1. photon
  2. Commit f6a0f5265dd78dc3648083372a4107b5cdda5497
Browse code

kernels: Fix CVE-2017-16939 by updating to 4.4.104

Upstream commit 1137b5e2529a8f5ca8ee709288ecba3e68044df2 (ipsec: Fix
aborted xfrm policy dump crash) fixes this CVE, and has been included
in linux-stable 4.4.104. So update to 4.4.104 to get the fix.

Change-Id: I591befeb6c11f0a9294bae17f1a9f419daf6d944
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/4493
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Anish Swaminathan <anishs@vmware.com>

Srivatsa S. Bhat authored on 2017/12/09 07:23:08
Showing 3 changed files
SPECS/linux-api-headers/linux-api-headers.spec
History View file @ f6a0f52
... ... 
@@ -1,6 +1,6 @@
1 1 
 Summary:	Linux API header files
2 2 
 Name:		linux-api-headers
3 
-Version:	4.4.103
3 
+Version:	4.4.104
4 4 
 Release:	1%{?dist}
5 5 
 License:	GPLv2
6 6 
 URL:		http://www.kernel.org/
... ... 
@@ -8,7 +8,7 @@ Group:		System Environment/Kernel
8 8 
 Vendor:		VMware, Inc.
9 9 
 Distribution: Photon
10 10 
 Source0:    	http://www.kernel.org/pub/linux/kernel/v4.x/linux-%{version}.tar.xz
11 
-%define sha1 linux=e1de56b56f0a6662224d57a34b4dcd8f01b79926
11 
+%define sha1 linux=113e7e35bce05b82182902cdb8ce7eccd9f5682d
12 12 
 BuildArch:	noarch
13 13 
 # From SPECS/linux and used by linux-esx only
14 14 
 # It provides f*xattrat syscalls
... ... 
@@ -29,6 +29,8 @@ find /%{buildroot}%{_includedir} \( -name .install -o -name ..install.cmd \) -de
29 29 
 %defattr(-,root,root)
30 30 
 %{_includedir}/*
31 31 
 %changelog
32 
+*   Fri Dec 08 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.104-1
33 
+-   Version update
32 34 
 *   Mon Dec 04 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.103-1
33 35 
 -   Version update
34 36 
 *   Mon Nov 20 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.99-1
SPECS/linux/linux-esx.spec
History View file @ f6a0f52
... ... 
@@ -1,7 +1,7 @@
1 1 
 %global security_hardening none
2 2 
 Summary:       Kernel
3 3 
 Name:          linux-esx
4 
-Version:       4.4.103
4 
+Version:       4.4.104
5 5 
 Release:       1%{?dist}
6 6 
 License:       GPLv2
7 7 
 URL:           http://www.kernel.org/
... ... 
@@ -9,7 +9,7 @@ Group:         System Environment/Kernel
9 9 
 Vendor:        VMware, Inc.
10 10 
 Distribution:  Photon
11 11 
 Source0:       http://www.kernel.org/pub/linux/kernel/v4.x/linux-%{version}.tar.xz
12 
-%define sha1 linux=e1de56b56f0a6662224d57a34b4dcd8f01b79926
12 
+%define sha1 linux=113e7e35bce05b82182902cdb8ce7eccd9f5682d
13 13 
 Source1:       config-esx
14 14 
 Patch0:        double-tcp_mem-limits.patch
15 15 
 Patch1:        linux-4.4-sysctl-sched_weighted_cpuload_uses_rla.patch
... ... 
@@ -190,6 +190,8 @@ ln -sf linux-%{uname_r}.cfg /boot/photon.cfg
190 190 
 /usr/src/linux-headers-%{uname_r}
191 191
192 192 
 %changelog
193 
+*   Fri Dec 08 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.104-1
194 
+-   Version update
193 195 
 *   Mon Dec 04 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.103-1
194 196 
 -   Version update
195 197 
 *   Mon Nov 20 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.99-1
SPECS/linux/linux.spec
History View file @ f6a0f52
... ... 
@@ -1,7 +1,7 @@
1 1 
 %global security_hardening none
2 2 
 Summary:        Kernel
3 3 
 Name:           linux
4 
-Version:    	4.4.103
4 
+Version:    	4.4.104
5 5 
 Release:    	1%{?dist}
6 6 
 License:    	GPLv2
7 7 
 URL:        	http://www.kernel.org/
... ... 
@@ -9,7 +9,7 @@ Group:        	System Environment/Kernel
9 9 
 Vendor:         VMware, Inc.
10 10 
 Distribution: 	Photon
11 11 
 Source0:    	http://www.kernel.org/pub/linux/kernel/v4.x/%{name}-%{version}.tar.xz
12 
-%define sha1 linux=e1de56b56f0a6662224d57a34b4dcd8f01b79926
12 
+%define sha1 linux=113e7e35bce05b82182902cdb8ce7eccd9f5682d
13 13 
 Source1:	config
14 14 
 %define ena_version 1.1.3
15 15 
 Source2:    	https://github.com/amzn/amzn-drivers/archive/ena_linux_1.1.3.tar.gz
... ... 
@@ -280,6 +280,8 @@ ln -sf %{name}-%{uname_r}.cfg /boot/photon.cfg
280 280 
 /usr/share/perf-core
281 281
282 282 
 %changelog
283 
+*   Fri Dec 08 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.104-1
284 
+-   Version update
283 285 
 *   Mon Dec 04 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.103-1
284 286 
 -   Version update
285 287 
 *   Mon Nov 20 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.4.99-1