2021-0336 Moderate: Oracle Linux 7 kernel security, bug fix, and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2021-0336

http://linux.oracle.com/errata/ELSA-2021-0336.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
bpftool-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-1160.15.2.el7.noarch.rpm
kernel-debug-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-devel-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-doc-3.10.0-1160.15.2.el7.noarch.rpm
kernel-headers-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-tools-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1160.15.2.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1160.15.2.el7.x86_64.rpm
perf-3.10.0-1160.15.2.el7.x86_64.rpm
python-perf-3.10.0-1160.15.2.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-1160.15.2.el7.src.rpm



Description of changes:

[3.10.0-1160.15.2.el7.OL7]
- Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel 
(olkmod_signing_key.x509)(alexey.petrenko at oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.3.el7

[3.10.0-1160.15.2.el7]
- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) 
[1917504]

[3.10.0-1160.15.1.el7]
- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff 
Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high 
pages query" (Alaa Hleihel) [1896756]
- [kernel] 
timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman 
Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread 
group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under 
tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman 
Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]

[3.10.0-1160.14.1.el7]
- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) 
[1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) 
[1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of 
__in6_dev_put (Xin Long) [1809519]

[3.10.0-1160.13.1.el7]
- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for 
slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise 
counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming 
Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to 
simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io 
stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat 
accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) 
[1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag 
(Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] 
{CVE-2020-15436}

[3.10.0-1160.12.1.el7]
- [mm] mmap: relax file size limit for regular files (Rafael Aquini) 
[1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code 
(Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in 
filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) 
[1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT 
products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]