# changelog

author: Khalid Aziz <khalid.aziz@oracle.com> - 1.3.0-1
changelog:
  - New upstream release. Various enhancements to reduce system
    resource usage by the daemon. Fix to correct the sense of
    aggressiveness level and documentation update [Orabug: 32497157]


author: Khalid Aziz <khalid.aziz@oracle.com> - 1.4.0-1
changelog:
  - Various algorithm updates to reduce the possibility of OOM
    killer being invoked because of memoptimizer's actions
  - Local patch with code cleanup [Orabug: 32563799]


author: Khalid Aziz <khalid.aziz@oracle.com> - 1.4.2-1
changelog:
  - New upstream release
  - Fix crash on systems with less than 4G memory [Orabug: 32884653]
  - Remove patch "Make-code-more-robust.patch" since it has been 
    merged into upstream


author: Khalid Aziz <khalid.aziz@oracle.com> - 1.5.0-1
changelog:
  - Update to new upstream release [Orabug: 33322490]
  - Add support for one time initializations at start up
  - Add support for tunables value updates upon change
    in number of hugepages on the system
  - Add tuning of negative dentries cap on kernels that support it


author: Khalid Aziz <khalid.aziz@oracle.com> - 2.0.0-1
changelog:
  - Update to new upstream release [Orabug: 33820334]
  - Changing name to adaptivemmd from memoptimizer
  - Add Obsoletes keyword to spec file to ensure updates happen
    correctly
  - Change a config option name to stop systemd from complaining
    about the characters used in name
  - Ensure only one instance of daemon is running by using lock file


author: Khalid Aziz <khalid.aziz@oracle.com> - 2.0.0-2
changelog:
  - Minor update to comments in increase-verbosity.patch to update
    memoptimizer references to adaptivemm


author: Khalid Aziz <khalid.aziz@oracle.com> - 2.0.1-1
changelog:
  - Fix total memory calculation for ARM since it is slightly
    different from x86
  - Remove restriction to not build package on aarch64


author: Dave Anderson <anderson@redhat.com> - 7.0.9-5
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1182383


author: Dave Anderson <anderson@redhat.com> - 7.1.1-1
changelog:
  - Rebase to upstream version 7.1.1
    Resolves: rhbz#1207696
  - Display s390x vector registers from a kernel dump.
    Resolves: rhbz#1182161
  - Fix date displayed on initial system banner and by the "sys" command on ARM64.
    Resolves: rhbz#1223044
  - Fix ARM64 page size calculation on 4.1 and later kernels.
    Resolves: rhbz#1222645


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Brian Maly <brian.maly@oracle.com> - 7.1.4-1.0.1
changelog:
  - resurrect support for Xen dom0 dumpfiles (bug 22337515).
  - rebase to version 7.1.4 (Orabug 22653925)


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.4.3-4
changelog:
  - Updated NEWS file: test stress/buffering/tst.resize1.d is XFAIL for now.
  - Align with kernel header file change: FOLL_NOFAULT -> FOLL_IMMED.
    [Orabug: 18653713]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.4.5-1
changelog:
  - Support USDT for 32-bit applications on 64-bit hosts.
    [Orabug: 21219315]
  - Convert from sdt_instr_t to asm_instr_t.
    [Orabug: 21219374]
  - Restructuring to support DTrace on multiple architectures.
    [Orabug: 21273259]
  - Fix dtrace_helptrace_buffer memory leak.
    [Orabug: 20514336]
  - Add .gitignore file.
    [Orabug: 20266608]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.0-1
changelog:
  - Use kernel-provided SDT trampoline memory area for SPARC64.
    [Orabug: 21220344]
  - Add support for sparc64.
    [Orabug: 19005048]
  - Update uid / gid handling in view of namespaces in UEK4 kernels.
    [Orabug: 20456825]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.1-1
changelog:
  - Remove explicit dependency on kernel RPM.
    [Orabug: 21669543]
  - Ensure safety checks are enforced on copyout() and copyoutstr().
    [Orabug: 21930954]
  - Fix device file minor number for dt_perf.
    [Orabug: 21814949]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.2-1
changelog:
  - Correct probe disable/enable mechanism for syscalls.
    [Orabug: 22352636]
  - Fix access to uregs[I_R7] for sparc64.
    (Nick Alcock) [Orabug: 22602870]
  - Use a more efficient, consistent, and reliable mechanism to read user
    stack locations.
    (Nick Alcock) [Orabug: 22629102]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.3-1
changelog:
  - Provider 'perf' added to SDT for perf events.
    (Nick Alcock) [Orabug: 23004534]
  - Fix to ensure that pdata and sdt_tab handling works across module reloads.
    [Orabug: 23331667]
  - Moving pdata size assertion checking to arch-specific code.
    (Nick Alcock) [Orabug: 23331667]


author: - <nick.alcock@oracle.com> - 0.6.0-1
changelog:
  - USDT for SPARC. [Orabug: 24455245]
  - Is-enabled probes for SDT [Orabug: 25143173]
  - Function boundary tracing (FBT) [Orabug: 21220305]
  - Add improved multi-argument DTRACE_PROBE macro [Orabug: 24678897]
  - Detemine SDT (including perf-event) argument types dynamically
    [Orabug: 24661801]


author: - <kris.van.hees@oracle.com> - 0.6.0-2
changelog:
  - Further implementation of FBT with fixes to ustack
    [Orabug: 21220305]
  - Handle modular IPv6 and introduce typedef in6_addr_t
    (Nick Alcock) [Orabug: 25557554]


author: - <kris.van.hees@oracle.com> - 0.6.0-3
changelog:
  - Lockfree walltimestamp implementation (Tomas Jedlicka) [Orabug: 25715256]
  - Corrected aframes values to skip DTrace frames [Orabug: 25727046]
  - Bug fix for stackdepth buffer overrun [Orabug: 25559321]


author: - <kris.van.hees@oracle.com> - 0.6.1-1
changelog:
  - Implement link_ntop() DTrace subroutine logic (Nick Alcock) [Orabug: 25931479]
  - Add canload() for input of *_ntop(), *_nto*() (Tomas Jedlicka)
  - Fix implementation of mutex_* subroutines [Orabug: 26044447]
  - Improve probe execution debugging
  - Support passing offset as arg0 to FBT return probes [Orabug: 25949086]
  - Use different probe trigger instruction for entry vs return [Orabug: 25949048]
  - Ensure FBT return probes only run with in_irq() true when in true IRQ context
    [Orabug: 26089286]
  - Ensure ustackdepth returns correct value [Orabug: 25949692]


author: - <kris.van.hees@oracle.com> - 0.6.1-2
changelog:
  - Change FBT entry probes on x86 to use int3 [Orabug: 26324039]
  - Support x86 CPUs with SMAP (Nick Alcock) [Orabug: 26166784]


author: - <tomas.jedlicka@oracle.com> - 0.6.1-3
changelog:
  - FBT module support and SPARCs return probes [Orabug: 26384179, 26384765]
  - DTrace state cleanmust use dtrace_sync() [Orabug: 26385102]
  - Make dynamic variable cleanup self-throtling [Orabug: 26385177]
  - Restore deadman original timing values [Orabug: 26385159]


author: - <nick.alcock@oracle.com> - 0.5.3-1
changelog:
  - Prevent intermittent assertion failures crashes and hangs when
    shutdown races with termination of a grabbed process [Orabug: 22824594]
    [Orabug: 23028026]


author: - <nick.alcock@oracle.com> - 0.6.0-1
changelog:
  - Released to QA team only
  - Allow self-grabs [Orabug: 24829169]
  - Use /proc/pid/map_files if available [Orabug: 24843582]
  - Fix fd leaks on big-endian systems and during heavy exec() [Orabug: 25040553]
  - Add improved multi-argument DTRACE_PROBE macro [Orabug: 24678905]
  - Fix infloops in SPARC breakpoint handling [Orabug: 24454127]


author: - <nick.alcock@oracle.com> - 0.6.0-2
changelog:
  - Released to QA team only
  - Add translator for ip provider [Orabug: 25557249]
  - Test fixes and new tests.


author: - <nick.alcock@oracle.com> - 0.6.1-1
changelog:
  - Add translators and tests for TCP and UDP (Alan Maguire)
    [Orabug: 25815242]
  - Add translators for the IO provider (Nicolas Droux) [Orabug: 25816562]
  - Add link_ntop() and tests for it (Girish Moodalbail)
    [Orabug: 25931511]
  - sched.d no longer depends on the sched provider [Orabug: 26036143]
  - Ship a default /etc/dtrace-modules (Nicolas Droux) [Orabug: 25918164]
  - Repeated dtrace -G no longer corrupts the object file (Kris Van Hees)
    [Orabug: 22509887]


author: - <tomas.jedlicka@oracle.com> - 0.6.1-2
changelog:
  - Released to QA team only
  - Fix name of lowest bucket in dtrace_print_lquantize() (Eugene Loh)
    [Orabug: 26261502]
  - Fix wrong depth in dtrace_print_ustack() leading to garbage output
    from jstack() (Eugene Loh) [Orabug: 26045010]
  - Do not build DTrace with debug info by default [Orabug: 26389302]
  - Fix spurious errors and misreading of unaligned data on SPARC,
    breaking ustack() etc with upgraded glibc (Nick Alcock)
    [Orabug: 26378141]
    - Translator changes for the IO provider for NFS (Nicolas Droux)
    [Orabug: 26176938]
  - Search for cpp and ld along the PATH, fixing use of dtrace -C with
    devtoolset-6 and other non-default GCCs (Nick Alcock) [Orabug: 26396530]
  - Test fixes, test harness extensions (consumer tests) and new tests.
  - dtrace-utils-devel now depends on elfutils-libelf-devel.
    (Nick Alcock)
  - dtrace-utils-testsuite now depends on dtrace-devel.
    (Nick Alcock) [Orabug: 26415697]


author: - <nick.alcock@oracle.com> - 0.6.1-3
changelog:
  - Released to QA team only
  - Relicense all of userspace, including the testsuite, to UPL.
  - Merge NEWS from the modules into NEWS for userspace: there is
    only one NEWS now.
  - Test fixes [Orabug: 26522961] (Tomas Jedlicka, Nick Alcock)
  - make check-quick support, skipping long-running tests


author: - <nick.alcock@oracle.com> - 0.6.0-1
changelog:
  - Internal development release
  - Allow self-grabs [Orabug: 24829169]
  - Use /proc/pid/map_files if available [Orabug: 24843582]
  - Fix fd leaks on big-endian systems and during heavy exec() [Orabug: 25040553]
  - Add improved multi-argument DTRACE_PROBE macro [Orabug: 24678905]
  - Fix infloops in SPARC breakpoint handling [Orabug: 24454127]


author: - <nick.alcock@oracle.com> - 0.6.0-2
changelog:
  - Internal development release
  - Add translator for ip provider [Orabug: 25557249]
  - Test fixes and new tests.


