starlingx
/
integ
Code Issues Proposed changes
StarlingX Integration and packaging
906 Commits 23 Branches 10 Tags 51 MiB
Shell 34.5%
JavaScript 23.7%
Perl 14.1%
Python 10.1%
C++ 6.4%
Other 11%
Go to file
zhao.shuai 0d33fc27e2 Upgrade kernel to version kernel-3.10.0-957.21.3.el7 
Security Fix(es):
(CVE-2019-11477)-
An integer overflow flaw was found in the way
the Linux kernel's networking subsystem processed
TCP Selective Acknowledgment (SACK) segments.
While processing SACK segments,
the Linux kernel's socket buffer (SKB) data structure
becomes fragmented. Each fragment is about TCP
maximum segment size (MSS) bytes.
To efficiently process SACK blocks, the Linux kernel merges
multiple fragmented SKBs into one, potentially overflowing
the variable holding the number of segments.
A remote attacker could use this flaw to crash the Linux kernel
by sending a crafted sequence of SACK segments on a TCP
connection with small value of TCP MSS,
resulting in a denial of service (DoS).

(CVE-2019-11478)-
Kernel: tcp: excessive resource consumption while processing SACK
blocks allows remote denial of service.

(CVE-2019-11479)-
Kernel: tcp: excessive resource consumption for TCP connections with low MSS
allows remote denial of service.

Details:
https://access.redhat.com/errata/RHSA-2019:1481
https://access.redhat.com/errata/RHSA-2019:1486
https://nvd.nist.gov/vuln/detail/

Closes-Bug: 1836685
Depends-On: https://review.opendev.org/670856
Change-Id: I150bdf60cec23058e656c60a3fdd677a14259795
Signed-off-by: zhao.shuai <zhaos@neusoft.com>
 		2019-08-06 16:43:32 +08:00
base Merge "Remove login shell and unneeded openstack users" 2019-08-02 18:07:42 +00:00
bmc/Redfishtool Add redfishtool package 2019-07-05 01:22:19 +00:00
ceph Merge "ceph: mgr-restful-plugin restarts on controller unlock" 2019-08-01 17:45:58 +00:00
config puppet-ceph: osd use filestore and configured id 2019-04-26 00:33:52 +00:00
config-files Fix System account doesn't block after invalid login attempts 2019-07-24 02:21:04 +00:00
database Remove pike/master files 2019-04-03 22:30:59 -04:00
devstack Followup opendev cleanup and test jobs 2019-04-21 09:23:19 -05:00
doc Fix the error links for integ docs 2019-07-03 09:17:48 -04:00
filesystem Add notices to Intel authored files. 2019-03-20 10:31:10 -06:00
grub Fix pxe boot fail, for incorrect folder access /pxe/EFI/ on controller-0 2019-02-12 05:06:53 +08:00
kernel Upgrade kernel to version kernel-3.10.0-957.21.3.el7 2019-08-06 16:43:32 +08:00
kubernetes Remove Cloud-Provider-Openstack from Build 2019-07-10 09:23:41 -04:00
ldap integ: Convert wrsroot -> sysadmin 2019-06-14 15:09:09 -07:00
logging Fix bug in logmgmt start check 2019-05-03 14:48:56 -04:00
monitoring collectd: list of fs to monitor not up to date 2019-07-19 14:49:21 +08:00
networking Create OVS docker image with version 2.11.0 2019-06-04 02:34:14 +08:00
python replace python-gunicorn srpm with rpm 2019-04-23 00:51:41 +00:00
releasenotes Update config 2019-01-30 16:40:20 -08:00
security Change self-signed certificate 2019-07-05 13:42:52 -04:00
storage-drivers Add hooks for python wheel generation 2018-10-23 10:35:32 -04:00
tools Fix collect script to capture VM console logs 2019-08-02 01:02:45 -04:00
utilities Revert "Container Openstackclient wrapper" 2019-06-18 20:35:27 +03:00
virt Merge "Add back kvm_timer_advance_setup.service" 2019-07-30 20:28:33 +00:00
.gitignore Add Docker Registry Token Server 2019-01-08 11:42:04 -05:00
.gitreview OpenDev Migration Patch 2019-04-19 19:52:31 +00:00
.zuul.yaml Define base tox-functional jobs 2019-05-16 17:22:59 -05:00
CONTRIBUTORS.wrs StarlingX open source release updates 2018-05-31 07:36:35 -07:00
LICENSE StarlingX open source release updates 2018-05-31 07:36:35 -07:00
README.rst Followup opendev cleanup and test jobs 2019-04-21 09:23:19 -05:00
bindep.txt Fix pylint zuul jobs failing due to libvirt-python and pkgconfig 2019-07-04 14:14:39 -05:00
centos_guest_image.inc Split image.inc across git repos 2018-08-15 16:45:36 -04:00
centos_guest_image_rt.inc Split image.inc across git repos 2018-08-15 16:45:36 -04:00
centos_iso_image.inc Add back kvm_timer_advance_setup.service 2019-07-24 16:04:58 -05:00
centos_pkg_dirs Add back kvm_timer_advance_setup.service 2019-07-24 16:04:58 -05:00
centos_pkg_dirs_installer Relocate anaconda to stx-integ/base/anaconda 2018-08-01 15:37:12 -04:00
centos_pkg_dirs_rt Relocate drbd to stx-integ/kernel/kernel-modules/drbd 2018-08-01 15:31:44 -04:00
centos_stable_docker_images.inc Create OVS docker image with version 2.11.0 2019-06-04 02:34:14 +08:00
centos_stable_wheels.inc Add libvirt module to stable wheels for image build 2019-04-04 22:54:04 -04:00
pylint.rc Adding a pylint tox and zuul job for stx-integ 2019-01-08 11:14:46 -06:00
test-requirements.txt Add default test framework 2018-06-11 13:45:22 -05:00
tox.ini Fix pylint zuul jobs failing due to libvirt-python and pkgconfig 2019-07-04 14:14:39 -05:00

README.rst

integ

StarlingX Integration