1. photon
  2. Commit a2041d1e2ae262c5ab994e297e1efbbdc6a47c1d
Browse code

kernels: fix several CVEs

CVE-2017-8890, CVE-2017-9074, CVE-2017-9075, CVE-2017-9076
CVE-2017-9077 and CVE-2017-9242 by version update to 4.4.71

Change-Id: I92cddd020ada450a85299c1ee3d4080be11a24e0
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/2900
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Bo Gan <ganb@vmware.com>

Alexey Makhalov authored on 2017/06/08 15:11:26
Showing 3 changed files
SPECS/linux-api-headers/linux-api-headers.spec
History View file @ a2041d1
... ... 
@@ -1,6 +1,6 @@
1 1 
 Summary:	Linux API header files
2 2 
 Name:		linux-api-headers
3 
-Version:	4.4.70
3 
+Version:	4.4.71
4 4 
 Release:	1%{?dist}
5 5 
 License:	GPLv2
6 6 
 URL:		http://www.kernel.org/
... ... 
@@ -8,7 +8,7 @@ Group:		System Environment/Kernel
8 8 
 Vendor:		VMware, Inc.
9 9 
 Distribution: Photon
10 10 
 Source0:    	http://www.kernel.org/pub/linux/kernel/v4.x/linux-%{version}.tar.xz
11 
-%define sha1 linux=857eedbb2c61efa3d8a281111d4563476f52183b
11 
+%define sha1 linux=e1803ee9837d8ef729601e71e1f51666366a3612
12 12 
 BuildArch:	noarch
13 13 
 %description
14 14 
 The Linux API Headers expose the kernel's API for use by Glibc.
... ... 
@@ -25,6 +25,8 @@ find /%{buildroot}%{_includedir} \( -name .install -o -name ..install.cmd \) -de
25 25 
 %defattr(-,root,root)
26 26 
 %{_includedir}/*
27 27 
 %changelog
28 
+*   Wed Jun 7 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.71-1
29 
+-   Update version
28 30 
 *   Thu May 25 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.70-1
29 31 
 -   Update version
30 32 
 *   Tue May 9 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.67-1
SPECS/linux/linux-esx.spec
History View file @ a2041d1
... ... 
@@ -1,15 +1,15 @@
1 1 
 %global security_hardening none
2 2 
 Summary:       Kernel
3 3 
 Name:          linux-esx
4 
-Version:       4.4.70
5 
-Release:       3%{?dist}
4 
+Version:       4.4.71
5 
+Release:       1%{?dist}
6 6 
 License:       GPLv2
7 7 
 URL:           http://www.kernel.org/
8 8 
 Group:         System Environment/Kernel
9 9 
 Vendor:        VMware, Inc.
10 10 
 Distribution:  Photon
11 11 
 Source0:       http://www.kernel.org/pub/linux/kernel/v4.x/linux-%{version}.tar.xz
12 
-%define sha1 linux=857eedbb2c61efa3d8a281111d4563476f52183b
12 
+%define sha1 linux=e1803ee9837d8ef729601e71e1f51666366a3612
13 13 
 Source1:       config-esx
14 14 
 Patch0:        double-tcp_mem-limits.patch
15 15 
 Patch1:        linux-4.4-sysctl-sched_weighted_cpuload_uses_rla.patch
... ... 
@@ -183,6 +183,9 @@ ln -sf linux-%{uname_r}.cfg /boot/photon.cfg
183 183 
 /usr/src/linux-headers-%{uname_r}
184 184
185 185 
 %changelog
186 
+*   Wed Jun 7 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.71-1
187 
+-   Fix CVE-2017-8890, CVE-2017-9074, CVE-2017-9075, CVE-2017-9076
188 
+    CVE-2017-9077 and CVE-2017-9242
186 189 
 *   Thu Jun 1 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.70-3
187 190 
 -   [feature] ACPI NFIT support (for PMEM type 7)
188 191 
 *   Wed May 31 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.70-2
SPECS/linux/linux.spec
History View file @ a2041d1
... ... 
@@ -1,15 +1,15 @@
1 1 
 %global security_hardening none
2 2 
 Summary:        Kernel
3 3 
 Name:           linux
4 
-Version:    	4.4.70
5 
-Release:    	3%{?dist}
4 
+Version:    	4.4.71
5 
+Release:    	1%{?dist}
6 6 
 License:    	GPLv2
7 7 
 URL:        	http://www.kernel.org/
8 8 
 Group:        	System Environment/Kernel
9 9 
 Vendor:         VMware, Inc.
10 10 
 Distribution: 	Photon
11 11 
 Source0:    	http://www.kernel.org/pub/linux/kernel/v4.x/%{name}-%{version}.tar.xz
12 
-%define sha1 linux=857eedbb2c61efa3d8a281111d4563476f52183b
12 
+%define sha1 linux=e1803ee9837d8ef729601e71e1f51666366a3612
13 13 
 Source1:	config
14 14 
 %define ena_version 1.1.3
15 15 
 Source2:    	https://github.com/amzn/amzn-drivers/archive/ena_linux_1.1.3.tar.gz
... ... 
@@ -274,6 +274,9 @@ ln -sf %{name}-%{uname_r}.cfg /boot/photon.cfg
274 274 
 /usr/share/perf-core
275 275
276 276 
 %changelog
277 
+*   Wed Jun 7 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.71-1
278 
+-   Fix CVE-2017-8890, CVE-2017-9074, CVE-2017-9075, CVE-2017-9076
279 
+    CVE-2017-9077 and CVE-2017-9242
277 280 
 *   Tue Jun 6 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.70-3
278 281 
 -   [feature] IPV6 netfilter NAT table support
279 282 
 *   Fri May 26 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.70-2