author: - <tomas.jedlicka@oracle.com> - 0.6.1-2
changelog:
  - Internal development release
  - Fix name of lowest bucket in dtrace_print_lquantize() (Eugene Loh)
    [Orabug: 26261502]
  - Fix wrong depth in dtrace_print_ustack() leading to garbage output
    from jstack() (Eugene Loh) [Orabug: 26045010]
  - Do not build DTrace with debug info by default [Orabug: 26389302]
  - Fix spurious errors and misreading of unaligned data on SPARC,
    breaking ustack() etc with upgraded glibc (Nick Alcock)
    [Orabug: 26378141]
    - Translator changes for the IO provider for NFS (Nicolas Droux)
    [Orabug: 26176938]
  - Search for cpp and ld along the PATH, fixing use of dtrace -C with
    devtoolset-6 and other non-default GCCs (Nick Alcock) [Orabug: 26396530]
  - Test fixes, test harness extensions (consumer tests) and new tests.
  - dtrace-utils-devel now depends on elfutils-libelf-devel.
    (Nick Alcock)
  - dtrace-utils-testsuite now depends on dtrace-devel.
    (Nick Alcock) [Orabug: 26415697]


author: - <nick.alcock@oracle.com> - 0.6.1-3
changelog:
  - Relicense all of userspace, including the testsuite, to UPL.
  - Merge NEWS from the modules into NEWS for userspace: there is
    only one NEWS now.
  - Test fixes [Orabug: 26522961] (Tomas Jedlicka, Nick Alcock)
  - make check-quick support, skipping long-running tests


author: - <nick.alcock@oracle.com> - 0.6.2-1
changelog:
  - Internal development release
  - Fix segfault at shutdown time if grabbed processes die at
    precisely the wrong time [Orabug: 26528776]
  - New llquantize() aggregation, providing log/linear results
    [Orabug: 26675201] (Eugene Loh)
  - New optional third arg for tracemem(): dynamically-variable size
    limit [Orabug: 26675604] (Eugene Loh)
  - Fix wrong wrong-number-of-args error messages. (Eugene Loh)
    [Orabug: 26402731]
  - Fix module address range merging (Eugene Loh) [Orabug: 25767469]
  - Allow referencing of structure and union members named with
    the same name as D keywords, e.g. 'self' [Orabug: 26518086]
  - Changes for the move of UAPI headers into dtrace-utils-devel.
    (Tomas Jedlicka, Nick Alcock).
  - Support CTF in /lib/modules/$(uname -r)/kernel/vmlinux.ctfa
    archive [Orabug: 25815372]
  - Testsuite fixes and new tests for inet_*() and lquantize
    (Eugene Loh, Alan Maguire, Nick Alcock)


author: - <nick.alcock@oracle.com> - 0.6.2-2
changelog:
  - Internal development release
  - Add lockstat provider [Orabug: 26149894] (Alan Maguire)
  - Add missing obsolete of dtrace-modules-provider-headers [Orabug: 26883486]
  (Tomas Jedlicka)
  - Add missing testsuite NFS dependency [Orabug: 26860985] (Tomas Jedlicka)


author: - <nick.alcock@oracle.com> - 1.0.0-1
changelog:
  - Release for smoketesters, not GA
  - Fix mod() normalization: add test for it [Orabug: 26826564]
    (Tomas Jedlicka, Eugene Loh)
  - Fix faulty logic in dtrace_modsym_update() adding symbols to wrong modules
    [Orabug: 26848467] (Tomas Jedlicka, Eugene Loh)
  - ip provider ipv6_tclass and ipv6_flow are not set correctly (Nicolas Droux)
    [Orabug: 27193049]
  - Translator changes for kernels 4.12 -- 4.14 (Nicolas Droux,
    Tomas Jedlicka, Nick Alcock)
  - Add tagging capability to the testsuite [Orabug: 26992620]
    (Vincent Lim, Eugene Loh)
  - Fix kills of hanging dtraces in the testsuite [Orabug: 27051149]
    (Eugene Loh, Nick Alcock)
  - New tests for the lockstat provider and fixes to jstack and 3-arg
    tracemem tests [Orabug: 26149894, 27015838] (Eugene Loh, Alan Maguire)


author: - <nick.alcock@oracle.com> - 1.0.0-3
changelog:
  - Internal development release.
  - New tests and test fixes (Kris Van Hees, Nicolas Droux)
    [Orabug: 27194352, 27282243]


author: - <nick.alcock@oracle.com> - 1.0.0-4
changelog:
  - Internal development release.
  - Eliminate new symbol at address 0 on KPTI-enabled kernels
    [Orabug: 27364377]
  - Boost some test timeouts


author: - <nick.alcock@oracle.com> - 1.0.0-6
changelog:
  - Internal development release.
  - ARM64 support [Orabug: 27438960, 27438993, 27438977]
  - Include correct procfs.h [Orabug: 27266725] (Tomas Jedlicka)


author: - <nick.alcock@oracle.com> - 1.0.0-7
changelog:
  - Internal development release.
  - Several latent porting bugs fixed (Kris Van Hees)
  - Make tests used in smoke testsuite rely on sdt less
    (Kris Van Hees)


author: - <nick.alcock@oracle.com> - 1.0.0-8
changelog:
  - Change dtrace_proc_*() public interfaces to take a struct dtrace_proc,
    avoiding lifecycle issues that can cause access to freed memory when
    victims are exec()ing rapidly [Orabug: 27501199]
  - Bump library soname to libdtrace.so.1 [Orabug: 27501199]
  - Improve handling of symbol name->address and address->name lookup
    [Orabug: 27214992] (Eugene Loh)
  - Check array bounds at compile time [Orabug: 27382268]
  - Fix dtrace -S not printing actions other than the first [Orabug: 27565023]
    (Tomas Jedlicka)
  - Drop expensive, unnecessary bad page state checking from testsuite
    [Orabug: 27577555]
  - Handle interruptions in the testsuite runner better [Orabug: 27577593]
  - Consider erratically failing tests in some directories to be passes
  - Test fixes [Orabug: 27583002, 27651838]


author: - <tomas.jedlicka@oracle.com> - 1.0.0-9
changelog:
  - Updated translators to match new kernel redesign of per-task and
    per-process data. [Orabug: 27731759]
  - Enhanced build system to support multiple kernels [Orabug: 27731756]
  - Added pid provider support [Orabug: 27609459] (Kris Van Hees)
  - Adjusted the interpretation of /proc/kallmodsyms for aarch64
    [Orabug: 27214992] (Eugene Loh)


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.1
changelog:
  - libfuse 2.9.4 from mainline with bug fixes.
  - New features backported and added from libfuse 3.0
  - For eg: writeback_cache, async_dio , readdirplus etc.
  - Conatins the numa patches as well.


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.4.el7
changelog:
  - Revert "libfuse: add flags to ->rename()" (Ashish Samant)  
  - Revert "libfuse: Disable renameat2 until proper support is added" (Ashish Samant)  
  - libfuse: Fix definition of fuse_parse_cmdline() (Ashish Samant)  
  - libfuse: Remove preun script that deleted fuse group from spec file (Ashish Samant)  
  - Add compatibility symlinks for ol6 (Ashish Samant)  
  - fix fusermount so it can only be executed by memebers of the fuse group (Ashish Samant)


author: Tomas Hozza <thozza@redhat.com> - 0-0.20.20130826git
changelog:
  - Build daemons only for x86_64 architecture (#1010220)
  - Bump release to 20 to prevent RHEL6 -> RHEL7 update path issues


author: Tomas Hozza <thozza@redhat.com> - 0-0.21.20130826git
changelog:
  - Use 'hypervkvpd' directory in libexec for KVP daemon scripts (#1010280)
  - daemons are now WantedBy multi-user.target instead of basic.target (#1010284)


author: Matej Muzila <mmuzila@redhat.com> - 0-0.25.20141008git
changelog:
  - Daemons updated to the last git snapshot
  - Use kernel-headers instead of kernel-devel to build
  - Added Hyper-V fcopy daemon as hypervfcopyd subpackage


