Browse code
kernels: Fix CVE-2017-12190 by updating to 4.4.106
This CVE is fixed by the following upstream commits:
commit 95d78c28b5a85bacbc29b8dba7c04babb9b0d467 (fix unbalanced page
refcounting in bio_map_user_iov)
commit 2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058 (more
bio_map_user_iov() leak fixes)
The former fix was included in linux-stable 4.4.93, and the latter fix
has now been included in 4.4.106. So update to 4.4.106 to fix the CVE.
Change-Id: Ic5ea7062611e3fbc278d6c45b5670eda7c7bbda1
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/4533
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Alexey Makhalov <amakhalov@vmware.com>
Srivatsa S. Bhat authored on 2017/12/20 06:12:50Showing 3 changed files
| ... | ... |
@@ -1,6 +1,6 @@ |
| 1 | 1 |
Summary: Linux API header files |
| 2 | 2 |
Name: linux-api-headers |
| 3 |
-Version: 4.4.104 |
|
| 3 |
+Version: 4.4.106 |
|
| 4 | 4 |
Release: 1%{?dist}
|
| 5 | 5 |
License: GPLv2 |
| 6 | 6 |
URL: http://www.kernel.org/ |
| ... | ... |
@@ -8,7 +8,7 @@ Group: System Environment/Kernel |
| 8 | 8 |
Vendor: VMware, Inc. |
| 9 | 9 |
Distribution: Photon |
| 10 | 10 |
Source0: http://www.kernel.org/pub/linux/kernel/v4.x/linux-%{version}.tar.xz
|
| 11 |
-%define sha1 linux=113e7e35bce05b82182902cdb8ce7eccd9f5682d |
|
| 11 |
+%define sha1 linux=a40a7f291d85f9373f024946faa8c7dcb6dc7fdb |
|
| 12 | 12 |
BuildArch: noarch |
| 13 | 13 |
# From SPECS/linux and used by linux-esx only |
| 14 | 14 |
# It provides f*xattrat syscalls |
| ... | ... |
@@ -29,6 +29,8 @@ find /%{buildroot}%{_includedir} \( -name .install -o -name ..install.cmd \) -de
|
| 29 | 29 |
%defattr(-,root,root) |
| 30 | 30 |
%{_includedir}/*
|
| 31 | 31 |
%changelog |
| 32 |
+* Tue Dec 19 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.106-1 |
|
| 33 |
+- Version update |
|
| 32 | 34 |
* Fri Dec 08 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.104-1 |
| 33 | 35 |
- Version update |
| 34 | 36 |
* Mon Dec 04 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.103-1 |
| ... | ... |
@@ -1,7 +1,7 @@ |
| 1 | 1 |
%global security_hardening none |
| 2 | 2 |
Summary: Kernel |
| 3 | 3 |
Name: linux-esx |
| 4 |
-Version: 4.4.104 |
|
| 4 |
+Version: 4.4.106 |
|
| 5 | 5 |
Release: 1%{?dist}
|
| 6 | 6 |
License: GPLv2 |
| 7 | 7 |
URL: http://www.kernel.org/ |
| ... | ... |
@@ -9,7 +9,7 @@ Group: System Environment/Kernel |
| 9 | 9 |
Vendor: VMware, Inc. |
| 10 | 10 |
Distribution: Photon |
| 11 | 11 |
Source0: http://www.kernel.org/pub/linux/kernel/v4.x/linux-%{version}.tar.xz
|
| 12 |
-%define sha1 linux=113e7e35bce05b82182902cdb8ce7eccd9f5682d |
|
| 12 |
+%define sha1 linux=a40a7f291d85f9373f024946faa8c7dcb6dc7fdb |
|
| 13 | 13 |
Source1: config-esx |
| 14 | 14 |
Patch0: double-tcp_mem-limits.patch |
| 15 | 15 |
Patch1: linux-4.4-sysctl-sched_weighted_cpuload_uses_rla.patch |
| ... | ... |
@@ -190,6 +190,8 @@ ln -sf linux-%{uname_r}.cfg /boot/photon.cfg
|
| 190 | 190 |
/usr/src/linux-headers-%{uname_r}
|
| 191 | 191 |
|
| 192 | 192 |
%changelog |
| 193 |
+* Tue Dec 19 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.106-1 |
|
| 194 |
+- Version update |
|
| 193 | 195 |
* Fri Dec 08 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.104-1 |
| 194 | 196 |
- Version update |
| 195 | 197 |
* Mon Dec 04 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.103-1 |
| ... | ... |
@@ -1,15 +1,15 @@ |
| 1 | 1 |
%global security_hardening none |
| 2 | 2 |
Summary: Kernel |
| 3 | 3 |
Name: linux |
| 4 |
-Version: 4.4.104 |
|
| 5 |
-Release: 2%{?kat_build:.%kat_build}%{?dist}
|
|
| 4 |
+Version: 4.4.106 |
|
| 5 |
+Release: 1%{?kat_build:.%kat_build}%{?dist}
|
|
| 6 | 6 |
License: GPLv2 |
| 7 | 7 |
URL: http://www.kernel.org/ |
| 8 | 8 |
Group: System Environment/Kernel |
| 9 | 9 |
Vendor: VMware, Inc. |
| 10 | 10 |
Distribution: Photon |
| 11 | 11 |
Source0: http://www.kernel.org/pub/linux/kernel/v4.x/%{name}-%{version}.tar.xz
|
| 12 |
-%define sha1 linux=113e7e35bce05b82182902cdb8ce7eccd9f5682d |
|
| 12 |
+%define sha1 linux=a40a7f291d85f9373f024946faa8c7dcb6dc7fdb |
|
| 13 | 13 |
Source1: config |
| 14 | 14 |
%define ena_version 1.1.3 |
| 15 | 15 |
Source2: https://github.com/amzn/amzn-drivers/archive/ena_linux_1.1.3.tar.gz |
| ... | ... |
@@ -287,6 +287,8 @@ ln -sf %{name}-%{uname_r}.cfg /boot/photon.cfg
|
| 287 | 287 |
/usr/share/perf-core |
| 288 | 288 |
|
| 289 | 289 |
%changelog |
| 290 |
+* Tue Dec 19 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.106-1 |
|
| 291 |
+- Version update |
|
| 290 | 292 |
* Tue Dec 12 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.104-2 |
| 291 | 293 |
- KAT build support |
| 292 | 294 |
* Fri Dec 08 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.104-1 |