author: Vitaly Kuznetsov <vkuznets@redhat.com> - 0-0.26.20150402git
changelog:
  - 2015-04-02 git snapshot
  - VSS: skip all readonly-mounted filesystems (#1160584)
  - VSS: support partitions mounted several times (#1169724)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.4.el7uek]
changelog:
  - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (Tomas Bortoli)  [Orabug: 31351119]  {CVE-2019-19533} 
  - NFS: Fix a performance regression in readdir (Trond Myklebust)  [Orabug: 31409061]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.5.el7uek]
changelog:
  - Revert "bnxt_en: Remove busy poll logic in the driver." (Brian Maly)  [Orabug: 28151475]  
  - md: batch flush requests. (NeilBrown)  [Orabug: 31332821]  
  - ALSA: core: Fix card races between register and disconnect (Takashi Iwai)  [Orabug: 31351891]  {CVE-2019-15214} 
  - media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - media: dvb-usb-v2: lmedm04: Improve logic checking of warm start (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - atomic_open(): fix the handling of create_error (Al Viro)  [Orabug: 31493395]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.6.el7uek]
changelog:
  - ipv4: ipv4_default_advmss() should use route mtu (Eric Dumazet)  [Orabug: 31563095]  
  - net: ipv4: Refine the ipv4_default_advmss (Gao Feng)  [Orabug: 31563095]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.1.el7uek]
changelog:
  - can, slip: Protect tty->disc_data in write_wakeup and close with RCU (Richard Palethorpe)  [Orabug: 31516085]  {CVE-2020-14416} 
  - scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout() (himanshu.madhani@cavium.com)  [Orabug: 31530589]  
  - scsi: qla2xxx: Fix NULL pointer access for fcport structure (Quinn Tran)  [Orabug: 31530589]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.2.el7uek]
changelog:
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351672]  {CVE-2019-19054} 
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/pci: Mask buggy SR-IOV VF INTx support (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio_pci: Enable memory accesses before calling pci_map_rom (Eric Auger)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - mm: bring in additional flag for fixup_user_fault to signal unlock (Dominik Dingel)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31514993]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31514993]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31514993]  
  - Revert "x86/efi: Request desired alignment via the PE/COFF headers" (Matt Fleming)  [Orabug: 31602576]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.3.el7uek]
changelog:
  - scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: Serialize session free in qlt_free_session_done (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: v2: Change abort wait_loop from msleep to wait_event_timeout (Giridhar Malavali)  [Orabug: 26932683]  
  - scsi: qla2xxx: v2: Move ABTS code behind qpair (Quinn Tran)  [Orabug: 31517449]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31027042]  
  - block_dev: don't test bdev->bd_contains when it is not stable (NeilBrown)  [Orabug: 31554143]  
  - KVM: x86: Remove spurious semicolon (Joao Martins)  [Orabug: 31584727]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.4.el7uek]
changelog:
  - uek-rpm: Add OL6 shim conflict for new signing key (Eric Snowberg)  [Orabug: 31688239]  
  - Revert "certs: Add Oracle's new X509 cert into the kernel keyring" (Eric Snowberg)  [Orabug: 31688223]  
  - blk-mq: don't overwrite rq->mq_ctx (Jens Axboe)  [Orabug: 31457304]  
  - blk-mq: mark ctx as pending at batch in flush plug path (Ming Lei)  [Orabug: 31457304]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.1.el7uek]
changelog:
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350639]  {CVE-2020-10732} 
  - crypto: user - fix memory leak in crypto_report (Navid Emamdoost)  [Orabug: 31351640]  {CVE-2019-19062} 
  - of: unittest: fix memory leak in unittest_data_add (Navid Emamdoost)  [Orabug: 31351702]  {CVE-2019-19049} 
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31656992]  
  - net-sysfs: call dev_hold if kobject_init_and_add success (YueHaibing)  [Orabug: 31687545]  {CVE-2019-20811}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.2.el7uek]
changelog:
  - mm: create alloc_last_chance debugfs entries (Mike Kravetz)  [Orabug: 31295499]  
  - mm: perform 'last chance' reclaim efforts before allocation failure (Mike Kravetz)  [Orabug: 31295499]  
  - mm: let page allocation slowpath retry 'order' times (Mike Kravetz)  [Orabug: 31295499]  
  - fix kABI breakage from "netns: provide pure entropy for net_hash_mix()" (Dan Duval)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - netns: provide pure entropy for net_hash_mix() (Eric Dumazet)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - hrtimer: Annotate lockless access to timer->base (Eric Dumazet)  [Orabug: 31380495]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648141]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648141]  
  - RDMA/netlink: Do not always generate an ACK for some netlink operations (Håkon Bugge)  [Orabug: 31666975]  
  - genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng)  [Orabug: 31723450]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.3.el7uek]
changelog:
  - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351221]  {CVE-2019-19535} 
  - media: hdpvr: Fix an error handling path in hdpvr_probe() (Arvind Yadav)  [Orabug: 31352053]  {CVE-2017-16644} 
  - fs/binfmt_misc.c: do not allow offset overflow (Thadeu Lima de Souza Cascardo)  [Orabug: 31588258]  
  - clear inode and truncate pages before enqueuing for async inactivation (Gautham Ananthakrishna)  [Orabug: 31744270]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.4.el7uek]
changelog:
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 30634865]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31683116]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31683116]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.1.el7uek]
changelog:
  - blktrace: Protect q->blk_trace with RCU (Jan Kara)  [Orabug: 31123576]  {CVE-2019-19768} 
  - media: technisat-usb2: break out of loop at end of buffer (Sean Young)  [Orabug: 31224554]  {CVE-2019-15505} 
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31351746]  {CVE-2019-18885} 
  - RDMA/cxgb4: Do not dma memory off of the stack (Greg KH)  [Orabug: 31351783]  {CVE-2019-17075} 
  - mwifiex: Abort at too short BSS descriptor element (Takashi Iwai)  [Orabug: 31351916]  {CVE-2019-3846} 
  - mwifiex: Fix possible buffer overflows at parsing bss descriptor (Takashi Iwai)  [Orabug: 31351916]  {CVE-2019-3846} {CVE-2019-3846} 
  - repair kABI breakage from "fs: prevent page refcount overflow in pipe_buf_get" (Dan Duval)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: prevent get_user_pages() from overflowing page refcount (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: add 'try_get_page()' helper function (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - fs: prevent page refcount overflow in pipe_buf_get (Matthew Wilcox)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: make page ref count overflow check tighter and more explicit (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31351960]  {CVE-2019-3874} 
  - sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin)  [Orabug: 31351995]  {CVE-2018-16884} 
  - sunrpc: use-after-free in svc_process_common() (Vasily Averin)  [Orabug: 31351995]  {CVE-2018-16884} 
  - af_packet: set defaule value for tmo (Mao Wenan)  [Orabug: 31439107]  {CVE-2019-20812} 
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore)  [Orabug: 31439369]  {CVE-2020-10751} 
  - selinux: Print 'sclass' as string when unrecognized netlink message occurs (Marek Milkovic)  [Orabug: 31439369]  {CVE-2020-10751} 
  - mac80211: Do not send Layer 2 Update frame before authorization (Jouni Malinen)  [Orabug: 31473652]  {CVE-2019-5108} 
  - cfg80211/mac80211: make ieee80211_send_layer2_update a public function (Dedy Lansky)  [Orabug: 31473652]  {CVE-2019-5108} 
  - crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers)  [Orabug: 31535529]  {CVE-2020-10769} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705121]  {CVE-2020-14331} {CVE-2020-14331} 
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783151]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.2.el7uek]
changelog:
  - ALSA: seq: Cancel pending autoload work at unbinding device (Takashi Iwai)  [Orabug: 31352045]  {CVE-2017-16528} 
  - USB: serial: io_ti: fix information leak in completion handler (Johan Hovold)  [Orabug: 31352084]  {CVE-2017-8924} 
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543032]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543032]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543032]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31543032]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543032]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543032]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543032]  
  - tracing: Kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543032]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.3.el7uek]
changelog:
  - ARM: amba: Fix race condition with driver_override (Geert Uytterhoeven)  [Orabug: 29671212]  {CVE-2018-9415} 
  - block: blk_init_allocated_queue() set q->fq as NULL in the fail case (xiao jin)  [Orabug: 30120513]  {CVE-2018-20856} 
  - USB: serial: omninet: fix reference leaks at open (Johan Hovold)  [Orabug: 30484761]  {CVE-2017-8925} 
  - nl80211: validate beacon head (Johannes Berg)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: Use const more consistently in for_each_element macros (Jouni Malinen)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: add and use strongly typed element iteration macros (Johannes Berg)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: add helper to find an IE that matches a byte-array (Luca Coelho)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: allow finding vendor with OUI without specifying the OUI type (Emmanuel Grumbach)  [Orabug: 30556264]  {CVE-2019-16746} 
  - dccp: Fix memleak in __feat_register_sp (YueHaibing)  [Orabug: 30732821]  {CVE-2019-20096} 
  - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (YueHaibing)  [Orabug: 30732938]  {CVE-2019-20054} 
  - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (YueHaibing)  [Orabug: 30732938]  {CVE-2019-20054} 
  - scsi: libsas: stop discovering if oob mode is disconnected (Jason Yan)  [Orabug: 30770913]  {CVE-2019-19965} 
  - kernel/sysctl.c: fix out-of-bounds access when setting file-max (Will Deacon)  [Orabug: 31350720]  {CVE-2019-14898} 
  - sysctl: handle overflow for file-max (Christian Brauner)  [Orabug: 31350720]  {CVE-2019-14898} 
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351572]  {CVE-2019-19073} 
  - can: gs_usb: gs_can_open(): prevent memory leak (Navid Emamdoost)  [Orabug: 31351682]  {CVE-2019-19052} 
  - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() (Takashi Iwai)  [Orabug: 31351837]  {CVE-2019-15927} 
  - media: usb: siano: Fix general protection fault in smsusb (Alan Stern)  [Orabug: 31351875]  {CVE-2019-15218} 
  - crypto: vmac - separate tfm and request context (Eric Biggers)  [Orabug: 31584410]  
  - SUNRPC: Fix a race with XPRT_CONNECTING (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Fix disconnection races (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Add a helper to wake up a sleeping rpc_task and set its status (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Reduce latency when send queue is congested (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: RPC transport queue must be low latency (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Fix a potential race in xprt_connect() (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: ensure correct error is reported by xs_tcp_setup_socket() (NeilBrown)  [Orabug: 31796770]  
  - SUNRPC: Fix races between socket connection and destroy code (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Prevent SYN+SYNACK+RST storms (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Report TCP errors to the caller (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Ensure we release the TCP socket once it has been closed (Trond Myklebust)  [Orabug: 31796770]  
  - net-gro: fix use-after-free read in napi_gro_frags() (Eric Dumazet)  [Orabug: 31856195]  {CVE-2020-10720} 
  - PCI: Probe bridge window attributes once at enumeration-time (Bjorn Helgaas)  [Orabug: 31867577]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.4.el7uek]
changelog:
  - kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974) (Jann Horn)  [Orabug: 29434845]  {CVE-2019-6974} 
  - KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) (Peter Shier)  [Orabug: 29434898]  {CVE-2019-7221} 
  - KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) (Paolo Bonzini)  [Orabug: 29434924]  {CVE-2019-7222} 
  - net: arc_emac: fix koops caused by sk_buff free (Alexander Kochetkov)  [Orabug: 30254239]  {CVE-2016-10906} 
  - GFS2: don't set rgrp gl_object until it's inserted into rgrp tree (Bob Peterson)  [Orabug: 30254251]  {CVE-2016-10905} 
  - GFS2: Fix rgrp end rounding problem for bsize < page size (Bob Peterson)  [Orabug: 30254251]  {CVE-2016-10905} 
  - x86/apic/msi: update address_hi on set msi affinity (Joe Jin)  [Orabug: 31477035]  
  - x86/apic/msi: check and sync apic IRR on msi_set_affinity (Joe Jin)  [Orabug: 31477035]  
  - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (Sabrina Dubroca)  [Orabug: 31872821]  {CVE-2020-1749} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872910]  {CVE-2020-25212} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884169]  {CVE-2020-25284} 
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884239]  {CVE-2020-25285} 
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895331]  {CVE-2020-14314}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.1.el7uek]
changelog:
  - oracleasm: Retrieve d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31832592]  
  - KVM: VMX: fixes for vmentry_l1d_flush module parameter (Paolo Bonzini)  [Orabug: 31962487]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.2.el7uek]
changelog:
  - usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neukum)  [Orabug: 31351088]  {CVE-2019-19530} 
  - net/rds: migration of a delayed initialized port present in down state (Praveen Kumar Kannoju)  [Orabug: 31729995]  
  - net: add high_order_alloc_disable sysctl (Eric Dumazet)  [Orabug: 31835223]  
  - mm, page_alloc: double zone's batchsize (Aaron Lu)  [Orabug: 31835223]  
  - mm/free_pcppages_bulk: prefetch buddy while not holding lock (Aruna Ramakrishna)  [Orabug: 31835223]  
  - mm/free_pcppages_bulk: do not hold lock when picking pages to free (Aruna Ramakrishna)  [Orabug: 31835223]  
  - mm, page_alloc: remove unnecessary variable from free_pcppages_bulk (Mel Gorman)  [Orabug: 31835223]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872865]  {CVE-2020-25211} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880144]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31974559]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.3.el7uek]
changelog:
  - qed: Reduce verbosity of unimplemented MFW messages (Mintz, Yuval)  [Orabug: 31959299]  
  - kexec: validate pe files against the system_blacklist_keyring (Eric Snowberg)  [Orabug: 31961119]  {CVE-2020-26541}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.4.el7uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS (himanshu.madhani@cavium.com)  [Orabug: 32020790]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.4.1.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040806]  {CVE-2020-8694} {CVE-2020-8695}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.1.el7uek]
changelog:
  - Revert "x86/efi: Initialize and display UEFI secure boot state a bit later during init" (Eric Snowberg)  [Orabug: 31887248]  
  - xfs: fix xfs_inode use after free (Wengang Wang)  [Orabug: 31932452]  
  - SUNRPC: ECONNREFUSED should cause a rebind. (NeilBrown)  [Orabug: 32070175]  
  - netfilter: nfnetlink: correctly validate length of batch messages (Phil Turnbull)  [Orabug: 30658635]  {CVE-2016-7917} 
  - xc2028: Fix use-after-free bug properly (Takashi Iwai)  [Orabug: 30658659]  {CVE-2016-7913} 
  - [media] xc2028: avoid use after free (Mauro Carvalho Chehab)  [Orabug: 30658659]  {CVE-2016-7913} 
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 30821411]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989190]  {CVE-2020-25643} 
  - tracing: Reverse the order of trace_types_lock and event_mutex (Alan Maguire)  [Orabug: 32002706]  
  - ocfs2/dlm: move lock to the tail of grant queue while doing in-place convert (xuejiufei)  [Orabug: 32071234]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.2.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32137965]  {CVE-2020-8694} {CVE-2020-8695}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.3.el7uek]
changelog:
  - drm/vmwgfx: Make sure backup_handle is always valid (Sinclair Yeh)  [Orabug: 31352076]  {CVE-2017-9605} 
  - random32: move the pseudo-random 32-bit definitions to prandom.h (Linus Torvalds)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random32: remove net_rand_state from the latent entropy gcc plugin (Linus Torvalds)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random: fix circular include dependency on arm64 after addition of percpu.h (Willy Tarreau)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698086]  {CVE-2020-16166} 
  - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context (WANG Chao)  [Orabug: 32021856]  
  - kvm: x86: do not leak guest xcr0 into host interrupt handlers (David Matlack)  [Orabug: 32021856]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.4.el7uek]
changelog:
  - block: Move part of bdi_destory() to del_gendisk() as bdi_unregister(). (Jan Kara)  [Orabug: 32124131]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32138039]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.6.el7uek]
changelog:
  - qla2xxx: disable target reset during link reset and update version (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix early srb free on abort (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (Masanari Iida)  [Orabug: 32095664]  
  - scsi: qla2xxx: Enable Async TMF processing (himanshu.madhani@cavium.com)  [Orabug: 32095664]  
  - qla2xxx: tweak debug message for task management path (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (Arun Easi)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix fabric scan hang (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Do command completion on abort timeout (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix abort timeout race condition. (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix race between switch cmd completion and timeout (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx:v2: Fix double scsi_done for abort path (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2 Fix a race condition between aborting and completing a SCSI command (Bart Van Assche)  [Orabug: 32095664]  
  - scsi: qla2xxx: Really fix qla2xxx_eh_abort() (Bart Van Assche)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2 Reject EH_{abort|device_reset|target_request} (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2: Fix race conditions in the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 32095664]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.1.el7uek]
changelog:
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722767]  
  - KVM: x86: Manually flush collapsible SPTEs only when toggling flags (Sean Christopherson)  [Orabug: 31722767]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722767]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722767]  
  - xfs: catch inode allocation state mismatch corruption (Gautham Ananthakrishna)  [Orabug: 32071488]  
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122731]  {CVE-2020-25668} 
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136900]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.2.el7uek]
changelog:
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 31780626]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176264]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176264]  {CVE-2020-28915} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177993]  
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187749]  {CVE-2020-28974} 
  - block: Fix use-after-free in blkdev_get() (Jason Yan)  [Orabug: 32194609]  {CVE-2020-15436} 
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227971]  {CVE-2020-25705}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.3.el7uek]
changelog:
  - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Ganapathi Bhat)  [Orabug: 30781859]  {CVE-2019-14895} {CVE-2019-14895} 
  - ext4: fix ext4_empty_dir() for directories with holes (Jan Kara)  [Orabug: 31265320]  {CVE-2019-19037} {CVE-2019-19037} 
  - netlabel: cope with NULL catmap (Paolo Abeni)  [Orabug: 31350493]  {CVE-2020-10711} 
  - scsi: mptfusion: Fix double fetch bug in ioctl (Dan Carpenter)  [Orabug: 31350941]  {CVE-2020-12652} 
  - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() (Dan Carpenter)  [Orabug: 31350941]  {CVE-2020-12652} 
  - USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350967]  {CVE-2020-12464} 
  - drivers: usb: core: Minimize irq disabling in usb_sg_cancel() (David Mosberger)  [Orabug: 31350967]  {CVE-2020-12464} 
  - drivers: usb: core: Don't disable irqs in usb_sg_wait() during URB submit. (David Mosberger)  [Orabug: 31350967]  {CVE-2020-12464} 
  - ext4: work around deleting a file with i_nlink == 0 safely (Theodore Ts'o)  [Orabug: 31351014]  {CVE-2019-19447} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 31984319]  
  - xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage (Josh Abraham)  [Orabug: 31984319]  
  - ext4: fix fencepost in s_first_meta_bg validation (Theodore Ts'o)  [Orabug: 32197511]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32202000]  
  - sched/fair: Don't free p->numa_faults with concurrent readers (Jann Horn)  [Orabug: 32212524]  {CVE-2019-20934} 
  - netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Vasily Averin)  [Orabug: 32222844]  {CVE-2020-14305} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233360]  {CVE-2020-14351} 
  - ext4: fix calculation of meta_bg descriptor backups (Andy Leiserson)  [Orabug: 32245133]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.4.el7uek]
changelog:
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32223358]  {CVE-2020-29569}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.47.2.el7uek]
changelog:
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350932]  {CVE-2020-12653} 
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 31435700]  
  - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (Takashi Iwai)  [Orabug: 32240688]  {CVE-2020-27786} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251907]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266682]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266682]  {CVE-2020-29660} 
  - tty: core: Use correct spinlock flavor in tiocspgrp() (Peter Hurley)  [Orabug: 32266682]  {CVE-2020-29660} 
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349208]  {CVE-2020-36158}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.1.el7uek]
changelog:
  - nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350996]  
  - rds: Add code to debug rds_tcp loopback hang (Rao Shoaib)  [Orabug: 32382656]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.48.3.1.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492113]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.4.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32520758]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.5.el7uek]
changelog:
  - kernel/acct.c: fix the acct->needcheck check in check_free_space() (Oleg Nesterov)  [Orabug: 31587485]  
  - HID: hid-input: clear unmapped usages (Dmitry Torokhov)  [Orabug: 32464790]  {CVE-2020-0431} 
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498826]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.6.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603382]  
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603382]  
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.49.2.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32640641]  
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32640641]  
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.49.3.el7uek]
changelog:
  - xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32485156]  
  - audit: fix error handling in audit_data_to_entry() (Paul Moore)  [Orabug: 32608451]  {CVE-2020-0444}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.50.1.el7uek]
changelog:
  - floppy: fix lock_fdc() signal handling (Jiri Kosina)  [Orabug: 32624116]  {CVE-2021-20261} 
  - Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651478]  {CVE-2021-28038} 
  - n_tty: Fix stall at n_tty_receive_char_special(). (Tetsuo Handa)  [Orabug: 32656942]  {CVE-2021-20219} 
  - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (Eddy Wu)  [Orabug: 32695783]  {CVE-2020-35508} 
  - Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric Sandeen)  [Orabug: 32696741]  
  - SecureBoot Digicert 2021 certificates update (Brian Maly)  [Orabug: 32734505]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.50.2.el7uek]
changelog:
  - btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669454]  {CVE-2021-28964} 
  - xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697855]  {CVE-2021-28688} 
  - netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709125]  {CVE-2021-29650} 
  - netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal)  [Orabug: 32709125]  {CVE-2021-29650} 
  - do_epoll_ctl(): clean the failure exits up a bit (Al Viro)  [Orabug: 32759496]  {CVE-2020-0466} 
  - epoll: Keep a reference on files added to the check list (Marc Zyngier)  [Orabug: 32759496]  {CVE-2020-0466} 
  - HID: core: Sanitize event code and type when mapping input (Marc Zyngier)  [Orabug: 32759553]  {CVE-2020-0465}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.51.2.el7uek]
changelog:
  - IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32219842]  
  - mm: madv_doexec_flag sysctl (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: introduce MADV_DOEXEC (Anthony Yznaga)  [Orabug: 32387889]  
  - exec, elf: require opt-in for accepting preserved mem (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: introduce VM_EXEC_KEEP (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: fail exec if stack expansion will overlap another vma (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: do not assume only the stack vma exists in setup_arg_pages() (Anthony Yznaga)  [Orabug: 32387889]  
  - ELF: when loading PIE binaries check for overlap with existing mappings (Anthony Yznaga)  [Orabug: 32387889]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.1.el7uek]
changelog:
  - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860494]  {CVE-2021-31916}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.2.el7uek]
changelog:
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021289]  {CVE-2020-12352} 
  - RDS tcp loopback connection can hang (Rao Shoaib)  [Orabug: 32926868]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.3.el7uek]
changelog:
  - iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)  [Orabug: 32974492]  
  - iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)  [Orabug: 32974492]  
  - secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly)  [Orabug: 32978042]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.4.el7uek]
changelog:
  - IB/core: Only update PKEY and GID caches on respective events (Håkon Bugge)  [Orabug: 32816368]  
  - Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820278]  
  - Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912103]  {CVE-2021-33034} 
  - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (Peilin Ye)  [Orabug: 33013890]  {CVE-2020-36386} 
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v5 (Quinn Tran)  [Orabug: 33015884]  
  - scsi: qla2xxx: v2: Fix login retry count (Quinn Tran)  [Orabug: 29411891] [Orabug: 33015884]  
  - scsi: qla2xxx: Properly extract ADISC error codes (Quinn Tran)  [Orabug: 33015884]  
  - scsi: qla2xxx: Replace GPDB with async ADISC command (Quinn Tran)  [Orabug: 33015884]  
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v4 (Quinn Tran)  [Orabug: 33015884]  
  - qla2xxx: fix relogin stalled. (Quinn Tran)  [Orabug: 27700529] [Orabug: 33015884]  
  - net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry)  [Orabug: 33017263]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.5.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135634]  {CVE-2021-33909}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.5.1.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33116628]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33116628]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.1.el7uek]
changelog:
  - xfs: fix lockup issue (Junxiao Bi)  [Orabug: 32836026]  
  - bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912036]  {CVE-2021-32399} {CVE-2021-32399}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.3.el7uek]
changelog:
  - net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk)  [Orabug: 31895301]  {CVE-2020-14304} 
  - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (Erez Alfasi)  [Orabug: 31895301]  {CVE-2020-14304} 
  - netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)  [Orabug: 33093028]  {CVE-2021-22555} 
  - xen/blkback: Make sure all vbd fields are initialized (Boris Ostrovsky)  [Orabug: 33131620]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33143006]  {CVE-2021-33909}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.1.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33195559]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33195559]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.2.el7uek]
changelog:
  - iommu/vt-d: Use plain writeq() for dmar_writeq() where available (David Woodhouse)  [Orabug: 33215470]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.1.el7uek]
changelog:
  - can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)  [Orabug: 33030701]  {CVE-2021-34693} 
  - CIFS: 511c54a2f691 adds a check for session expiry (Aruna Ramakrishna)  [Orabug: 33063858]  
  - CIFS: Reconnect expired SMB sessions (Pavel Shilovsky)  [Orabug: 33063858]  
  - media: v4l: event: Add subscription to list before calling "add" operation (Sakari Ailus)  [Orabug: 33113344]  {CVE-2019-9458} 
  - media: v4l: event: Prevent freeing event subscriptions while accessed (Sakari Ailus)  [Orabug: 33113344]  {CVE-2019-9458} 
  - chardev: Avoid potential use-after-free in 'chrdev_open()' (Will Deacon)  [Orabug: 33113412]  {CVE-2020-0305} 
  - kobject: Export kobject_get_unless_zero() (Jan Kara)  [Orabug: 33113412]  {CVE-2020-0305} 
  - cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE (Sergey Matyukevich)  [Orabug: 33114443]  {CVE-2020-27068}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.2.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33196002]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33196002]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.3.el7uek]
changelog:
  - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 32060376]  
  - config: remove CONFIG_VGACON_SOFT_SCROLLBACK from kernel configs (Brian Maly)  [Orabug: 33047770]  {CVE-2020-28097} {CVE-2020-28097} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 33047770]  {CVE-2020-28097} 
  - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114649]  {CVE-2021-3609} 
  - iommu/vt-d: Use plain writeq() for dmar_writeq() where available (David Woodhouse)  [Orabug: 33199774]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.4.el7uek]
changelog:
  - USB: mon: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33113260]  {CVE-2019-9456} 
  - usb: usbmon: Read text within supplied buffer size (Pete Zaitcev)  [Orabug: 33113260]  {CVE-2019-9456}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.5.el7uek]
changelog:
  - l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: ensure sessions are freed after their PPPOL2TP socket (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: Refactor the codes with existing macros instead of literal number (Gao Feng)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: fix duplicate session creation (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: ensure session can't get removed during pppol2tp_session_ioctl() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: fix race in l2tp_recv_common() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - net: l2tp: Make l2tp_ip6 namespace aware (Shmulik Ladkani)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: Correctly return -EBADF from pppol2tp_getname. (phil.turnbull@oracle.com)  [Orabug: 33113975]  {CVE-2020-0429}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.6.1.el7uek]
changelog:
  - fs/namespace.c: fix mountpoint reference counter race (Piotr Krysiuk)  [Orabug: 33369433]  {CVE-2020-12114} {CVE-2020-12114} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 33369414]  {CVE-2019-19448} {CVE-2019-19448} 
  - cfg80211: wext: avoid copying malformed SSIDs (Will Deacon)  [Orabug: 33369390]  {CVE-2019-17133} 
  - vhost_net: fix possible infinite loop (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} {CVE-2019-3900} 
  - vhost: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost_net: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost_net: use packet weight for rx handler, too (Paolo Abeni)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost-net: set packet weight of tx polling to 2 * vq size (haibinzhang(张海斌))  [Orabug: 33369374]  {CVE-2019-3900} 
  - mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24586} {CVE-2020-24587} 
  - mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: check defrag PN against current frame (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: add fragment cache to sta_info (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: drop A-MSDUs on old ciphers (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24587} {CVE-2020-24586} 
  - mac80211: assure all fragments are encrypted (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-26147} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33369303]  {CVE-2021-3655} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33369276]  {CVE-2021-38160} 
  - net_sched: cls_route: remove the right filter from hashtable (Cong Wang)  [Orabug: 33369231]  {CVE-2021-3715} 
  - HID: make arrays usage and value to be the same (Will McVicker)  [Orabug: 33369121]  {CVE-2021-0512} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33369043]  {CVE-2021-40490}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.1.el7uek]
changelog:
  - cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE (Srinivas Dasari)  [Orabug: 31351335]  {CVE-2017-11089} 
  - ocfs2: issue zeroout to EOF blocks (Junxiao Bi)  [Orabug: 32974989]  
  - ocfs2: fix zero out valid data (Junxiao Bi)  [Orabug: 32974989]  
  - ocfs2: fix data corruption by fallocate (Junxiao Bi)  [Orabug: 32974989]  
  - l2tp: fix l2tp_eth module loading (Guillaume Nault)  [Orabug: 33114384]  {CVE-2020-27067} 
  - af_key: pfkey_dump needs parameter validation (Mark Salyzyn)  [Orabug: 33114539]  {CVE-2021-0605} 
  - af_key: Add lock to key dump (Yuejie Shi)  [Orabug: 33114539]  {CVE-2021-0605} 
  - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin)  [Orabug: 33114989]  {CVE-2021-3612} 
  - Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)  [Orabug: 33114989]  {CVE-2021-3612} 
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33198437]  {CVE-2021-3679} 
  - dtrace: Corrects - warning: assignment makes pointer from integer without a cast (John Donnelly)  [Orabug: 33314947]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.2.el7uek]
changelog:
  - x86/mm: Fix compiler warning in pageattr.c (John Donnelly)  [Orabug: 33332673]  
  - security: Make inode argument of inode_getsecid non-const (Andreas Gruenbacher)  [Orabug: 33337179]  
  - security: Make inode argument of inode_getsecurity non-const (Andreas Gruenbacher)  [Orabug: 33337179]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.3.el7uek]
changelog:
  - fs/namespace.c: fix mountpoint reference counter race (Piotr Krysiuk)  [Orabug: 31350976]  {CVE-2020-12114} {CVE-2020-12114} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 31351025]  {CVE-2019-19448} {CVE-2019-19448} 
  - cfg80211: wext: avoid copying malformed SSIDs (Will Deacon)  [Orabug: 31351800]  {CVE-2019-17133} 
  - vhost_net: fix possible infinite loop (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} {CVE-2019-3900} 
  - vhost: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost_net: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost_net: use packet weight for rx handler, too (Paolo Abeni)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost-net: set packet weight of tx polling to 2 * vq size (haibinzhang(张海斌))  [Orabug: 31351950]  {CVE-2019-3900} 
  - mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24586} {CVE-2020-24587} 
  - mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: check defrag PN against current frame (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: add fragment cache to sta_info (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: drop A-MSDUs on old ciphers (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24587} {CVE-2020-24586} 
  - mac80211: assure all fragments are encrypted (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-26147} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33198409]  {CVE-2021-3655} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33209274]  {CVE-2021-38160} 
  - net_sched: cls_route: remove the right filter from hashtable (Cong Wang)  [Orabug: 33326887]  {CVE-2021-3715} 
  - HID: make arrays usage and value to be the same (Will McVicker)  [Orabug: 33326939]  {CVE-2021-0512} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33327200]  {CVE-2021-40490}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.56.1.el7uek]
changelog:
  - ocfs2: subsystem.su_mutex is required while accessing the item->ci_parent (alex chen)  [Orabug: 29184589]  {CVE-2017-18216} 
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)   {CVE-2020-12771} 
  - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (Linus Torvalds)  [Orabug: 31351271]  {CVE-2019-10220} 
  - Make filldir[64]() verify the directory entry filename is valid (Linus Torvalds)  [Orabug: 31351271]  {CVE-2019-10220} 
  - ath9k: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351559]  {CVE-2019-19074} 
  - scsi: bfa: release allocated memory in case of error (Navid Emamdoost)  [Orabug: 31351615]  {CVE-2019-19066} 
  - rtlwifi: prevent memory leak in rtl_usb_probe (Navid Emamdoost)  [Orabug: 31351626]  {CVE-2019-19063} 
  - perf/core: Fix perf_event_open() vs. execve() race (Peter Zijlstra)  [Orabug: 31351766]  {CVE-2019-3901} 
  - l2tp: pass tunnel pointer to ->session_create() (Guillaume Nault)  [Orabug: 31352004]  {CVE-2018-9517} 
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33039295]  
  - Revert "uek-rpm: mark /etc/ld.so.conf.d/ files as %config" (aloktiw)  [Orabug: 33359684]  
  - ksplice: Fix build warning with ksplice_sysctls (John Donnelly)  [Orabug: 33365274]  
  - kvm:vmx Fix build error in kvm/vmx.c (John Donnelly)  [Orabug: 33375485]  
  - vmscan: Fix build error in mm/vmscan.c (John Donnelly)  [Orabug: 33375931]  
  - constify iov_iter_count() and iter_is_iovec() (Al Viro)  [Orabug: 33381741]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.56.2.el7uek]
changelog:
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)  [Orabug: 31864610]  {CVE-2019-19813} 
  - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864610]  {CVE-2019-19813} 
  - net: create skb_gso_validate_mac_len() (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026} 
  - bnx2x: disable GSO where gso_size is too big for hardware (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026} 
  - Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33014035]  {CVE-2021-3564} {CVE-2021-3564} 
  - l2tp: Avoid schedule while atomic in exit_net (Ridge Kennedy)  [Orabug: 33360013]  
  - l2tp: remove skb_dst_set() from l2tp_xmit_skb() (Xin Long)  [Orabug: 33360013]  
  - dtrace: remove unused variables (John Donnelly)  [Orabug: 33387203]  
  - scsi: treat lun as 64-bit in scsi_report_lun_scan() error message (Henry Willard)  [Orabug: 33387203]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.57.1.el7uek]
changelog:
  - target; fix print statement warning (John Donnelly)  [Orabug: 33495661]  
  - enic;: fix warning on module_param disable_vlan0, (John Donnelly)  [Orabug: 33495661]  
  - bnx2fc: correct BNX2FC_TM_TIMEOUT to be 60 sec (John Donnelly)  [Orabug: 33495661]  
  - target: Fix linux-4.1.y specific compile warning (Nicholas Bellinger)  [Orabug: 33495661]  
  - net/mlx4: Fixing warning in mlx4_get_module_info() (John Donnelly)  [Orabug: 33495661]  
  - rds: Avoid compiler warning in ib_send.c: opcode (John Donnelly)  [Orabug: 33495661]  
  - RDMA/mad: correct build warning (John Donnelly)  [Orabug: 33495661]  
  - dtrace: Fix warning in dtrace_sync() (Tomas Jedlicka)  [Orabug: 33495661]  
  - virtio: Silence uninitialized variable warning (Dan Carpenter)  [Orabug: 33495661]  
  - scsi: correct uninitialized variable (John Donnelly)  [Orabug: 33495661]  
  - media: smsusb: better handle optional alignment (Mauro Carvalho Chehab)  [Orabug: 33495661]  
  - media: usb: siano: Fix false-positive "uninitialized variable" warning (Alan Stern)  [Orabug: 33495661]  
  - toshiba_acpi: correct build warning (John Donnelly)  [Orabug: 33495661]  
  - RDS/IB: corrects build warning (John Donnelly)  [Orabug: 33495661]  
  - x86/mce: correct return warning (John Donnelly)  [Orabug: 33495661]  
  - x86/asm/msr: Make wrmsrl_safe() a function (Andy Lutomirski)  [Orabug: 33495661]  
  - x86/mitigations: fix warnings in taa_select_mitigation() (John Donnelly)  [Orabug: 33495661]  
  - mm: correct build warning with pgprot (John Donnelly)  [Orabug: 33495661]  
  - Thermal: remove unused variable (John Donnelly)  [Orabug: 33495661]  
  - ixgbe: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - i40e: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - mlx4: remove unused variables and functions, (John Donnelly)  [Orabug: 33495661]  
  - nvme: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - ocfs2: remove unused function: ocfs2_prepare_inode_for_refcount() (John Donnelly)  [Orabug: 33495661]  
  - ipv6: remove unused variable: payload_len (John Donnelly)  [Orabug: 33495661]  
  - Revert "efi: Fix out-of-bounds read in variable_matches()" (John Donnelly)  [Orabug: 33495661]  
  - dtrace: remove unused variable "iph" (John Donnelly)  [Orabug: 33495661]  
  - ext4: remove unused function ext4_init_inode_bitmap() (John Donnelly)  [Orabug: 33495661]  
  - cpuidle: remove unused function: call_cpuidle() (John Donnelly)  [Orabug: 33495661]  
  - cifs: remove unused label (John Donnelly)  [Orabug: 33495661]  
  - block: remove unused out: label (John Donnelly)  [Orabug: 33495661]  
  - Bluetooth: hci_uart: check for missing tty operations (Vladis Dronov)  [Orabug: 30244627]  {CVE-2019-10207} {CVE-2019-10207} 
  - Bluetooth: hci_uart: Add basic support for Intel Lightning Peak devices (Loic Poulain)  [Orabug: 30244627]  {CVE-2019-10207} 
  - Bluetooth: hci_uart: Add new line discipline enhancements (Ilya Faenson)  [Orabug: 30244627]  {CVE-2019-10207} 
  - Bluetooth: hci_uart: Support operational speed during setup (Frederic Danis)  [Orabug: 30244627]  {CVE-2019-10207}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.58.1.el7uek]
changelog:
  - sunrpc: move NO_CRKEY_TIMEOUT to the auth->au_flags (Scott Mayhew)  [Orabug: 33443537]  
  - xen/netfront: stop tx queues during live migration (Dongli Zhang)  [Orabug: 33536410]


author: visuman <vijayendra.suman@oracle.com> [4.1.12-124.58.2.el7uek]
changelog:
  - ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi)  [Orabug: 33560431]  {CVE-2021-3732}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.59.1.el7uek]
changelog:
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33369488]  
  - net: mac802154: Fix general protection fault (Pavel Skripkin)  [Orabug: 33556911]  {CVE-2021-3659} 
  - uek-rpm: Add __sw_hweight64 to KABI (John Donnelly)  [Orabug: 33557971]  
  - isdn: cpai: check ctr->cnr to avoid array index out of bound (Xiaolong Huang)  [Orabug: 33617286]  {CVE-2021-43389}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.59.1.1.el7uek]
changelog:
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33703630]  {CVE-2021-4155}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.59.1.2.el7uek]
changelog:
  - fix regression in "epoll: Keep a reference on files added to the check list" (Al Viro)  [Orabug: 33679854]  {CVE-2021-1048} 
  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679806]  {CVE-2021-0920} 
  - fs: add fget_many() and fput_many() (Jens Axboe)  [Orabug: 33679806]  
  - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)  [Orabug: 33679806]  {CVE-2021-0920} 
  - net: split out functions related to registering inflight socket files (Jens Axboe)  [Orabug: 33679806]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.60.1.el7uek]
changelog:
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33699627] [Orabug: 33762471]  {CVE-2021-4155} 
  - fix regression in "epoll: Keep a reference on files added to the check list" (Al Viro)  [Orabug: 33679854] [Orabug: 33762505]  {CVE-2021-1048} {CVE-2021-1048} 
  - Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo)  [Orabug: 33406421]  {CVE-2021-3752} 
  - vt_kdsetmode: extend console locking (Linus Torvalds)  [Orabug: 33406445]  {CVE-2021-3753} 
  - Bluetooth: SMP: Fail if remote and local public keys are identical (Luiz Augusto von Dentz)  [Orabug: 33556779]  {CVE-2021-0129} 
  - Bluetooth: use constant time memory comparison for secret values (Jason A. Donenfeld)  [Orabug: 33556779]  {CVE-2021-0129} 
  - Bluetooth: Add bt_dev logging macros (Loic Poulain)  [Orabug: 33556779]  {CVE-2021-0129} 
  - ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)  [Orabug: 33694378]  {CVE-2021-20321}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.61.1.el7uek]
changelog:
  - drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)  [Orabug: 33835812]  {CVE-2022-0330} 
  - drm/i915: Reduce locking in execlist command submission (Chris Wilson)  [Orabug: 33835812]  {CVE-2022-0330} 
  - ipv4: make exception cache less predictible (Eric Dumazet)  [Orabug: 33894531]  {CVE-2021-20322} 
  - route: also update fnhe_genid when updating a route cache (Xin Long)  [Orabug: 33894531]  {CVE-2021-20322} 
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - sctp: add vtag check in sctp_sf_violation (Xin Long)  [Orabug: 33924717]  {CVE-2021-3772} 
  - sctp: use init_tag from inithdr for ABORT chunk (Xin Long)  [Orabug: 33924717]  {CVE-2021-3772} 
  - sr9700: sanity check for packet length (Oliver Neukum)  [Orabug: 33962995]  {CVE-2022-26966}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.62.1.el7uek]
changelog:
  - Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  [Orabug: 33014054]  {CVE-2021-3573} 
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)  [Orabug: 33617221]  {CVE-2021-4002} 
  - udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)  [Orabug: 33870269]  {CVE-2022-0617} 
  - udf: Fix NULL ptr deref when converting from inline format (Jan Kara)  [Orabug: 33870269]  {CVE-2022-0617} 
  - phonet: refcount leak in pep_sock_accep (Hangyu Hua)  [Orabug: 33962762]  {CVE-2021-45095} 
  - btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)  [Orabug: 33997139]  {CVE-2021-4149} 
  - quota: correct error number in free_dqentry() (Zhang Yi)  [Orabug: 33997256]  {CVE-2021-45868} 
  - quota: check block number when reading the block in quota file (Zhang Yi)  [Orabug: 33997256]  {CVE-2021-45868} 
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet)  [Orabug: 34006847]  {CVE-2021-4203}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.62.2.el7uek]
changelog:
  - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34012926]  {CVE-2022-1016} 
  - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() (Nikola Livic)  [Orabug: 34020970]  {CVE-2021-4157}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.62.3.el7uek]
changelog:
  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679806]  {CVE-2021-0920} 
  - fs: add fget_many() and fput_many() (Jens Axboe)  [Orabug: 33679806]  
  - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)  [Orabug: 33679806]  {CVE-2021-0920} 
  - net: split out functions related to registering inflight socket files (Jens Axboe)  [Orabug: 33679806]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.1.el7uek]
changelog:
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135346]  {CVE-2022-1353} 
  - memstick: rtsx_usb_ms: fix UAF (Tong Zhang)  [Orabug: 34132126]  {CVE-2022-0487}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.2.el7uek]
changelog:
  - debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34152701]  {CVE-2022-21499} 
  - xfs: prevent dropping ioend completions during buftarg wait (Brian Foster)  [Orabug: 34191201]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.3.el7uek]
changelog:
  - xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky)  [Orabug: 34202040]  
  - uek-rpm: Update OL7 Secureboot certificate and shim versions (Jack Vogel)  [Orabug: 34265467]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.64.1.el7uek]
changelog:
  - iscsi-target: Fix the issue with shutdown_session removal (Gulam Mohamed)  [Orabug: 29661566]  
  - scsi: target: fix hang when multiple threads try to destroy the same iscsi session (Gulam Mohamed)  [Orabug: 29661566]  
  - scsi: target: remove boilerplate code (Gulam Mohamed)  [Orabug: 29661566]  
  - iscsi-target: remove usage of ->shutdown_session (Gulam Mohamed)  [Orabug: 29661566]  
  - Drop the left-over iscsi-target hack (Gulam Mohamed)  [Orabug: 29661566]  
  - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  [Orabug: 34048290]  {CVE-2022-28388} 
  - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  [Orabug: 34048329]  {CVE-2022-28390} 
  - floppy: use a statically allocated error counter (Willy Tarreau)  [Orabug: 34218641]  {CVE-2022-1652}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.65.1.el7uek]
changelog:
  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33825689]  {CVE-2022-0492} 
  - ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi)  [Orabug: 34091904]  
  - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel)  [Orabug: 34091904]  
  - ocfs2: dlmfs: don't clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi)  [Orabug: 34091904]  
  - uek: kabi: new kABI symbols by USM and fix kABI files (Saeed Mirzamohammadi)  [Orabug: 34233929]  
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  [Orabug: 34247343]  {CVE-2022-32250} 
  - netfilter: nf_tables: fix memory leak if expr init fails (Liping Zhang)  [Orabug: 34247343]  
  - floppy: disable FDRAWCMD by default (Willy Tarreau)  [Orabug: 34308428]  {CVE-2022-33981}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.65.1.1.el7uek]
changelog:
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460939]  {CVE-2022-2588}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.65.1.2.el7uek]
changelog:
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Gulam Mohamed)  [Orabug: 33349684]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.1.el7uek]
changelog:
  - net: fix uninit-value in __hw_addr_add_ex() (Eric Dumazet)  [Orabug: 34395887]  
  - mac80211: silence an uninitialized variable warning (Dan Carpenter)  [Orabug: 34396283]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.2.el7uek]
changelog:
  - mm: enforce min addr even if capable() in expand_downwards() (Jann Horn)  [Orabug: 29501997]  {CVE-2019-9213} 
  - ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss)   
  - ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit (Eric W. Biederman)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ipv4: igmp: guard against silly MTU values (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - inet: constify ip_dont_fragment() arguments (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ip: constify ip_build_and_send_pkt() socket argument (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Eric Biggers)  [Orabug: 34433461]  {CVE-2020-36557} 
  - vt: vt_ioctl: fix race in VT_RESIZEX (Eric Dumazet)  [Orabug: 34433476]  {CVE-2020-36558} 
  - VT_RESIZEX: get rid of field-by-field copyin (Al Viro)  [Orabug: 34433476]  
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460939] [Orabug: 34484730]  {CVE-2022-2588}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.3.el7uek]
changelog:
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)  [Orabug: 33981149]  {CVE-2022-1011} 
  - vt: drop old FONT ioctls (Jiri Slaby)  [Orabug: 34408794]  {CVE-2021-33656} 
  - video: of_display_timing.h: include errno.h (Hsin-Yi Wang)  [Orabug: 34408910]  {CVE-2021-33655} 
  - fbcon: Disallow setting font bigger than screen size (Helge Deller)  [Orabug: 34408910]  {CVE-2021-33655} 
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419974]  {CVE-2022-21546} 
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Gulam Mohamed)  [Orabug: 33349684] [Orabug: 34492498]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.67.1.el7uek]
changelog:
  - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Eric Biggers)  [Orabug: 27902747]  {CVE-2017-7472} 
  - KEYS: prevent creating a different user's keyrings (Eric Biggers)  [Orabug: 29013653]  {CVE-2017-18270} 
  - scsi: sg: add sg_remove_request in sg_write (Wu Bo)  [Orabug: 31350699]  {CVE-2020-12770} 
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)  [Orabug: 34503626]  {CVE-2022-36879} 
  - ext4: verify dir block before splitting it (Jan Kara)  [Orabug: 34555416]  {CVE-2022-1184} 
  - dm verity: set DM_TARGET_IMMUTABLE feature flag (Sarthak Kukreti)  [Orabug: 34555434]  {CVE-2022-2503}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.67.2.el7uek]
changelog:
  - media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)  [Orabug: 32759975]  {CVE-2021-30002} 
  - usbnet: silence an unnecessary warning (Oliver Neukum)  [Orabug: 23589045]  
  - futex: Remove requirement for lock_page() in get_futex_key() (Mel Gorman)  [Orabug: 29048998]  {CVE-2018-9422} 
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (Zekun Shen)  [Orabug: 33784271]  {CVE-2021-43976} 
  - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566754]  {CVE-2022-3028} 
  - ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)  [Orabug: 34579226]  {CVE-2022-0850} 
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn)  [Orabug: 34594265]  {CVE-2022-2964} 
  - net: usb: ax88179_178a: initialize local variables before use (Phillip Potter)  [Orabug: 34594265]  
  - net: usb: ax88179_178a: fix packet alignment padding (Jeremy Kerr)  [Orabug: 34594265]  
  - ax88179_178a: Check for supported Wake-on-LAN modes (Florian Fainelli)  [Orabug: 34594265]  
  - Net Driver: Add Cypress GX3 VID=04b4 PID=3610. (Allan Chou)  [Orabug: 34594265]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.67.3.el7uek]
changelog:
  - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav)  [Orabug: 31225377]  {CVE-2017-16537} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914703]  {CVE-2020-14390} 
  - inet: use bigger hash table for IP ID generation (Eric Dumazet)  [Orabug: 33778986]  {CVE-2021-45486} 
  - ipv4: speedup ip_idents_reserve() (Eric Dumazet)  [Orabug: 33778986]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.68.1.el7uek]
changelog:
  - fs: Avoid premature clearing of capabilities (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - fs: Give dentry to inode_change_ok() instead of inode (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - nfsd: Disable NFSv2 timestamp workaround for NFSv3+ (Andreas Gruenbacher)  [Orabug: 20429825]  {CVE-2015-1350} 
  - fuse: Propagate dentry down to inode_change_ok() (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - xfs: Propagate dentry down to inode_change_ok() (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Daniel Mentz)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: Copy v4l2_window->global_alpha (Daniel Mentz)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: avoid sizeof(type) (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: fix the indentation (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: Fix timespec conversion (Daniel Mentz)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: fix missing reserved field copy in put_v4l2_create32 (Tiffany Lin)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: fix missing length copy in put_v4l2_buffer32 (Tiffany Lin)  [Orabug: 28036613]  {CVE-2017-13166} 
  - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu)  [Orabug: 31350517]  {CVE-2020-12654} 
  - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)  [Orabug: 33488041]  {CVE-2021-42739}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.68.2.el7uek]
changelog:
  - ptp: fix the race between the release of ptp_clock and cdev (Vladis Dronov)  [Orabug: 31350707]  {CVE-2020-10690} 
  - ptp: Fix pass zero to ERR_PTR() in ptp_clock_register (YueHaibing)  [Orabug: 31350707]  
  - chardev: add helper function to register char devs with a struct device (Logan Gunthorpe)  [Orabug: 31350707]  
  - ptp: create "pins" together with the rest of attributes (Dmitry Torokhov)  [Orabug: 31350707]  
  - ptp: use is_visible method to hide unused attributes (Dmitry Torokhov)  [Orabug: 31350707]  
  - ptp: do not explicitly set drvdata in ptp_clock_register() (Dmitry Torokhov)  [Orabug: 31350707]  
  - xfs: add agf freeblocks verify in xfs_agf_verify (Zheng Bin)  [Orabug: 31350923]  {CVE-2020-12655} 
  - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal)  [Orabug: 34475433]  {CVE-2022-36946} 
  - media: em28xx: initialize refcount before kref_get (Dongliang Mu)  [Orabug: 34619522]  {CVE-2022-3239}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.68.3.1.el7uek]
changelog:
  - fs/attr.c: handling case when inode does not attach with dentry structure (Alok Tiwari)  [Orabug: 34733462] [Orabug: 34798221]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.69.1.el7uek]
changelog:
  - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. (Dave Airlie)  [Orabug: 33014078]  {CVE-2021-20292} 
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)  [Orabug: 34555474]  {CVE-2022-2663} 
  - openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio)  [Orabug: 34607642]  {CVE-2022-2639} 
  - openvswitch: fix flow actions reallocation (Andrea Righi)  [Orabug: 34607642]  
  - openvswitch: fix the incorrect flow action alloc size (zhangliping)  [Orabug: 34607642]  
  - cgroup: Prevent kill_css() from being called more than once (Waiman Long)  [Orabug: 34679307]  
  - mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)  [Orabug: 34719783]  {CVE-2022-3565} 
  - vsock: Fix memory leak in vsock_connect() (Peilin Ye)  [Orabug: 34731194]  {CVE-2022-3629} 
  - vsock: split dwork to avoid reinitializations (Cong Wang)  [Orabug: 34731194]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.69.2.el7uek]
changelog:
  - btrfs: Don't submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265340]  {CVE-2019-19377} 
  - scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds)  [Orabug: 34670757]  {CVE-2022-40768} 
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)  [Orabug: 34791643]  {CVE-2022-20368} 
  - packet: in recvmsg msg_name return at least sizeof sockaddr_ll (Willem de Bruijn)  [Orabug: 34791643]  
  - fs/attr.c: handling case when inode does not attach with dentry structure (Alok Tiwari)  [Orabug: 34733462] [Orabug: 34798221] [Orabug: 34816013]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [4.1.12-124.69.5.el7uek]
changelog:
  - x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang)  [Orabug: 34798594]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.69.5.1.el7uek]
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34883048]  {CVE-2022-4378} 
  - proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34883048]  {CVE-2022-4378}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.70.1.el7uek]
changelog:
  - usb: mon: make mmapped memory read only (Tadeusz Struk)  [Orabug: 34820828]  {CVE-2022-43750} 
  - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen)  [Orabug: 34731314]  {CVE-2022-3586} 
  - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen)  [Orabug: 34731314]  {CVE-2022-3586} 
  - sch_sfb: keep backlog updated with qlen (WANG Cong)  [Orabug: 34731314]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.70.2.el7uek]
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34882781]  {CVE-2022-4378} 
  - proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34882781]  {CVE-2022-4378} 
  - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)  [Orabug: 34872056]  {CVE-2022-2663} 
  - r8152: Rate limit overflow messages (Andrew Gaul)  [Orabug: 34719940]  {CVE-2022-3594} 
  - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)  [Orabug: 34670789]  {CVE-2022-41850}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.1.el7uek]
changelog:
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)  [Orabug: 34951662]  {CVE-2022-42895} {CVE-2022-42895} 
  - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)  [Orabug: 34951546]  {CVE-2022-3628} 
  - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)  [Orabug: 34719347]  {CVE-2022-3524}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.2.el7uek]
changelog:
  - scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran)  [Orabug: 34970763]  
  - check-kabi provides exception on broken symbols (Alok Tiwari)  [Orabug: 34742865]  
  - KABI validation broken on UEK4 for symbols change (Alok Tiwari)  [Orabug: 34742865]  
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)  [Orabug: 34719829]  {CVE-2022-3564} 
  - Bluetooth: remove unneeded variable in l2cap_stream_rx (Prasanna Karthik)  [Orabug: 34719829]  {CVE-2022-3564}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.3.el7uek]
changelog:
  - USB: core: Prevent nested device-reset calls (Alan Stern)  [Orabug: 34951641]  {CVE-2022-4662} 
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)  [Orabug: 34833307]  {CVE-2022-42896} {CVE-2022-42896} 
  - Bluetooth: L2CAP: Introduce proper defines for PSM ranges (Johan Hedberg)  [Orabug: 34833307]  
  - ext4: fix data corruption caused by overlapping unaligned and aligned IO (Lukas Czerner)  [Orabug: 34190035]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.3.1.el7uek]
changelog:
  - target: Invoke transport_lun_remove_cmd() to remove  tmr form the list (Gulam Mohamed)  [Orabug: 34812128]  
  - scsi: target: core: Remove from tmr_list during LUN  unlink (Gulam Mohamed)  [Orabug: 34812128]  
  - target: Inline transport_cmd_check_stop() (Gulam Mohamed)  [Orabug: 34812128]  
  - target: Stop execution if CMD_T_STOP has been set (Gulam Mohamed)  [Orabug: 34812128]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.72.1.el7uek]
changelog:
  - target: Invoke transport_lun_remove_cmd() to remove tmr form the list (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - scsi: target: core: Remove from tmr_list during LUN unlink (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - target: Inline transport_cmd_check_stop() (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - target: Stop execution if CMD_T_STOP has been set (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)  [Orabug: 35005738]  {CVE-2022-41858} 
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma)  [Orabug: 34555529]  {CVE-2022-2873}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.72.2.el7uek]
changelog:
  - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim)  [Orabug: 34983616]  {CVE-2023-23455} 
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim)  [Orabug: 34880763]  {CVE-2022-45934}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.73.1.el7uek]
changelog:
  - mm/mincore.c: make mincore() more conservative (Jiri Kosina)  [Orabug: 35133279]  {CVE-2019-5489} 
  - mm: introduce vma_is_anonymous(vma) helper (Oleg Nesterov)  [Orabug: 35133279]  
  - Revert "Change mincore() to count "mapped" pages rather than "cached" pages" (Linus Torvalds)  [Orabug: 35124616]  
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu)  [Orabug: 35005831]  {CVE-2023-0394}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.73.2.el7uek]
changelog:
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal)  [Orabug: 35181628]  {CVE-2023-1095} 
  - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner)  [Orabug: 35181461]  {CVE-2023-1074} 
  - HID: check empty report_list in hid_validate_values() (Pietro Borrello)  [Orabug: 35181168]  {CVE-2023-1073} 
  - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (Will Deacon)  [Orabug: 35180270]  {CVE-2020-0404}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.74.1.el7uek]
changelog:
  - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)  [Orabug: 35217595]  {CVE-2023-28772} 
  - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)  [Orabug: 35181964]  {CVE-2023-26545}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.74.2.el7uek]
changelog:
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)  [Orabug: 35250098]  {CVE-2023-1513} 
  - staging: rtl8712: fix use after free bugs (Dan Carpenter)  [Orabug: 35212876]  {CVE-2022-4095} 
  - staging: rtl8712: rtl8712_cmd.c: fixed comparison to null (Juliana Rodrigues)  [Orabug: 35212876]  {CVE-2022-4095} 
  - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich)  [Orabug: 35037715]  {CVE-2023-23559}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.75.1.el7uek]
changelog:
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)  [Orabug: 35312830]  {CVE-2023-28328} 
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie)  [Orabug: 35312683]  {CVE-2023-2162} 
  - nvme: restrict management ioctls to admin (Keith Busch)  [Orabug: 34619368]  {CVE-2022-3169}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.75.2.el7uek]
changelog:
  - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)  [Orabug: 35354303]  {CVE-2023-0458} 
  - kernel/sys.c: fix potential Spectre v1 issue (Gustavo A. R. Silva)  [Orabug: 35354303]  
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)  [Orabug: 35250898]  {CVE-2023-1670} 
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim)  [Orabug: 34983586]  {CVE-2023-23454}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.75.3.el7uek]
changelog:
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)  [Orabug: 35354791]  {CVE-2023-2248}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.76.1.el7uek]
changelog:
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)  [Orabug: 35457204]  {CVE-2023-34256} 
  - igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian)  [Orabug: 35448048]  {CVE-2022-20141}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.76.2.el7uek]
changelog:
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye)  [Orabug: 35493606]  {CVE-2023-3159} 
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)  [Orabug: 35448003]  {CVE-2022-1679} 
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)  [Orabug: 35354880]  {CVE-2023-2269} 
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou)  [Orabug: 35181652]  {CVE-2023-1118} 
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)  [Orabug: 35180779]  {CVE-2022-3424}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.77.1.el7uek]
changelog:
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)  [Orabug: 35550146]  {CVE-2023-3090} 
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)  [Orabug: 35514146]  {CVE-2023-3141} 
  - fbcon: Check font dimension limits (Samuel Thibault)  [Orabug: 35493679]  {CVE-2023-3161} 
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)  [Orabug: 35250538]  {CVE-2023-1380}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.77.2.el7uek]
changelog:
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)  [Orabug: 35514108]  {CVE-2023-35824} 
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)  [Orabug: 35477742]  {CVE-2023-31084} 
  - media: dvb_frontend: fix locking issues at dvb_frontend_get_event() (Mauro Carvalho Chehab)  [Orabug: 35477742]  {CVE-2023-31084} 
  - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai)  [Orabug: 34820632]  {CVE-2022-41218} 
  - media: dvb: dmx: fixed coding style issues of spacing (devendra sharma)  [Orabug: 34820632]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.1.el7uek]
changelog:
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy)  [Orabug: 35649493]  {CVE-2023-3567}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.2.el7uek]
changelog:
  - xfrm: fix crash in XFRM_MSG_GETSA netlink handler (Vegard Nossum)  [Orabug: 35598955]  {CVE-2023-3106} 
  - netfilter: nf_tables: validate registers coming from userspace (Harshvardhan Jha)  [Orabug: 34012909]  {CVE-2022-1015}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.4.el7uek]
changelog:
  - netfilter: nf_tables: verify registers coming from userspace (Harshvardhan Jha)  [Orabug: 35776867]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.1.12-124.78.4.1.el7uek]
changelog:
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35741584]  {CVE-2023-22024}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.79.1.el7uek]
changelog:
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)  [Orabug: 35754509]  {CVE-2023-3772} 
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu)  [Orabug: 35732892]  {CVE-2023-4459} 
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu)  [Orabug: 35732764]  {CVE-2023-4387} 
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)  [Orabug: 35636313]  {CVE-2023-3776} 
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo)  [Orabug: 35609787]  {CVE-2023-35001} 
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)  [Orabug: 35382025]  {CVE-2023-2513} 
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li)  [Orabug: 35382025]  {CVE-2023-2513} 
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso)  [Orabug: 34362008]  {CVE-2022-34918}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.79.2.el7uek]
changelog:
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)  [Orabug: 35814273]  {CVE-2023-4206} 
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)  [Orabug: 35636291]  {CVE-2023-3611} 
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35741584] [Orabug: 35818110]  {CVE-2023-22024}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.80.1.el7uek]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)  [Orabug: 35814478]  {CVE-2023-40283} 
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)  [Orabug: 35814297]  {CVE-2023-4208} 
  - RDMA/core: net: fix kernel NULL error (Zhu Yanjun)  [Orabug: 35723252]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.81.1.el7uek]
changelog:
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35923500]  {CVE-2023-39193} 
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook)  [Orabug: 35924058]  {CVE-2023-45862} 
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35923470]  {CVE-2023-39192} 
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis)  [Orabug: 35707466]  {CVE-2023-4207}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.82.1.el7uek]
changelog:
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet)  [Orabug: 35924002]  {CVE-2023-42752} 
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis)  [Orabug: 35814457]  {CVE-2023-4921} 
  - ixgbe: fix large MTU request from VF (Samasth Norway Ananda)  [Orabug: 33752821]  {CVE-2021-33098}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.82.2.el7uek]
changelog:
  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)  [Orabug: 35959598]  {CVE-2020-26555} 
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello)  [Orabug: 35181560]  {CVE-2023-1077} 
  - sched/debug: Fix SCHED_WARN_ON() to return a value on !CONFIG_SCHED_DEBUG as well (Ingo Molnar)  [Orabug: 35181560]  
  - sched/debug: Add SCHED_WARN_ON() (Peter Zijlstra)  [Orabug: 35181560]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.83.1.el7uek]
changelog:
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)  [Orabug: 36229451]  {CVE-2024-0775} 
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)  [Orabug: 36229396]  {CVE-2023-51780} 
  - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)  [Orabug: 36229182]  {CVE-2021-34981}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.83.2.el7uek]
changelog:
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy)  [Orabug: 36192120]  {CVE-2022-48619} 
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)  [Orabug: 36155598]  {CVE-2023-7192}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.84.1.el7uek]
changelog:
  - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334311]  
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)  [Orabug: 35924076]  {CVE-2023-45863} 
  - kobject: Replace strncpy with memcpy (Guenter Roeck)  [Orabug: 35924076]  
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)  [Orabug: 35923517]  {CVE-2023-39194} 
  - net/xfrm: use kmemdup rather than duplicating its implementation (Andrzej Hajda)  [Orabug: 35923517]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.84.2.el7uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36251327]  {CVE-2024-1086}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.85.1.el7uek]
changelog:
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)  [Orabug: 35282809]  {CVE-2023-1989}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.86.1.el7uek]
changelog:
  - ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36574734]  
  - exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524980]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.87.1.el7uek]
changelog:
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)  [Orabug: 36654101]  {CVE-2023-6932} 
  - net: convert ip_mc_list.refcnt from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 36654101]  
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic)  [Orabug: 35810544]  {CVE-2023-4623} 
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)  [Orabug: 35754477]  {CVE-2023-1206}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.87.2.el7uek]
changelog:
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)  [Orabug: 35250827]  {CVE-2023-0590}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.88.1.el7uek]
changelog:
  - NFS: LOOKUP_DIRECTORY is also ok with symlinks (Trond Myklebust)  [Orabug: 33958156]  {CVE-2022-24448} 
  - NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)  [Orabug: 33958156]  {CVE-2022-24448}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.88.2.el7uek]
changelog:
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)  [Orabug: 36802310]  {CVE-2023-52528} 
  - usbnet/smsc75xx: silence uninitialized variable warning (Dan Carpenter)   {CVE-2023-52528} 
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo)  [Orabug: 36685663]  {CVE-2023-52880} 
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso)  [Orabug: 36530112]  {CVE-2024-26642} 
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger)  [Orabug: 36356637]  {CVE-2024-25739}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.88.3.el7uek]
changelog:
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)  [Orabug: 36806710]  {CVE-2023-52813} 
  - usbnet: sanity check for maxpacket (Oliver Neukum)  [Orabug: 36806658]  {CVE-2021-47495} 
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet)  [Orabug: 36683487]  {CVE-2024-36946} 
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg)  [Orabug: 36683466]  {CVE-2024-36941} 
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh)  [Orabug: 36683433]  {CVE-2024-36934} 
  - bna: use memdup_user to copy userspace buffers (Ivan Vecera)  [Orabug: 36683433]  {CVE-2024-36934} 
  - new helper: memdup_user_nul() (Al Viro)  [Orabug: 36683433]  {CVE-2024-36934} 
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan)  [Orabug: 36598047]  {CVE-2024-27020} 
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso)  [Orabug: 36598047]  {CVE-2024-27020} 
  - net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879159]  {CVE-2024-41090} {CVE-2024-41091}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.1.el7uek]
changelog:
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)  [Orabug: 36806731]  {CVE-2023-52881} 
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson)  [Orabug: 36806698]  {CVE-2023-52703} 
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)  [Orabug: 36806668]  {CVE-2023-52615} 
  - mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei)  [Orabug: 36806645]  {CVE-2021-47356} 
  - net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)  [Orabug: 36806628]  {CVE-2021-47310} 
  - net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)  [Orabug: 36806622]  {CVE-2021-47236} 
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo)  [Orabug: 36802300]  {CVE-2023-52477} 
  - USB: add quirk for devices with broken LPM (Alan Stern)  [Orabug: 36802300]  {CVE-2023-52477} 
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu)  [Orabug: 36544991]  {CVE-2024-26903} 
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)  [Orabug: 36531042]  {CVE-2024-26801} 
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)  [Orabug: 36530881]  {CVE-2024-26772} 
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)  [Orabug: 36530348]  {CVE-2024-26679} 
  - ppp_async: limit MRU to 64K (Eric Dumazet)  [Orabug: 36530335]  {CVE-2024-26675}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.2.el7uek]
changelog:
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)  [Orabug: 36901390]  {CVE-2023-52809} 
  - net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)  [Orabug: 36802200]  {CVE-2021-47171} 
  - i2c: i801: Don't generate an interrupt on bus reset (Jean Delvare)  [Orabug: 36792714]  {CVE-2021-47153} 
  - pid: take a reference when initializing `cad_pid` (Mark Rutland)  [Orabug: 36792687]  {CVE-2021-47118} 
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin)  [Orabug: 36691531]  {CVE-2024-36960} 
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman)  [Orabug: 36683507]  {CVE-2024-36950} 
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)  [Orabug: 36683370]  {CVE-2024-36919} 
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)  [Orabug: 36683115]  {CVE-2024-36883} 
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)  [Orabug: 36654625]  {CVE-2023-52620} 
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)  [Orabug: 36654606]  {CVE-2023-52574}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.3.el7uek]
changelog:
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)  [Orabug: 36802321]  {CVE-2023-52594} 
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)  [Orabug: 36643464]  {CVE-2024-35982} 
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)  [Orabug: 36643456]  {CVE-2024-35978} 
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli)  [Orabug: 36643323]  {CVE-2024-35944} 
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov)  [Orabug: 36643194]  {CVE-2024-35922}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.4.el7uek]
changelog:
  - isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)  [Orabug: 36940405]  {CVE-2021-47284} 
  - tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware))  [Orabug: 36940388]  {CVE-2021-46939} 
  - udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti)  [Orabug: 36806640]  {CVE-2021-47353} 
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)  [Orabug: 36802294]  {CVE-2023-52445} 
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)  [Orabug: 36802212]  {CVE-2022-48627} 
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke)  [Orabug: 36678070]  {CVE-2024-36016} 
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal)  [Orabug: 36654631]  {CVE-2023-52628} 
  - dm: call the resume method on internal suspend (Mikulas Patocka)  [Orabug: 36544879]  {CVE-2024-26880} 
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)  [Orabug: 36544783]  {CVE-2024-26859} 
  - x86, relocs: Ignore relocations in .notes section (Kees Cook)  [Orabug: 36531115]  {CVE-2024-26816} 
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)  [Orabug: 36531057]  {CVE-2024-26805} 
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang)  [Orabug: 36530913]  {CVE-2024-26778} 
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)  [Orabug: 36530519]  {CVE-2024-26704} 
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni)  [Orabug: 36530183]  {CVE-2024-26651} 
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)  [Orabug: 36530047]  {CVE-2024-26635} 
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter)  [Orabug: 36192155]  {CVE-2023-6040}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.90.1.el7uek]
changelog:
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale)  [Orabug: 36643519]  {CVE-2024-36004} 
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie)  [Orabug: 36643340]  {CVE-2024-35947} 
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba)  [Orabug: 36643269]  {CVE-2024-35935} 
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima)  [Orabug: 36643095]  {CVE-2024-35886} 
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand)  [Orabug: 36643059]  {CVE-2024-35877}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.90.2.el7uek]
changelog:
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee)  [Orabug: 36643241]  {CVE-2024-35930} 
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran)  [Orabug: 36596617]  {CVE-2024-26931} 
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 33917166]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.90.3.el7uek]
changelog:
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)  [Orabug: 37055439]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.91.1.el7uek]
changelog:
  - vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)  [Orabug: 37101899]  {CVE-2022-48804} 
  - tty: vt_ioctl: fix potential Spectre v1 (Gustavo A. R. Silva)  [Orabug: 37101899]  {CVE-2022-48804} 
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern)  [Orabug: 37101883]  {CVE-2022-48760} 
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)  [Orabug: 36165420]  {CVE-2023-6606}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.91.3.el7uek]
changelog:
  - nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro)  [Orabug: 37006239]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.92.1.el7uek]
changelog:
  - Input: MT - limit max slots (Tetsuo Handa)  [Orabug: 37029139]  {CVE-2024-45008} 
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke)  [Orabug: 36897642]  {CVE-2024-42101} 
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel)  [Orabug: 36835737]  {CVE-2024-40912} 
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern)  [Orabug: 36835711]  {CVE-2024-40904} 
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun)  [Orabug: 36825250]  {CVE-2024-39487} 
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev)  [Orabug: 36753653]  {CVE-2024-38599} 
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh)  [Orabug: 36753475]  {CVE-2024-38560} 
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson)  [Orabug: 36642150]  {CVE-2024-27436} 
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern)  [Orabug: 36598221]  {CVE-2024-27059} 
  - fat: fix uninitialized field in nostale filehandles (Jan Kara)  [Orabug: 36597870]  {CVE-2024-26973} 
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf)  [Orabug: 36544941]  {CVE-2024-26894}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.92.2.el7uek]
changelog:
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen)  [Orabug: 36984058]  {CVE-2024-39475} 
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme)  [Orabug: 36897888]  {CVE-2024-42148} 
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan)  [Orabug: 36835584]  {CVE-2024-39499} 
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)  [Orabug: 36544953]  {CVE-2024-26898}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.92.3.el7uek]
changelog:
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro)  [Orabug: 37070674]  {CVE-2024-45021} 
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue)  [Orabug: 36835819]  {CVE-2024-40943}


author: - nick.alcock@oracle.com - 0.5.0-3
changelog:
  - Include the distribution in the RPM release. [Orabug: 21211461]
  - No longer Provide: our own name. [Orabug: 21622263]


author: - nick.alcock@oracle.com - 0.7.1-1
changelog:
  - Fix CTF archive alignment and failed write() handling
    (Tomas Jedlicka) [Orabug: 27191792, 27204447]
  - Build on arm64 (Vincent Lim) [Orabug: 27418554]


author: Khalid Aziz <khalid.aziz@oracle.com> - 1.0-3
changelog:
  - Added more documentation and updated spec file to enable'
    memoptimizer daemon using a preset file but not start the daemon


